Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: 1n6xIM4e7hd6N4cj+wX+B9huXIlP/avFFnj+WRCpeJI=
Subject key identifier: 23:21:05:19:99:2A:63:74:67:81:4B:78:E8:E8:10:71:8C:3F:31:92
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019D26281D994CBE8BCF8CD71207BC218A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: EF
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: WA3nAxA4KQuRhfUS6D5QQIZBq3bgXN8boJy8ey/0Pwg=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1d:99:4c:be:8b:cf:8c:d7:12:07:bc:21:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=23210519992a637467814b78e8e810718c3f3192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:50:6e:4d:02:dc:0d:14:75:fb:f7:73:93:
cd:a4:c8:10:c3:6c:95:d2:04:c6:f2:79:23:6e:1b:
85:a7:9e:e3:52:2b:a8:c2:12:73:fa:c5:a7:df:47:
d4:a5:93:54:fb:65:7a:ef:37:7a:73:57:1a:f1:e3:
4f:3e:18:fc:c5:70:45:6f:bd:dd:14:f2:18:d1:b1:
e4:b6:a2:1a:7a:75:25:d7:db:02:8f:85:b1:0b:67:
34:87:30:2d:64:08:3a:72:ad:26:eb:79:ae:fb:e5:
ea:20:f4:89:87:e8:24:ed:25:5a:2a:47:2b:c9:0d:
9c:b2:cd:f5:dd:c7:56:1d:74:6d:bc:38:55:23:81:
bc:ed:eb:2d:75:d1:a7:68:bb:e1:45:eb:b1:1a:8d:
1e:3a:2b:60:9c:fe:da:d8:14:a2:38:07:93:04:5b:
32:04:52:13:7e:d5:1a:d5:35:27:35:df:8d:fb:2b:
0c:b2:e1:22:c8:31:f1:03:b6:9e:fd:4c:f2:0d:01:
c5:63:1d:8d:3d:54:82:18:ce:16:69:28:6d:ab:9b:
36:4e:02:f2:a3:52:10:ea:2b:13:83:96:2b:91:63:
3d:53:f6:41:90:47:f3:6a:ee:83:ba:34:7a:b0:d5:
b5:d9:f2:eb:dd:0c:43:07:c7:9b:1a:3a:58:64:7e:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:05:19:99:2A:63:74:67:81:4B:78:E8:E8:10:71:8C:3F:31:92
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:30:fa:56:be:7f:a3:f4:29:c6:e1:a7:39:d9:7b:87:b5:
4d:f9:60:ff:74:dd:a6:7e:2f:6b:5b:41:f5:36:b1:58:ce:87:
c8:b3:11:2f:b3:1d:45:c7:91:38:12:bc:bf:ce:92:ae:d9:14:
80:c9:21:a9:a2:60:31:ef:df:12:c5:90:ea:4d:ea:f8:6a:14:
aa:fe:7c:b3:d6:39:54:e6:11:0b:ad:4a:f9:4f:c4:cf:a5:4e:
09:48:99:a1:f7:40:ba:d5:ac:f1:2c:d2:3a:ba:60:3b:13:60:
41:fe:16:18:a1:24:e3:1d:35:f0:2a:1b:84:04:03:a6:3a:9c:
41:9b:64:b9:e3:b8:4c:55:a8:81:ae:1a:87:82:2c:6a:71:b2:
a0:f7:69:60:d4:42:c6:15:9c:15:b8:4b:b0:1d:1a:ea:30:f9:
b3:be:c2:96:12:fd:44:b1:96:43:a4:99:c9:f8:a5:24:80:38:
3a:1e:90:69:46:c3:ac:7d:f1:57:20:24:c7:ef:0f:f9:ea:a5:
36:4f:8b:bb:6b:e9:f1:dd:2a:4c:a9:6c:96:99:7f:a2:13:e1:
3f:f3:34:bc:a3:ab:c3:cf:19:e6:c6:6d:47:9a:fb:33:12:c5:
79:2d:0e:91:7a:96:5b:32:b8:1f:d0:01:5c:5c:ba:b5:07:57:
64:48:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:57 2026 by rpki-client