Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: EFa5R+QfmmVfdxrVBngVAsf/4DshpQfgrl0n1wLat8w=
Subject key identifier: 92:AD:7A:2A:11:FE:E0:5A:61:B4:3B:D4:F4:8A:C2:F5:06:5D:3A:1D
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019F8EA29776F11E27959AEE3C96E38FB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 022F
Signing time: Thu 23 Jul 2026 11:00:48 +0000
Manifest this update: Thu 23 Jul 2026 11:00:48 +0000
Manifest next update: Fri 24 Jul 2026 11:00:48 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: 26p4111g9N/FhCUtCPa5PD0INJXyNTRA5Y43yZ0PZ2U=)
2: Ledh3ytks4vVvPQKVNZW-CywdME.asa (hash: wEkbzVsTHAI/hZOOB5TftO5Vy9bP7K1YrPCHKKhTjg8=)
3: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:97:76:f1:1e:27:95:9a:ee:3c:96:e3:8f:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Jul 23 11:00:48 2026 GMT
Not After : Jul 24 11:00:48 2026 GMT
Subject: CN=92ad7a2a11fee05a61b43bd4f48ac2f5065d3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:42:66:f0:d8:ad:60:50:29:a9:64:46:25:
de:e4:88:66:c5:4e:58:b8:6c:9e:4b:b6:2b:c9:20:
f8:07:43:e6:48:dc:1f:cb:c8:e6:58:7d:d1:fc:22:
93:8a:1b:11:e5:8a:8c:d2:fe:f1:eb:f2:c5:d7:e4:
9b:29:bd:88:8c:1b:e5:01:76:9a:f8:bb:87:df:10:
39:73:12:c6:7c:96:41:d0:29:4d:6b:e8:9d:97:33:
7b:3c:a1:15:a4:9b:c1:3d:fa:79:d2:ee:00:38:50:
cb:8a:c6:56:96:ba:9b:5e:e1:7e:53:55:1e:26:5e:
74:a4:7e:a2:5d:a8:0a:cd:a3:14:84:bc:a6:58:e2:
85:db:df:e3:d8:d7:7c:ca:fb:a1:7c:1d:18:8a:15:
d9:98:cd:44:1d:6e:be:0e:14:13:2d:1c:b4:fe:30:
88:22:24:a2:ff:26:9d:cf:3d:70:92:df:8a:09:e3:
fe:24:03:4b:62:be:d2:6b:08:4f:6a:0d:53:42:8e:
ba:24:df:e7:26:90:cc:7d:67:f4:b4:aa:d3:08:df:
9d:6c:80:07:96:8b:be:f8:6d:a9:86:e8:f3:fa:8a:
7a:b2:0d:62:75:4d:21:e3:64:cd:8c:b2:01:c9:ea:
33:57:81:58:f6:ff:44:5c:56:88:fe:fa:34:30:72:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:7A:2A:11:FE:E0:5A:61:B4:3B:D4:F4:8A:C2:F5:06:5D:3A:1D
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:0e:3a:ec:e2:be:da:dd:24:9f:b8:7d:36:11:d1:df:3d:
36:7a:6f:4d:7e:8b:07:35:2f:ba:66:f7:0a:97:95:23:8d:99:
1f:a3:bc:bf:e2:d0:8e:c5:30:57:da:c3:87:05:e5:af:44:81:
09:77:e2:6a:c4:3b:c1:32:12:d4:25:42:99:22:76:f9:ea:32:
29:14:37:26:55:9d:65:1b:d5:5d:b7:fa:d2:db:34:bb:a4:c6:
53:0d:14:71:ee:fa:e3:dd:df:5a:8e:6b:8f:a0:bc:2d:ff:32:
88:97:10:a2:9c:ec:e1:07:c6:88:2d:b5:39:ce:02:18:80:d2:
c1:c1:be:6e:34:8b:50:8e:f0:ee:1b:4e:b3:4d:a7:53:57:a6:
d3:9b:c4:57:fa:1d:49:46:d2:e6:f5:69:d1:be:7e:ef:dc:5f:
64:1b:cb:79:a0:2a:43:86:6d:7e:9f:9a:cd:22:5d:26:11:3c:
dc:df:fa:d0:98:e9:9d:02:8b:86:1f:6c:d8:ce:9f:8f:02:b4:
f4:9d:99:6e:a6:8f:39:d3:b1:29:45:8f:d4:75:7f:87:91:30:
29:d1:e7:2d:cd:38:46:81:a5:08:91:9c:f5:e2:7e:ea:bf:e5:
d1:ee:32:68:f8:6e:cf:e6:9f:19:60:6c:d6:c0:46:e8:d0:cd:
25:d7:a1:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oopd28R4nlZruPJbjj7QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjMwM2U5NjgwMzc5M2MzYzQ4Y2RhNTIwN2E0MWU3NGU1
MGNiN2MwHhcNMjYwNzIzMTEwMDQ4WhcNMjYwNzI0MTEwMDQ4WjAzMTEwLwYDVQQD
Eyg5MmFkN2EyYTExZmVlMDVhNjFiNDNiZDRmNDhhYzJmNTA2NWQzYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5opCZvDYrWBQKalkRiXe5IhmxU5Y
uGyeS7YrySD4B0PmSNwfy8jmWH3R/CKTihsR5YqM0v7x6/LF1+SbKb2IjBvlAXaa
+LuH3xA5cxLGfJZB0ClNa+idlzN7PKEVpJvBPfp50u4AOFDLisZWlrqbXuF+U1Ue
Jl50pH6iXagKzaMUhLymWOKF29/j2Nd8yvuhfB0YihXZmM1EHW6+DhQTLRy0/jCI
IiSi/yadzz1wkt+KCeP+JANLYr7SawhPag1TQo66JN/nJpDMfWf0tKrTCN+dbIAH
lou++G2phujz+op6sg1idU0h42TNjLIByeozV4FY9v9EXFaI/vo0MHJ93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKteioR/uBaYbQ71PSKwvUGXTodMB8GA1UdIwQY
MBaAFNsjA+loA3k8PEjNpSB6QedOUMt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTIt
NDVmMmFmYzkxZDJkLzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTItNDVmMmFmYzkxZDJk
LzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgEOOuzi
vtrdJJ+4fTYR0d89NnpvTX6LBzUvumb3CpeVI42ZH6O8v+LQjsUwV9rDhwXlr0SB
CXfiasQ7wTIS1CVCmSJ2+eoyKRQ3JlWdZRvVXbf60ts0u6TGUw0Uce76493fWo5r
j6C8Lf8yiJcQopzs4QfGiC21Oc4CGIDSwcG+bjSLUI7w7htOs02nU1em05vEV/od
SUbS5vVp0b5+79xfZBvLeaAqQ4Ztfp+azSJdJhE83N/60JjpnQKLhh9s2M6fjwK0
9J2ZbqaPOdOxKUWP1HV/h5EwKdHnLc04RoGlCJGc9eJ+6r/l0e4yaPhuz+afGWBs
1sBG6NDNJdehKQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:10 2026 by rpki-client