Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: vhSuzWf+uOxqxBFyigEzK2n9oBA6Sf9dHSi8QfqWyYo=
Subject key identifier: 1A:C2:35:6F:2B:9A:86:91:73:6F:05:10:2E:09:22:0B:F3:D3:97:41
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019F913581454A085DAC85AC6D56FE029FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 12AA
Signing time: Thu 23 Jul 2026 23:00:30 +0000
Manifest this update: Thu 23 Jul 2026 23:00:30 +0000
Manifest next update: Fri 24 Jul 2026 23:00:30 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: kcHB9jwZxWTlsi/uBLU1AVzUrrBMcf7tZVfv7kyKreI=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:81:45:4a:08:5d:ac:85:ac:6d:56:fe:02:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jul 23 23:00:30 2026 GMT
Not After : Jul 24 23:00:30 2026 GMT
Subject: CN=1ac2356f2b9a8691736f05102e09220bf3d39741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:83:67:56:af:a1:74:f4:c2:65:c3:a8:7d:
0a:70:d2:26:eb:18:1c:9f:2a:40:4c:e0:14:e0:a0:
5a:44:39:c7:53:8b:49:84:72:74:77:f5:ef:54:ce:
e3:66:e1:ca:8c:4e:a6:2c:13:31:9f:b1:7b:05:c4:
ff:0a:7d:05:21:e4:82:cb:c5:16:b0:eb:f0:95:e5:
e0:ad:a3:d8:1e:ed:36:13:bd:04:c2:15:93:55:d7:
66:4d:fe:51:6b:f8:3e:e3:79:13:ed:bb:6d:0f:7c:
3f:77:cc:1e:ba:c9:d3:17:50:b7:4e:0b:c7:7c:86:
c8:82:c5:ef:56:ae:4d:28:37:e4:41:89:1c:2f:a7:
2e:f4:11:89:d3:d9:29:08:63:77:0d:5f:27:ab:8f:
87:89:c1:c4:76:77:ef:41:c7:da:8e:bc:25:65:9f:
50:29:2c:4e:e8:c3:0f:1c:3a:a5:b0:71:82:0d:57:
d5:cc:5d:f7:46:c7:a3:80:d8:39:84:28:da:4d:c3:
49:34:9c:ac:70:7c:e5:04:21:3f:0e:00:3a:72:89:
03:05:89:94:a7:af:8c:df:dc:17:e5:6e:a1:32:af:
87:6c:5f:0d:57:dc:db:d1:d4:f1:18:8b:de:31:ea:
ed:0d:f1:c6:bd:36:b0:ad:b6:4e:7c:e2:69:0d:1a:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:35:6F:2B:9A:86:91:73:6F:05:10:2E:09:22:0B:F3:D3:97:41
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:92:b0:6f:0a:c6:68:9d:06:9b:36:34:47:f0:59:b4:28:
45:b8:46:d6:4b:7f:39:b9:11:1d:8e:28:0a:fa:47:9b:db:2b:
bf:dc:ba:24:97:b0:55:d5:f5:3a:1a:ec:05:91:50:7e:c1:72:
ff:18:af:dd:75:aa:30:7f:22:40:60:0b:82:cf:29:b4:28:86:
2f:24:60:ac:20:dd:e5:98:bd:73:61:e7:5a:4f:fb:ed:fe:ec:
a8:70:0e:e3:23:83:f5:21:d3:88:42:f3:ce:45:ca:6c:b5:8e:
07:eb:12:d2:93:cd:dd:78:b2:9b:d8:82:a1:4c:d6:12:7b:34:
e6:48:18:c3:9d:ec:15:70:aa:cf:be:72:2a:23:31:db:02:0c:
d0:dd:ef:e8:dd:1a:38:54:a1:9a:07:1c:dd:81:1c:8f:ed:05:
a2:6f:39:c0:9f:3a:ea:3b:13:47:ba:82:9b:4a:35:d5:1c:eb:
f8:9e:e6:ca:25:0d:63:8e:ab:e2:d0:21:02:c2:23:93:91:c6:
90:42:03:b9:34:a6:96:df:1e:6c:45:8c:c0:4f:f2:9a:02:3b:
2a:a6:c9:e6:28:87:b5:de:91:97:4b:7e:cd:27:39:f2:a2:b9:
eb:61:6d:94:09:fd:9c:91:37:37:83:a3:15:9e:d8:89:bd:86:
f7:b4:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:31 2026 by rpki-client