Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: fMrLNy2VfVXhJWwKuBAomSzH3HNpnXCIMkW74j2hNTk=
Subject key identifier: 98:33:35:88:5E:0E:96:DB:65:22:91:7B:CB:01:23:9A:87:3F:BF:1B
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 01A0CEFF9082B35EA826299CDF0A331FA5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 05EA
Signing time: Wed 23 Sep 2026 16:00:49 +0000
Manifest this update: Wed 23 Sep 2026 16:00:49 +0000
Manifest next update: Thu 24 Sep 2026 16:00:49 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: vQkjaUZzWaOtRJsTYpLMZQ17pTvOhBf4dB7dWhCBoZY=)
2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:90:82:b3:5e:a8:26:29:9c:df:0a:33:1f:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Sep 23 16:00:49 2026 GMT
Not After : Sep 24 16:00:49 2026 GMT
Subject: CN=983335885e0e96db6522917bcb01239a873fbf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:1b:45:a2:1f:9c:24:66:5d:e2:f8:06:ba:
80:d9:d5:30:c4:ee:ff:ec:64:eb:41:a1:f7:de:52:
10:9e:7b:6f:38:57:6b:6a:27:ff:76:d3:3c:13:32:
cf:f7:9b:29:90:eb:28:01:50:cf:1f:c0:2f:78:4c:
70:57:1c:2b:09:e3:d3:4b:f8:f8:88:29:32:69:46:
6c:ab:17:9e:3b:e5:61:a7:46:4b:fd:a7:4e:62:04:
38:85:05:a5:7b:26:05:dc:45:21:3d:90:01:4f:4b:
54:db:07:2d:c6:d4:4b:44:e2:60:8e:5e:f1:27:b9:
01:28:a8:08:b4:00:e7:85:92:4f:28:bb:4f:a8:12:
fd:96:a4:23:2c:97:6b:a0:a7:e6:78:1f:61:5a:70:
8c:ec:e8:72:3e:4c:25:ef:0b:b7:35:5c:a7:9a:d2:
57:55:97:e7:ae:93:9a:9f:31:98:27:64:bc:f4:6f:
c9:bb:89:e2:3b:d1:fa:62:a9:bd:12:75:f8:b4:95:
9f:03:11:ef:ea:b1:95:b3:d0:20:3c:fe:38:f0:da:
2d:a8:a7:71:85:e3:84:32:3a:1f:5b:b2:16:5b:a6:
5d:80:60:a6:30:6c:86:b6:ab:63:3c:31:3d:a9:14:
c3:71:d1:aa:b4:2f:01:4c:50:26:fd:b7:23:9a:40:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:35:88:5E:0E:96:DB:65:22:91:7B:CB:01:23:9A:87:3F:BF:1B
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b3:be:9d:6f:77:4f:bd:32:34:6c:57:1b:32:e2:b5:e6:25:
00:17:60:25:15:45:23:ae:ea:95:d7:14:23:37:5f:ab:da:f1:
47:d8:bd:a6:06:85:52:d0:f1:81:e9:13:0e:51:29:b1:c5:01:
ce:2b:e9:bd:e3:c9:8d:c4:1b:5c:89:32:47:42:90:52:cc:af:
d3:e6:16:8e:b0:8a:30:15:99:0a:eb:5b:90:70:c4:b7:99:fb:
b9:c5:55:17:14:81:57:c5:fe:12:2b:53:a1:cf:0f:ab:49:2c:
75:ee:0b:9b:81:c9:ba:33:b3:1c:fe:9d:1a:0d:69:17:7a:c6:
0e:a7:f3:25:1a:d4:f3:15:c7:eb:6f:d9:65:09:41:fb:55:83:
c7:c6:9e:89:3e:3e:31:4e:fd:d5:56:95:ce:eb:67:95:97:ce:
4d:86:b9:c0:38:63:06:52:37:11:f0:ed:80:07:54:56:5b:c2:
0b:95:95:a9:7d:d2:f3:24:21:e6:fd:eb:e9:64:0a:3c:25:36:
1b:d9:f6:67:3e:a5:bd:a1:43:1d:e6:f9:84:67:2d:99:8b:45:
2e:5b:53:de:06:6f:1c:8d:df:8a:0c:e4:c2:f3:d7:fe:16:c9:
9c:e3:4b:06:c7:71:7c:64:4b:b1:37:f7:cb:34:a5:81:23:1d:
75:0d:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:41:12 2026 by rpki-client