Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: GMfRikslXPtXtBeCHN02rdeYIt5/NncJQicbC9IctQ0=
Subject key identifier: AC:B5:04:BA:7A:F1:0A:94:6E:A2:9F:43:21:4A:0B:16:50:D2:3A:6B
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 01A0D1C97C3473DB13132D8A0466E5645E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 1350
Signing time: Thu 24 Sep 2026 05:00:37 +0000
Manifest this update: Thu 24 Sep 2026 05:00:37 +0000
Manifest next update: Fri 25 Sep 2026 05:00:37 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: JfwWcvCrwJMa+SP4M+h9Q7DDvNeX9gnum9S4/s6KZ6c=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:7c:34:73:db:13:13:2d:8a:04:66:e5:64:5e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Sep 24 05:00:37 2026 GMT
Not After : Sep 25 05:00:37 2026 GMT
Subject: CN=acb504ba7af10a946ea29f43214a0b1650d23a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:93:e6:53:5f:13:22:8c:3e:a9:0e:b9:42:
b4:82:6b:68:36:61:4a:7c:5b:3d:05:03:c1:26:de:
89:0a:cb:2e:8c:f1:f8:a2:cb:c5:4d:2e:92:7f:ef:
2d:3a:2e:a0:1b:14:59:e8:f8:fe:1e:bf:2c:74:bb:
a9:cb:f1:d9:88:f6:8d:b3:91:a7:1b:9f:aa:82:a8:
d9:65:16:37:13:95:c8:22:1c:29:14:f0:ca:71:a9:
3e:d3:fe:9d:5d:65:a4:6a:81:24:49:bf:42:53:1e:
3b:9c:16:53:aa:99:34:98:68:a8:0d:83:af:cb:8b:
b6:7d:d7:9e:36:ce:99:15:bf:35:f5:c1:ce:1b:37:
90:54:60:1e:71:8e:3c:72:1a:a6:91:ab:a0:9e:0e:
e0:08:3a:9b:2a:7c:f1:57:2e:14:af:8f:ba:dc:ea:
da:bb:4e:0b:ba:f9:ab:b0:27:ac:17:07:4b:d4:37:
5b:ce:14:5f:1b:1b:77:9e:3c:87:4e:4b:5e:25:25:
e2:ea:5a:4b:5f:e9:be:96:f4:a5:ec:93:ec:a2:77:
ef:0e:44:1c:da:6f:d1:02:99:10:c4:81:37:3c:8c:
a7:e3:35:58:2d:38:59:20:36:34:02:56:91:06:34:
d1:40:4a:3b:38:2c:b8:2a:3f:01:6f:4f:12:00:00:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:04:BA:7A:F1:0A:94:6E:A2:9F:43:21:4A:0B:16:50:D2:3A:6B
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:c7:1b:b0:47:9e:d7:04:b6:cd:cd:b3:da:f0:a1:90:dd:
1d:29:48:22:54:50:d8:66:e1:38:20:1a:d7:dd:91:90:39:0c:
9f:8a:57:10:a1:9e:d9:17:d2:36:79:b7:a7:aa:26:79:c4:bb:
70:60:b2:43:d8:7c:ca:d1:0b:c7:07:12:74:3f:eb:85:08:3b:
ec:b9:f1:86:c5:08:54:0b:de:4a:8e:fc:27:9a:a6:73:d4:ce:
3f:33:3e:3c:2c:30:5e:13:03:da:5b:24:72:00:5b:9b:64:c4:
85:77:95:8b:a7:e4:2d:3d:73:d7:e5:ed:0f:f2:61:37:f3:26:
c3:d1:05:25:2c:1f:46:b6:4b:fe:78:56:cf:1f:f0:cf:a6:84:
da:f4:db:63:05:c9:5a:83:f3:49:4a:dc:1b:6b:1f:e0:dc:ab:
85:d9:4f:45:a4:70:8c:80:04:29:3d:99:a5:9b:ee:e4:74:bc:
89:57:df:f4:7c:e2:e8:96:ef:71:f3:bb:c2:4f:53:0e:d5:00:
ea:ed:19:0c:c1:28:d0:8d:27:6d:59:e8:e5:a5:66:1d:42:87:
88:60:28:89:3c:d1:a0:2e:02:af:a8:18:bc:dd:48:60:5c:4d:
0a:6e:aa:e4:66:63:5d:b0:4e:ca:0a:00:36:ac:22:69:94:76:
af:57:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:51:33 2026 by rpki-client