Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: Aa7Q31eN3qsnF4Z8jw51StjF/f4MPCfrWI5QFnx+rPk=
Subject key identifier: 1D:30:54:78:01:A9:B4:13:6F:1E:53:A2:8F:A5:3E:5F:F9:36:6A:48
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 019E1D901322DB8C8708E1D8E46DF173FC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 0485
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: ju8xX2PVZ62KqAEOow/gIqpG++agvcehpiFXx11s3ws=)
2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:13:22:db:8c:87:08:e1:d8:e4:6d:f1:73:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=1d30547801a9b4136f1e53a28fa53e5ff9366a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:4d:3b:e3:0d:7f:4d:12:65:40:04:ec:69:
e3:17:8d:23:d1:c7:13:d5:bc:46:26:be:c9:75:79:
f5:8f:fa:7b:52:d1:82:fd:24:eb:17:b9:1f:c2:bd:
5a:1d:5b:9f:08:1d:38:42:d1:9d:01:b0:84:e4:35:
12:33:d1:f3:4f:05:e9:04:8f:ff:4b:85:dc:ae:1f:
ef:5f:62:a1:42:92:d2:74:83:03:fd:79:82:db:70:
dd:71:cb:e5:47:f9:2b:3c:e9:a4:34:95:a7:82:e5:
7d:d1:11:93:50:a9:57:03:68:9a:0b:15:4c:b1:a6:
5b:57:38:e0:1b:54:d5:ec:ec:dc:ee:0e:93:4e:15:
0e:1d:39:54:5f:62:6d:a7:51:8f:b2:7c:ba:a5:1c:
96:0b:bb:e2:bf:6d:c2:31:01:a9:71:b9:08:ee:85:
ca:09:21:3d:ab:f7:3b:08:91:f9:9b:c3:b6:9a:b4:
2d:03:80:31:01:66:2f:22:b7:e0:7f:3e:03:d7:42:
fe:00:36:d2:0f:8d:93:be:11:af:01:b4:dd:5a:ad:
c5:85:c8:47:0b:83:2e:38:75:43:8e:0b:49:6d:19:
51:95:49:3e:5a:43:1f:79:7a:b5:17:aa:6d:92:d5:
a4:f7:b7:a3:ab:d1:bd:b5:90:7d:ae:fd:03:d6:10:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:54:78:01:A9:B4:13:6F:1E:53:A2:8F:A5:3E:5F:F9:36:6A:48
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:3b:80:89:2c:c2:a2:f3:1e:1b:ef:b1:44:f0:85:da:19:
98:e5:22:bf:fb:94:f8:1d:ba:85:df:3a:93:a3:a4:3f:8f:5f:
5f:43:41:3e:11:bf:15:f3:1e:bd:ea:ca:5f:ad:88:02:b8:28:
e4:3e:a2:f6:30:8d:14:d9:f4:d7:65:15:0c:b8:76:0e:4d:54:
9c:9e:1b:47:7f:c4:8e:ee:96:bd:2a:a5:08:6b:7d:14:e0:bd:
f1:60:86:1d:90:f5:59:b4:12:3c:85:8d:91:97:a6:48:e4:73:
8e:38:02:7c:51:fe:4b:39:57:3e:6b:56:1c:e2:fe:36:eb:dc:
73:43:e0:3c:7d:f4:ee:64:5d:b8:a8:1b:83:f3:6f:58:78:26:
22:4f:61:c9:bd:5d:02:75:6a:de:5c:03:3a:a3:38:ab:ae:17:
da:76:1c:da:51:42:bb:0d:7d:bd:97:7e:47:cb:58:7b:44:96:
a8:f4:da:95:11:de:80:f2:aa:2d:4c:75:47:57:8c:fe:ee:36:
4f:d6:22:f6:e8:b4:c3:0c:34:79:71:96:11:42:2b:0d:9f:12:
80:44:26:98:1b:53:c9:a6:ad:06:7a:5e:a1:9b:28:f4:b6:32:
33:54:82:26:b7:df:d5:08:4b:fc:25:70:36:ef:33:e8:25:04:
4a:d8:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:07 2026 by rpki-client