
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: JRpco0lDWZBOMCoGbH7/7ieSb0VdsoblR86ZeCr0XpU=
Subject key identifier: ED:8F:4E:83:E5:F7:5F:67:AE:C5:20:F2:86:AB:8A:62:DB:FD:8F:75
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 01A0D8A84E72F24CCDE0EBDAB5A4654413A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 1663
Signing time: Fri 25 Sep 2026 13:01:43 +0000
Manifest this update: Fri 25 Sep 2026 13:01:43 +0000
Manifest next update: Sat 26 Sep 2026 13:01:43 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: XERflP4JO3RgYzYb1osUn1wum4nGnHoKmEGY+lXsExY=)
2: URzbRc-qYA-jqGN2INzPGr3qGIs.roa (hash: pdWeMvzH737tn0fqVYH1dvD9WQjSjaeJBSWYN+4lA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:4e:72:f2:4c:cd:e0:eb:da:b5:a4:65:44:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Sep 25 13:01:43 2026 GMT
Not After : Sep 26 13:01:43 2026 GMT
Subject: CN=ed8f4e83e5f75f67aec520f286ab8a62dbfd8f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:b7:f0:9a:67:26:31:e3:1e:75:19:80:2e:
67:99:fb:28:42:c5:39:7d:93:25:46:21:67:88:d9:
87:ae:f2:08:05:b7:46:64:59:56:e2:f9:8a:4c:17:
a7:86:b8:b3:09:d7:2b:96:6d:91:93:8a:d3:68:cb:
43:c3:9d:c3:bf:d1:98:7c:b1:70:ea:22:d0:18:1f:
0f:77:93:18:a0:2b:e3:49:7e:2d:c2:df:a3:c6:5c:
55:19:8a:a8:97:cd:bc:af:d6:13:fb:dc:ed:d2:2f:
12:7f:ba:9f:13:97:20:8f:4b:b3:fb:7d:89:30:15:
78:07:82:20:46:03:d7:a4:1c:e3:1e:92:d1:68:f1:
6a:81:ba:4b:65:49:79:05:f9:1a:e6:dd:33:4f:36:
38:43:e9:75:49:7b:cf:65:ed:fc:6b:23:bb:23:99:
ed:d6:4a:3a:cd:5c:22:01:3f:e9:fd:f4:4b:09:d7:
fa:b0:a6:03:11:bd:a0:50:9a:b9:97:8e:ab:93:84:
b1:69:4f:95:a1:63:5a:4c:4a:ad:8e:10:c6:ba:f5:
5a:fd:b5:d3:e1:37:c9:6c:b8:4a:e8:06:2b:e8:9a:
de:13:3a:47:2d:61:34:40:69:d4:b7:60:26:61:32:
68:61:d4:f8:74:97:d0:fa:db:6d:d5:6b:4c:97:3a:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:4E:83:E5:F7:5F:67:AE:C5:20:F2:86:AB:8A:62:DB:FD:8F:75
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a0:03:e6:be:a5:d5:72:7d:9a:bc:50:9a:f0:6d:af:4d:b0:
30:ac:30:ff:1d:df:0d:52:79:0a:0f:28:c5:22:c8:cb:22:d9:
51:b6:43:c4:66:3c:9d:7b:07:be:a4:49:86:85:d3:af:4f:43:
ee:96:1d:de:1a:28:61:1c:a3:de:f2:2f:20:8b:2e:fd:1b:2a:
94:2c:7c:25:0c:ac:bd:16:91:c0:77:ac:40:be:61:f8:c7:fa:
62:81:b1:4d:54:04:17:14:a2:28:77:ed:69:92:b6:09:58:b9:
90:19:60:fa:45:18:98:51:b0:99:1c:c5:9d:ed:6a:fe:e8:74:
a8:04:b9:01:d9:d5:9e:2d:02:32:3e:b0:e3:18:12:c8:2e:70:
2f:85:be:29:76:ad:ba:8a:4d:d0:ea:ea:80:32:8d:dc:ad:48:
f8:73:e7:ab:b1:89:10:7d:61:b9:a5:98:c8:e4:eb:bc:e5:8f:
18:62:20:61:90:f8:ac:20:bb:7a:22:92:25:e6:9b:0f:47:e1:
1c:82:a1:b0:14:41:bb:14:52:35:e4:c5:15:e2:d9:36:03:9e:
7d:f0:ed:67:3b:14:dc:18:f0:4b:46:61:e0:43:2c:57:dc:d0:
6e:a7:41:d4:93:81:2c:d4:70:a0:42:f3:49:af:1b:2b:c0:66:
3b:8d:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:34 2026 by rpki-client