Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: cRo9XcPFsigfTML3HDzCxLyOPtyWvu3wTunzp+OCXVQ=
Subject key identifier: B5:53:A6:38:DF:7E:96:CD:1D:83:00:2B:08:84:8A:C8:9C:47:1C:FD
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019F91DAF4AE21596DDE077656239A9AB3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:13 +0000
Manifest this update: Fri 24 Jul 2026 02:01:13 +0000
Manifest next update: Sat 25 Jul 2026 02:01:13 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: enVneQ5yt88zyNcXF7gocta/XAKAZffUhmn05oHnWMY=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:f4:ae:21:59:6d:de:07:76:56:23:9a:9a:b3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jul 24 02:01:13 2026 GMT
Not After : Jul 25 02:01:13 2026 GMT
Subject: CN=b553a638df7e96cd1d83002b08848ac89c471cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:df:79:48:57:89:f2:5e:52:b5:62:88:15:
70:d5:05:f4:b9:de:45:0a:15:94:0a:40:77:e3:11:
91:c2:97:ff:7a:3f:58:e7:69:6b:45:51:1a:a6:f4:
ba:8b:15:61:71:b1:74:f6:58:60:7f:a7:85:8a:ef:
05:62:e6:53:6e:2f:dc:60:59:a3:98:63:d4:b7:5c:
29:02:3a:8a:1c:5c:cd:02:a2:b9:f3:1e:85:74:35:
a7:33:93:91:92:fa:ad:5f:da:da:a5:60:30:75:7e:
4b:c8:dd:e7:b9:0a:20:92:2a:f0:97:f0:e3:08:99:
c7:51:ee:7f:c5:2a:24:f3:08:19:30:7f:97:5f:0b:
a2:ba:64:64:36:4e:e3:fb:be:8f:48:c5:10:de:7e:
c5:5a:f8:85:04:41:bb:6c:23:8c:e1:8a:92:f3:99:
87:c5:1b:de:76:4a:a4:ed:98:ad:3b:7d:c2:61:e6:
76:60:39:95:67:ac:8e:94:3c:d3:57:29:b1:bd:43:
4a:d4:24:3c:7a:28:96:16:a7:22:66:b9:61:74:4c:
c7:fc:5b:ee:28:dd:f4:5f:1c:9f:de:c0:ca:af:af:
0b:62:ee:96:c4:4b:f9:b4:c6:09:54:31:e2:fc:1d:
5c:92:a0:1e:32:c1:cf:33:4c:ce:08:d6:28:89:cf:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:A6:38:DF:7E:96:CD:1D:83:00:2B:08:84:8A:C8:9C:47:1C:FD
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ed:0a:df:43:e4:a0:8f:65:96:4d:6a:f9:f6:42:a3:06:e2:
9e:12:b1:cf:59:0f:35:ea:9d:62:3e:82:92:25:cc:9e:3d:65:
cb:2b:77:54:af:02:ea:07:e4:0e:09:74:e6:dc:aa:af:e8:72:
d8:e7:10:c0:e0:b9:f3:b4:dd:e0:9c:40:20:ca:5b:54:94:f1:
0a:7b:fd:a7:5b:a1:71:ce:ea:14:8c:b5:15:8a:6c:4a:0e:14:
12:de:13:67:c1:c5:b5:35:20:28:14:fc:60:cb:76:4a:93:3e:
dc:ea:0c:f1:24:74:b7:4a:b0:f1:4e:68:d7:30:c0:84:36:37:
d9:91:71:97:90:07:f1:b7:28:4e:27:23:86:d7:d3:c5:41:88:
c7:8d:09:8b:75:8b:81:db:17:22:8f:7f:fe:84:4e:d7:69:50:
00:55:f5:34:28:c7:85:d6:24:45:45:f5:eb:10:e1:74:ea:3f:
b0:40:f7:6f:e4:2f:38:3e:3e:03:59:a9:15:f8:27:1a:cc:a0:
97:31:50:d9:88:6f:fb:7f:ad:4d:f3:b3:9e:36:1b:e0:64:06:
37:c2:50:c6:22:f0:f1:14:96:81:6f:08:fd:75:b7:4d:c7:63:
61:c4:8f:df:7d:ae:36:3d:67:b3:be:82:82:c7:c8:46:a1:ca:
1e:79:97:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2vSuIVlt3gd2ViOamrPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjYwNzI0MDIwMTEzWhcNMjYwNzI1MDIwMTEzWjAzMTEwLwYDVQQD
EyhiNTUzYTYzOGRmN2U5NmNkMWQ4MzAwMmIwODg0OGFjODljNDcxY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QTfeUhXifJeUrViiBVw1QX0ud5F
ChWUCkB34xGRwpf/ej9Y52lrRVEapvS6ixVhcbF09lhgf6eFiu8FYuZTbi/cYFmj
mGPUt1wpAjqKHFzNAqK58x6FdDWnM5ORkvqtX9rapWAwdX5LyN3nuQogkirwl/Dj
CJnHUe5/xSok8wgZMH+XXwuiumRkNk7j+76PSMUQ3n7FWviFBEG7bCOM4YqS85mH
xRvedkqk7ZitO33CYeZ2YDmVZ6yOlDzTVymxvUNK1CQ8eiiWFqciZrlhdEzH/Fvu
KN30Xxyf3sDKr68LYu6WxEv5tMYJVDHi/B1ckqAeMsHPM0zOCNYoic/c4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVTpjjffpbNHYMAKwiEisicRxz9MB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACe0K30Pk
oI9llk1q+fZCowbinhKxz1kPNeqdYj6CkiXMnj1lyyt3VK8C6gfkDgl05tyqr+hy
2OcQwOC587Td4JxAIMpbVJTxCnv9p1uhcc7qFIy1FYpsSg4UEt4TZ8HFtTUgKBT8
YMt2SpM+3OoM8SR0t0qw8U5o1zDAhDY32ZFxl5AH8bcoTicjhtfTxUGIx40Ji3WL
gdsXIo9//oRO12lQAFX1NCjHhdYkRUX16xDhdOo/sED3b+QvOD4+A1mpFfgnGsyg
lzFQ2Yhv+3+tTfOznjYb4GQGN8JQxiLw8RSWgW8I/XW3TcdjYcSP332uNj1ns76C
gsfIRqHKHnmXRw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:47 2026 by rpki-client