Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: tbWRsPAfRQGqbtk1uicb16t8UR1Bg+M4WLv0ykmW+JY=
Subject key identifier: 0F:62:F4:CA:E5:DB:EF:8B:36:0F:5B:EF:EA:65:00:90:9E:6E:87:33
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01A0CCA3AEE03072F04C51E9718A9EA1247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 05:01:14 +0000
Manifest this update: Wed 23 Sep 2026 05:01:14 +0000
Manifest next update: Thu 24 Sep 2026 05:01:14 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: etB4kZRmjPn9alpCpUNgB5ozBbB9lWd7VDWr4J+xWpM=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:ae:e0:30:72:f0:4c:51:e9:71:8a:9e:a1:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Sep 23 05:01:14 2026 GMT
Not After : Sep 24 05:01:14 2026 GMT
Subject: CN=0f62f4cae5dbef8b360f5befea6500909e6e8733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:11:4c:13:45:6d:32:bd:8d:4b:4f:08:86:
9b:ec:f5:92:f8:4c:77:34:bd:d5:d1:75:65:8a:18:
42:8b:ef:56:3f:dc:1c:f7:12:a9:aa:fd:3d:bb:e2:
a0:16:fe:f6:cd:69:e0:d5:6f:47:8a:8f:53:78:82:
82:83:0b:ca:bc:cb:58:88:9e:a6:b3:68:d1:39:d5:
65:47:a4:d7:2b:4b:fc:eb:c8:e0:bb:1e:0f:6e:5c:
66:b1:be:b6:a5:04:86:52:6d:aa:36:aa:9e:7a:ad:
d9:27:65:43:c7:8e:f3:34:8e:26:04:9a:25:5d:db:
0e:cc:b8:82:b0:86:9c:ae:f1:6d:f0:ba:be:9d:e9:
a4:03:cf:ef:7e:0b:de:a6:5d:38:35:58:64:92:e6:
35:f0:7e:1d:a1:25:f3:5a:dd:b9:ae:a1:b6:33:08:
e1:e7:5c:dd:04:0b:af:50:4a:94:9d:8c:39:d7:30:
3b:09:15:9f:90:ae:90:fd:a2:17:7f:a8:91:71:b9:
f6:45:53:45:d5:db:b1:f2:42:99:d8:d8:17:d6:b1:
99:cb:e4:a2:30:ca:ca:e0:1b:e2:4a:09:04:0c:e7:
e8:c3:e0:20:10:98:0b:5d:d1:f3:af:97:a0:ba:4d:
50:e4:ff:4b:60:10:3b:a7:dd:03:f9:19:34:5f:dd:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:F4:CA:E5:DB:EF:8B:36:0F:5B:EF:EA:65:00:90:9E:6E:87:33
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:64:af:21:25:93:65:ee:81:8a:11:37:b0:e0:55:e2:4b:
76:45:eb:a4:8a:4e:7d:0c:1d:9d:18:2d:8a:02:af:59:c3:94:
46:32:1c:17:1a:72:2b:20:83:38:0a:d8:5d:b2:db:e3:a6:fe:
94:d3:51:98:b3:02:5a:10:e6:57:bc:59:77:04:2d:11:de:b9:
64:66:b4:5c:ad:74:40:6b:18:c4:b2:85:ef:78:51:ef:1f:c9:
e3:1a:1e:fd:72:83:4a:f8:6e:83:90:11:5f:fc:4a:14:76:2e:
33:ea:74:a5:ac:aa:24:c2:15:b4:c3:bc:65:fe:df:01:d0:31:
d7:cb:c7:c9:30:e0:1a:27:df:cf:a5:ce:c7:52:b0:04:fe:3a:
a3:46:68:6a:f5:ca:2d:14:8e:96:ac:05:b1:65:aa:55:66:53:
22:1a:d4:d8:43:87:1f:df:f5:ac:af:49:d2:2f:12:52:fb:e2:
99:4b:0f:b9:bf:2c:9e:24:4e:fa:89:6a:cc:69:da:0b:89:92:
e9:d9:b7:a0:26:2f:68:d7:de:9c:e2:9c:66:dc:e6:ed:86:52:
cb:cb:21:dc:cf:b6:96:5c:d0:4f:d7:7b:09:03:0e:e9:87:94:
33:0e:24:69:11:42:0c:1c:28:4a:87:70:1c:56:2f:e8:a6:8a:
39:a1:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:32:17 2026 by rpki-client