Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: yC333eIy+59hW5TEt+M54xiDOfIEeES5yOEYxakcj+U=
Subject key identifier: FB:56:4F:A5:E5:D4:94:3E:37:5C:E5:3E:CC:C7:D3:A9:2B:F8:A6:FC
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 01A0DC1733BE0746A17E72CF3106DEAFF8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 05:01:43 +0000
Manifest this update: Sat 26 Sep 2026 05:01:43 +0000
Manifest next update: Sun 27 Sep 2026 05:01:43 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: OnPQTcn+WFI+s9ibMP9y975X5qSFLxd1jbuLUCL0dhQ=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:33:be:07:46:a1:7e:72:cf:31:06:de:af:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Sep 26 05:01:43 2026 GMT
Not After : Sep 27 05:01:43 2026 GMT
Subject: CN=fb564fa5e5d4943e375ce53eccc7d3a92bf8a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:e8:0c:16:89:26:46:bf:c1:25:66:46:8e:
e0:6b:cc:3c:71:d1:41:e2:60:f0:86:a4:23:c5:98:
f3:18:16:f5:c7:4b:36:e0:ab:0a:a6:df:6a:fd:ce:
45:43:14:41:b7:4b:46:cb:a5:41:fd:d4:f3:c1:e8:
86:c9:be:a2:c2:21:50:fc:78:4f:dc:54:d4:01:c3:
f3:da:d9:4b:b3:e6:f8:48:f3:c4:10:1e:0f:58:7f:
da:52:dc:35:73:c7:4d:30:80:62:bd:56:7c:23:5d:
80:57:4d:e2:c8:a3:44:2a:17:a2:93:ca:42:a8:2c:
10:da:75:cb:36:54:8f:7b:8c:df:a1:89:3d:4a:76:
02:26:9b:3e:6a:e6:97:ce:94:06:f1:47:31:63:0c:
c0:d7:ff:8d:b3:91:62:15:74:76:ae:ab:0d:f6:94:
7e:72:61:ba:b7:81:fe:cd:46:2a:af:2d:30:de:57:
f5:b8:23:0c:53:21:5c:ce:e7:76:f1:78:f8:f2:da:
b1:ac:63:b0:b2:de:00:4f:0c:d4:f7:6c:26:1d:6d:
a2:02:b0:35:7a:e7:4e:ca:a4:13:27:c3:52:f0:d2:
00:9d:b9:9e:b0:ea:e2:03:bf:e3:8c:3d:13:25:cf:
02:ca:bf:ed:92:2e:73:9f:ed:ed:1f:e3:44:17:d7:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:56:4F:A5:E5:D4:94:3E:37:5C:E5:3E:CC:C7:D3:A9:2B:F8:A6:FC
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a5:3f:d0:b4:2f:19:f6:7b:4c:31:58:de:7d:a9:79:8e:42:
a3:f2:46:fd:f5:30:b1:5b:12:a7:2e:7b:6c:f3:21:58:77:b7:
38:0e:c5:c6:72:23:59:6c:29:e0:81:45:61:ef:96:56:75:05:
9a:87:3d:fa:0d:d0:29:d7:e5:8b:66:af:63:31:90:0c:e7:69:
f0:71:42:c8:4a:b5:67:3e:bd:77:38:6c:a0:28:a0:7e:d9:70:
e2:52:80:d6:af:ac:84:77:b8:c9:16:99:61:23:d2:89:60:c1:
53:68:c1:ce:7a:31:fb:d9:55:de:33:84:a3:d6:5d:16:1e:2a:
b7:ec:98:b3:2e:7c:07:36:df:5c:fb:44:07:e1:97:ec:71:36:
97:4c:54:50:1c:39:94:66:af:92:63:14:7b:90:93:9d:fd:c2:
9f:94:ca:f2:3a:85:b2:8f:fc:41:6a:ae:db:51:53:91:e2:a8:
88:9c:fd:84:2b:2f:b9:e2:5a:60:c0:5e:95:77:cf:d7:42:7e:
58:8f:d3:bf:6d:4c:04:ad:58:c8:ea:4a:61:10:d0:e8:53:61:
42:36:cd:59:00:82:4b:07:2d:d1:64:64:2d:f6:d6:61:5d:e5:
92:1f:80:3c:ab:9b:5c:15:0c:4c:f5:00:57:b1:17:02:23:c8:
b0:b1:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:15:53 2026 by rpki-client