Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: ZiimogFwv7OdZ/EMxbQ3bH1D2T2IlgG9niU+JP/j4Hg=
Subject key identifier: AF:01:A5:C8:B5:53:19:BB:44:52:AB:8E:90:A2:1C:81:1C:90:CA:83
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 019D27048A0FAB69C2E19FEB3A6F2CBA5966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 046F
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: UEn9tB9Woy6RPXqS+xHvCoOHgrRikviMfdUgKPxgHBw=)
2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8a:0f:ab:69:c2:e1:9f:eb:3a:6f:2c:ba:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=af01a5c8b55319bb4452ab8e90a21c811c90ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:38:4b:5b:1b:b3:af:09:d7:61:f8:2b:ff:
70:a2:28:0a:95:56:22:ed:8b:d0:18:0b:85:3d:8d:
ba:1f:dd:1b:e5:11:09:3f:e1:c6:f8:49:4c:14:65:
a0:18:82:6d:4b:88:20:aa:52:95:c6:ab:a1:30:b9:
90:8e:8e:77:b1:9e:89:7a:22:dc:53:b9:ed:99:39:
d6:bf:4d:d3:0c:6e:35:6e:a2:c5:d4:5a:85:95:f6:
fd:63:3e:54:cd:8b:9d:af:46:6e:62:67:cf:61:07:
44:84:4f:e0:42:a7:be:3e:3e:2a:73:96:f5:28:b8:
70:bb:d9:4a:d0:89:0e:38:84:5b:26:36:d9:d3:35:
2e:cb:9a:90:46:cc:83:be:3a:a9:15:88:41:bd:2e:
d1:3b:7f:da:1d:2f:a1:5c:36:9f:ad:3e:50:07:90:
58:f2:02:ea:39:e8:5f:77:1a:9c:4c:c2:2a:4a:d1:
7f:31:47:d6:57:04:42:f1:b2:90:d3:67:b0:97:b7:
58:09:24:db:49:d5:c2:70:18:67:6e:91:04:62:e4:
be:2b:98:09:d7:8e:5e:8f:b7:ef:26:f7:e4:a3:f3:
01:5f:24:27:30:0c:f2:dd:f6:09:9a:8e:71:c7:af:
62:54:b5:94:69:ea:a6:26:8f:44:19:14:ea:ff:a1:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:01:A5:C8:B5:53:19:BB:44:52:AB:8E:90:A2:1C:81:1C:90:CA:83
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7c:32:61:47:75:a6:ac:20:c0:cc:79:92:e1:40:79:2f:0c:
c1:0b:5e:a6:71:0c:68:97:63:40:96:73:b5:bb:a7:df:76:bf:
9f:85:0a:e7:98:5f:db:94:5c:91:58:76:a4:b7:7e:b4:06:18:
f3:3d:ee:b2:af:d9:c7:b2:26:8f:fc:d4:e1:fe:99:67:3b:95:
c4:0d:8c:52:74:48:42:1b:7d:e9:b7:bd:80:aa:9f:3b:93:fd:
6a:af:91:36:4e:a9:82:92:27:f5:04:b1:55:79:f4:a2:9d:b4:
1f:37:f9:49:5c:cf:1d:2f:90:8f:ee:40:f3:8c:5a:14:2a:f4:
0f:76:91:8a:00:14:f5:04:68:99:f7:87:11:d0:dd:ea:58:d5:
c4:80:e8:68:6a:15:12:42:f9:ed:8a:10:6a:dd:f9:a5:f8:27:
8a:88:0b:35:f6:c9:d8:a3:02:e8:f0:3c:06:15:9b:35:39:14:
c5:76:91:b6:59:fc:ae:50:ab:7a:0d:fc:d5:b5:2d:9f:0b:a4:
8c:32:eb:2d:25:f2:79:92:53:ab:05:9c:03:bb:2e:94:27:aa:
3b:0b:66:1a:f2:63:43:98:93:a6:29:03:80:ef:4b:c9:e0:fa:
6b:4c:fb:59:af:84:57:5f:58:48:96:a6:0c:34:b5:44:6a:b2:
f4:02:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:09 2026 by rpki-client