Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: w7UegHSTyy6/vykIirqZ2RTotJno8uJsmt6nqP0Q+k4=
Subject key identifier: D2:F1:1F:D3:2A:47:04:48:D5:DD:11:5F:F9:A2:9D:8D:9E:AF:CC:F3
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 019D25F1D2B15E129F5D8C58A9FA909CFA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: ptLm+2hVzdrQIfea2fAhb/JHfbYizt6Z0k8XqezqTWQ=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d2:b1:5e:12:9f:5d:8c:58:a9:fa:90:9c:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=d2f11fd32a470448d5dd115ff9a29d8d9eafccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:6b:9f:c4:50:b2:4d:69:8b:4e:30:d1:2d:
88:bc:72:2a:d9:43:fd:68:96:9b:71:ae:6e:16:07:
18:c6:5c:af:4e:54:27:41:e9:84:c0:f1:e9:2f:b0:
f8:92:f6:75:49:52:4a:dc:55:43:d3:0f:0c:84:63:
69:ac:f0:19:b1:00:a9:aa:77:ed:6b:90:f1:66:d1:
22:5f:7d:d8:37:72:59:7b:6b:29:8a:28:3e:8b:fa:
78:89:b9:26:1c:4a:2c:2f:1b:4b:58:96:6c:58:44:
3f:4e:98:7e:d3:4d:2b:f1:9a:2c:73:05:a2:1a:a7:
4c:91:b6:1d:79:a5:23:f8:3c:0c:99:79:d2:89:a9:
79:95:08:b4:ca:8c:c7:22:9b:13:15:67:db:41:a7:
82:99:6a:de:ba:15:88:c0:5e:fa:0f:eb:55:74:7e:
00:c5:df:e8:05:87:3a:94:e7:40:10:d4:77:a0:ef:
21:db:df:b3:28:71:c5:4c:09:35:44:d7:b4:ae:1f:
dc:be:87:48:ce:bf:2a:b0:04:93:a0:f8:e3:fd:49:
d8:98:22:63:21:b7:5a:34:26:c9:ec:47:b7:91:ff:
50:94:89:f2:6f:d3:ef:5e:76:ed:37:17:5d:01:be:
3c:44:5d:83:a2:84:e7:6f:77:56:67:9d:2c:ff:b5:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:1F:D3:2A:47:04:48:D5:DD:11:5F:F9:A2:9D:8D:9E:AF:CC:F3
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:20:f9:5e:dc:27:e7:68:59:87:97:47:1e:16:5f:b4:bb:eb:
45:98:21:e7:aa:24:66:59:2c:c7:06:01:c4:2b:f7:69:8d:a3:
eb:0d:9e:ed:c4:69:60:22:a8:e7:31:d1:05:b2:bc:19:49:75:
78:20:c2:ae:dc:d7:85:41:24:a9:2e:d1:f6:b0:09:cc:46:e0:
0f:6f:c0:02:86:35:07:d4:7e:22:48:66:58:02:79:c5:66:b7:
f0:02:e9:97:73:d7:2d:41:19:99:a3:d5:8f:e2:05:c9:7e:bc:
e7:a5:e7:3c:24:1a:44:34:4d:d1:87:ba:da:15:00:6a:62:5a:
7f:84:44:a4:73:43:38:49:1d:3d:be:ce:ad:9a:f4:3c:e3:a9:
dc:62:e9:a6:f0:fc:74:1f:82:cc:8e:33:6c:25:51:2b:ce:a0:
d9:12:07:ee:a0:5a:a4:d6:a6:57:d4:46:e0:08:52:db:37:80:
d2:ee:69:41:d1:ea:68:40:b6:1f:74:93:7f:1e:bf:29:ee:49:
45:ee:ec:64:df:b8:ab:d3:d1:08:2e:6e:c5:3c:92:7d:ec:2d:
ba:4d:48:53:fa:2f:2e:9b:6e:d6:31:72:40:3f:6f:86:3d:c9:
c6:f0:e4:de:ef:f6:8c:5f:bb:3a:cc:9b:c8:39:25:49:22:f6:
ed:6d:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client