Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: RGYUx0e145bDQh7/ko9TrVGaLb+38S0IUW1gGz8/IFI=
Subject key identifier: 23:91:24:BB:C9:A9:F3:54:C7:52:06:6B:01:5F:1E:3F:CD:4E:56:E4
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019D32D10B54B94CE0099E0EDE7853A95AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 1170
Signing time: Sat 28 Mar 2026 05:00:53 +0000
Manifest this update: Sat 28 Mar 2026 05:00:53 +0000
Manifest next update: Sun 29 Mar 2026 05:00:53 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: nj7+mlvFSYw/HYJokzQJXE6sslDods/MTIqkGQxj04s=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:0b:54:b9:4c:e0:09:9e:0e:de:78:53:a9:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Mar 28 05:00:53 2026 GMT
Not After : Mar 29 05:00:53 2026 GMT
Subject: CN=239124bbc9a9f354c752066b015f1e3fcd4e56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:b3:2e:75:ca:2d:22:7f:c3:b6:ce:b4:45:
29:06:ce:52:09:69:40:98:d5:dd:56:f3:ce:4c:96:
f4:da:ad:0f:4e:a2:18:52:8e:9a:92:7b:91:f1:61:
15:34:b4:ca:d0:23:31:50:90:83:71:a4:dc:7b:bf:
36:02:32:f8:b0:9e:b1:2c:5c:c7:6e:17:93:5b:a2:
2f:57:40:f5:0a:bf:03:53:db:51:83:d9:8f:15:15:
a6:00:74:72:7a:90:40:8f:94:1a:3e:98:bc:53:f9:
0a:94:ff:19:8c:ee:fb:66:91:92:11:f1:01:8a:26:
df:a9:ac:7b:be:61:1f:6b:4e:99:17:4f:09:b4:4e:
16:50:26:41:26:39:12:c4:5c:6e:46:87:cb:a7:e1:
75:48:5d:b6:57:43:3b:56:ac:a3:cf:51:62:88:f8:
cb:01:0e:57:ea:1f:c5:87:89:fc:45:80:e1:3f:e1:
f8:4f:62:96:b2:b3:72:42:82:a4:a5:a6:0f:7d:a6:
34:dc:44:1a:ed:97:83:5e:dc:2d:44:85:a9:ab:f7:
bd:96:3a:18:c3:c5:40:10:01:32:dc:e1:01:43:f7:
ff:c4:45:5c:f5:8f:92:3f:99:1a:91:c9:f9:af:a3:
8c:d9:a7:3e:bb:10:39:51:ba:73:7f:3c:3b:ad:5f:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:24:BB:C9:A9:F3:54:C7:52:06:6B:01:5F:1E:3F:CD:4E:56:E4
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f6:25:32:f7:5f:6b:d1:8d:22:fd:b7:c2:6e:a3:e8:3c:25:
40:29:16:22:4c:c2:17:b0:6c:52:71:69:73:8e:eb:39:70:ab:
da:8c:81:3a:df:5b:63:05:70:1d:89:7f:cf:4b:94:29:4b:95:
ab:3b:ab:74:28:61:dd:4d:54:58:fa:00:2d:45:6c:aa:77:50:
44:f9:42:03:eb:a0:70:22:94:9c:98:29:b2:57:fc:fd:08:f9:
55:67:66:65:6e:cf:e5:c5:6e:7b:9b:bb:dd:a3:c2:a9:88:9e:
c4:74:0d:09:69:e6:09:36:61:c5:fa:10:01:94:01:b9:18:c7:
b0:a3:47:d4:05:fe:00:2c:22:20:a8:5a:c0:ea:4f:ed:b4:87:
6b:1b:71:1c:31:43:12:26:ab:d7:29:ad:99:d3:46:54:f7:1f:
c9:e2:ed:11:0e:8b:b1:64:89:57:cc:fc:18:6e:b0:db:ac:65:
54:d7:a3:25:f7:77:3f:86:e5:44:7d:11:02:ce:4c:1c:d5:99:
61:67:d9:57:67:88:4a:ae:d4:72:70:71:33:3c:e0:bb:67:72:
cf:7f:2f:e4:c9:6f:c5:6f:db:2a:df:31:92:0c:9e:53:55:32:
d6:38:34:c0:2c:c7:02:42:5f:01:9d:c2:0b:87:e6:8e:cf:ce:
bf:26:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:06 2026 by rpki-client