Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: YxfS0X/Et8NxwimSQ0GGzFR5om+spMpsABFHpbS2l+Q=
Subject key identifier: 09:24:60:C0:C1:EF:5A:B8:A9:88:BA:12:B9:7F:4D:97:C9:CA:9A:E5
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 01A0DCBBF545348D8554228F8C612216ED23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 02DC
Signing time: Sat 26 Sep 2026 08:01:40 +0000
Manifest this update: Sat 26 Sep 2026 08:01:40 +0000
Manifest next update: Sun 27 Sep 2026 08:01:40 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: OL6pfZJctXgJayyqXHJ4lShKsAGNCr24GnwnQod7wRg=)
2: Ledh3ytks4vVvPQKVNZW-CywdME.asa (hash: wEkbzVsTHAI/hZOOB5TftO5Vy9bP7K1YrPCHKKhTjg8=)
3: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:f5:45:34:8d:85:54:22:8f:8c:61:22:16:ed:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Sep 26 08:01:40 2026 GMT
Not After : Sep 27 08:01:40 2026 GMT
Subject: CN=092460c0c1ef5ab8a988ba12b97f4d97c9ca9ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:75:9b:1e:72:29:50:89:24:de:76:83:5d:c4:
c6:cd:aa:5e:9c:ac:60:73:3b:b5:d1:2b:40:9e:13:
e1:7f:d9:48:97:82:ca:25:00:1f:70:d0:35:fb:07:
e8:ae:b9:ce:8b:16:e9:a0:8a:7d:c7:c1:16:3c:f7:
f3:00:1c:df:5a:b7:a4:f5:ed:90:88:b3:68:50:22:
54:17:e2:30:d3:55:24:39:77:8c:c7:98:2f:35:ff:
46:19:f2:81:69:c6:d9:bb:8d:85:5d:0a:87:33:97:
4b:f8:dd:db:7c:27:c5:d5:06:0b:d0:86:3e:de:7b:
c4:66:eb:ff:cf:d0:ef:9f:d9:2f:29:f6:f5:bc:68:
06:36:15:f9:b6:29:47:7f:26:c1:42:8b:cb:fc:dd:
e6:e9:07:fd:1e:ef:0d:20:83:4b:9d:ff:4c:c1:82:
2f:5d:39:38:4f:e3:17:df:e3:88:04:9a:cc:2b:e4:
f2:2a:21:fb:e2:d9:d2:7c:59:52:e7:6c:f0:f1:e5:
91:c0:66:55:8c:7a:36:7f:34:0c:2b:ef:c4:db:15:
53:2d:e7:99:cb:af:84:4c:19:18:33:8d:df:a0:65:
25:70:30:c2:ef:c6:f7:db:04:ec:d0:7b:a8:20:25:
a3:7c:1f:e2:d6:b7:a1:9e:3d:8e:66:5e:79:f4:09:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:24:60:C0:C1:EF:5A:B8:A9:88:BA:12:B9:7F:4D:97:C9:CA:9A:E5
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:87:31:45:62:58:32:c4:79:2a:24:aa:e4:0d:02:a4:ab:
a1:f0:c1:70:ab:e1:35:8b:a9:fa:09:d3:b6:ad:da:1a:2f:84:
6f:21:dd:80:de:ea:e8:18:94:5f:90:6c:5c:54:48:fd:96:25:
af:40:34:d1:4b:60:69:a2:15:14:ae:fb:ce:f7:ef:4e:da:1c:
a2:c0:9b:f2:d5:f1:67:8c:75:5d:53:26:3a:58:40:35:24:3a:
b2:eb:c6:fe:97:52:92:df:05:fc:01:ff:16:90:25:3a:17:c3:
03:c6:bc:1f:34:64:a9:51:a0:7a:06:d2:f4:d7:58:19:38:54:
a9:aa:a4:c7:4b:37:98:e0:45:05:1d:8d:28:22:ec:9f:a3:60:
59:21:b9:a3:d7:ae:1f:ec:34:3c:66:db:e4:f0:6d:78:78:75:
a8:5a:cd:61:4e:95:79:cc:1e:00:10:60:dc:42:b0:3a:83:f1:
a2:ea:8a:33:a7:01:93:87:91:69:50:13:be:97:3b:c1:48:81:
b8:eb:4d:46:80:d7:b5:d5:1a:88:2a:c6:c2:78:48:5e:5c:0b:
72:cf:24:56:5a:2a:5a:3f:2b:28:34:e2:f2:82:e1:e8:5b:06:
91:61:69:e1:d1:2e:12:09:c0:ff:5b:d8:d2:b8:80:af:be:0a:
34:c5:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:29 2026 by rpki-client