Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: yr9BKpS/+PxVW6JsCCPAlxieDBhxW785dYRpvPkZ+vc=
Subject key identifier: 3A:58:7A:D4:DC:F8:38:95:91:1A:3A:96:C3:19:87:2F:54:A7:5A:E1
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 01A0CBC7939714CBEF62225005B466B5C45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 0652
Signing time: Wed 23 Sep 2026 01:00:49 +0000
Manifest this update: Wed 23 Sep 2026 01:00:49 +0000
Manifest next update: Thu 24 Sep 2026 01:00:49 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: vO2lIanqoAeBudu0tmN4BncVYJIxOrLApXzVLbZYpIo=)
2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:93:97:14:cb:ef:62:22:50:05:b4:66:b5:c4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Sep 23 01:00:49 2026 GMT
Not After : Sep 24 01:00:49 2026 GMT
Subject: CN=3a587ad4dcf83895911a3a96c319872f54a75ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:37:ab:01:49:f5:28:cb:93:9a:d5:dc:6e:
48:3e:05:42:b9:24:f5:62:34:90:a8:0c:64:e3:bc:
bf:4c:8a:aa:88:1d:d8:ef:92:5b:8f:1b:55:eb:71:
23:ed:3a:ed:98:7d:ce:cb:98:29:32:f1:8c:e2:4a:
bc:c1:2c:09:e9:3e:91:b8:4b:b1:be:ea:87:38:32:
ed:ef:37:20:a6:a6:50:42:75:08:42:54:7b:37:f5:
26:a5:79:ea:6c:4c:91:c7:99:73:f2:a0:de:aa:53:
34:e0:35:f2:97:37:ba:c5:c0:d4:57:4b:e4:98:71:
a0:d0:f0:ad:3e:6f:44:68:1b:f3:23:93:c5:5a:6b:
b8:69:92:5f:5a:26:6b:e8:7d:7b:99:7c:d4:fe:66:
6d:35:f7:7b:4a:72:7e:c4:54:b2:fe:23:1a:8d:64:
17:7b:2e:76:a2:b7:4f:e8:e5:aa:ad:c9:e3:2d:4e:
6e:a2:6d:cf:e1:f5:ce:f6:8a:05:8f:54:96:4e:49:
4e:20:af:a0:12:da:ae:79:7f:dd:e6:e3:34:1e:cc:
87:e8:ef:bb:11:92:6f:03:38:bc:20:40:6a:97:d5:
bf:7f:7c:25:04:21:a6:6f:bd:65:bc:c3:33:f1:27:
02:9c:77:f2:00:91:11:68:5d:6d:e3:7a:a7:cb:f3:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:7A:D4:DC:F8:38:95:91:1A:3A:96:C3:19:87:2F:54:A7:5A:E1
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:21:85:dc:15:5a:25:43:59:e8:f0:75:c3:90:31:03:3a:cc:
b9:c3:71:91:a2:1b:fe:33:3d:f9:a4:62:c2:16:01:56:12:17:
dd:43:98:9b:03:41:d6:cc:0f:05:53:cd:f4:6f:c4:d6:1b:c7:
67:99:11:8a:7f:7a:01:ad:3e:f8:dc:02:c5:63:69:85:f9:26:
6e:34:b6:a2:3e:64:69:7e:33:22:32:2b:9e:89:57:d5:28:18:
cb:1d:23:b6:8b:ac:e9:20:fd:73:47:e0:65:49:88:e1:ee:80:
88:0e:93:9c:c8:03:ee:93:1f:40:e2:0b:8f:f7:e5:09:18:84:
e4:d7:c6:a9:73:ac:38:c6:74:63:0c:34:bc:87:d4:4e:64:a6:
13:55:1d:9f:44:dd:88:76:3d:32:37:cc:32:43:df:01:c9:85:
0a:e6:30:1f:c4:87:9c:92:5b:83:10:8b:7c:c4:c9:db:69:36:
4b:e8:66:a3:e5:5b:77:c9:75:ac:e8:96:bf:5e:73:51:80:a9:
95:4f:21:e6:94:e1:c9:f3:f7:80:d5:26:c1:c2:a8:6e:31:e3:
9e:4e:c1:b6:36:d0:ea:42:d5:6f:99:11:80:c8:3e:40:53:77:
e3:41:08:d8:e0:10:f0:d2:e0:db:2a:97:3d:78:f9:c9:42:cd:
38:4b:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:18 2026 by rpki-client