Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: I/VSJx43PEkND8AlEXeF8wup1ZkEV52kp2UTBmtguqw=
Subject key identifier: A5:CA:44:92:12:99:2C:71:85:1C:D0:83:95:64:31:38:03:51:91:E4
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019D27DF67E18F21A3C4061D57D733513F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: GSynKDDJ4MeAdzg6CO4+7PNcpztO4gGV62kt4SihuKM=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:67:e1:8f:21:a3:c4:06:1d:57:d7:33:51:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=a5ca449212992c71851cd08395643138035191e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:d7:e6:f0:81:c8:a6:fb:ac:f5:f5:82:9b:
39:93:ff:fc:f8:fc:5a:49:7a:f1:1b:a5:6f:77:ab:
f5:e0:80:7b:7f:3f:16:d0:9d:5a:ae:0d:f2:58:2e:
3f:8b:b2:22:be:b0:82:5e:7a:71:94:56:41:7f:e0:
20:4d:39:0b:bd:29:9e:d1:a7:90:cf:09:28:b4:d5:
5f:76:34:c8:10:e8:42:70:71:66:a9:a1:78:de:6a:
5c:97:1b:ab:2d:86:a6:0c:f3:1f:ed:71:00:b3:21:
6a:64:a9:23:51:96:5a:4a:22:01:84:6d:16:69:ca:
19:ea:fd:c8:e2:ff:66:2c:1b:3f:bf:6e:82:70:3b:
8e:45:50:43:ac:ec:eb:37:f1:ce:12:3a:00:3c:fb:
fc:37:0c:8c:23:fe:fc:35:25:29:ac:e9:fe:b8:d7:
ae:db:96:ed:9c:73:d1:c4:e1:8d:1a:1a:18:21:bc:
a5:f9:e5:74:8a:c3:0c:52:3d:45:82:7f:a1:3a:6b:
f0:08:0d:69:9e:dc:82:1d:7a:0c:05:3c:8d:ee:03:
b9:8b:a6:9a:09:90:cd:b1:91:c0:a5:d8:e3:a6:d3:
d4:e8:a0:01:1b:1c:b0:d5:4c:2b:2d:25:a8:92:65:
5a:3b:dc:e3:9a:bb:e7:5c:88:23:aa:ed:8d:e4:4f:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:44:92:12:99:2C:71:85:1C:D0:83:95:64:31:38:03:51:91:E4
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:d2:4e:a5:eb:a6:79:f6:45:e5:9f:91:f4:bc:be:0c:07:
31:d5:e8:6a:e4:8d:7e:9b:c4:56:7b:da:52:fa:71:8d:af:44:
81:29:e2:a2:76:29:47:38:ab:4d:ba:b4:a7:d8:32:33:30:b7:
4f:58:1b:7d:77:e6:05:da:91:3e:fa:59:66:79:8a:42:7e:91:
5a:5c:91:4b:bc:ea:be:92:11:ce:1d:26:61:f9:39:60:a3:50:
76:69:91:20:3f:29:f6:05:9f:76:c7:b8:a2:57:d4:01:01:7f:
d1:31:f8:53:82:c2:35:f5:b9:19:16:cd:2e:2d:6c:d6:fc:84:
01:ce:c0:65:3a:a9:71:ca:11:7f:02:f6:df:f7:92:05:28:00:
7c:00:c8:c5:51:e7:cf:ef:99:19:0a:4b:b8:12:cb:1f:5b:3e:
f3:73:98:a8:98:e7:0a:d7:27:42:31:33:30:d9:24:7a:a9:d3:
99:d6:75:a8:dc:5d:3f:d9:19:82:b7:d7:18:9e:e6:76:a5:40:
bd:1e:71:8a:0b:5f:8c:0c:70:42:01:4f:e3:c5:24:2c:dd:8f:
d3:43:41:43:c0:c5:5e:e4:d8:fe:bd:26:00:6f:1b:cb:05:d4:
b0:98:b4:f7:30:69:2e:6f:a5:b9:5e:62:97:ab:c6:64:b0:46:
02:0a:aa:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32fhjyGjxAYdV9czUT8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjYwMzI2MDIwMDQ1WhcNMjYwMzI3MDIwMDQ1WjAzMTEwLwYDVQQD
EyhhNWNhNDQ5MjEyOTkyYzcxODUxY2QwODM5NTY0MzEzODAzNTE5MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwvX5vCByKb7rPX1gps5k//8+Pxa
SXrxG6Vvd6v14IB7fz8W0J1arg3yWC4/i7IivrCCXnpxlFZBf+AgTTkLvSme0aeQ
zwkotNVfdjTIEOhCcHFmqaF43mpclxurLYamDPMf7XEAsyFqZKkjUZZaSiIBhG0W
acoZ6v3I4v9mLBs/v26CcDuORVBDrOzrN/HOEjoAPPv8NwyMI/78NSUprOn+uNeu
25btnHPRxOGNGhoYIbyl+eV0isMMUj1Fgn+hOmvwCA1pntyCHXoMBTyN7gO5i6aa
CZDNsZHApdjjptPU6KABGxyw1UwrLSWokmVaO9zjmrvnXIgjqu2N5E/5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXKRJISmSxxhRzQg5VkMTgDUZHkMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjPSTqXr
pnn2ReWfkfS8vgwHMdXoauSNfpvEVnvaUvpxja9EgSnionYpRzirTbq0p9gyMzC3
T1gbfXfmBdqRPvpZZnmKQn6RWlyRS7zqvpIRzh0mYfk5YKNQdmmRID8p9gWfdse4
olfUAQF/0TH4U4LCNfW5GRbNLi1s1vyEAc7AZTqpccoRfwL23/eSBSgAfADIxVHn
z++ZGQpLuBLLH1s+83OYqJjnCtcnQjEzMNkkeqnTmdZ1qNxdP9kZgrfXGJ7mdqVA
vR5xigtfjAxwQgFP48UkLN2P00NBQ8DFXuTY/r0mAG8bywXUsJi09zBpLm+luV5i
l6vGZLBGAgqqlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:59 2026 by rpki-client