Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
File: 2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft (raw, json)
Hash identifier: ei4cGJM1P6feT21snCXDgoVsKsrgv/+YZvAEqXXGxzA=
Subject key identifier: 12:A0:AA:F1:B5:89:3B:48:43:4D:2C:FF:AD:30:0C:25:F0:BA:96:87
Authority key identifier: DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34
Certificate issuer: /CN=db211be3755559ca102520c13670d08580d70334
Certificate serial: 019F8FB55A319078FE74F38B94A56CED3C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
Manifest number: 02B2
Signing time: Thu 23 Jul 2026 16:00:54 +0000
Manifest this update: Thu 23 Jul 2026 16:00:54 +0000
Manifest next update: Fri 24 Jul 2026 16:00:54 +0000
Files and hashes: 1: 2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl (hash: 6LBV8z9rtnhhtUqSyA0Nq0HNVwM49rIkPTn57lzT/No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:5a:31:90:78:fe:74:f3:8b:94:a5:6c:ed:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db211be3755559ca102520c13670d08580d70334
Validity
Not Before: Jul 23 16:00:54 2026 GMT
Not After : Jul 24 16:00:54 2026 GMT
Subject: CN=12a0aaf1b5893b48434d2cffad300c25f0ba9687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:63:73:86:91:07:b7:08:f7:e6:63:c7:55:
d6:c0:14:8e:4b:ca:5b:98:cb:bb:8b:94:54:be:5f:
4e:e5:40:ed:0c:00:e9:6e:32:16:c4:13:4a:c8:de:
eb:07:cc:76:09:8b:d5:1b:af:a2:c0:ff:d3:c9:fc:
12:87:18:77:be:21:85:0a:1d:2c:e9:b4:03:4e:4c:
4d:b3:33:f9:05:e7:7a:8d:ba:d7:d5:6e:ec:88:d9:
7a:26:32:47:b3:0c:11:9b:f2:66:7c:75:11:9e:6f:
bd:90:e9:8f:7e:20:4c:1f:ca:15:13:2d:dd:00:21:
d3:4d:bd:7a:56:d4:56:85:4f:ae:a3:77:64:47:8b:
0d:8c:56:32:35:67:bf:ab:ff:ee:32:80:8a:a5:ef:
5c:c8:54:d0:bd:35:fd:a7:77:af:35:2b:59:20:65:
46:b3:0b:fa:81:90:4a:80:ed:bb:65:7f:54:1f:40:
c1:fa:ca:93:09:f3:5a:11:56:a8:5c:ec:5a:26:eb:
db:d4:4d:56:ca:9b:22:94:d2:9e:b2:ea:80:cf:48:
7d:7d:fc:1e:c9:45:6e:d4:5f:95:5e:ae:38:02:31:
11:38:de:e2:55:06:f0:35:f4:b4:8a:76:c5:4f:79:
96:f5:8d:ed:a2:2e:37:80:ac:1d:62:43:b1:70:b0:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:AA:F1:B5:89:3B:48:43:4D:2C:FF:AD:30:0C:25:F0:BA:96:87
X509v3 Authority Key Identifier:
keyid:DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d5:62:d6:4c:ee:ce:bc:57:f5:f7:8a:e6:80:cc:25:60:3a:
aa:e1:03:9c:52:fc:5c:2d:45:bc:f8:bb:af:e0:d4:4e:8b:eb:
81:4d:2f:ce:fe:b6:03:ae:8f:5e:b9:d3:cf:2a:ed:4c:be:4b:
ef:3c:33:b8:4a:29:4f:aa:30:f3:b8:b0:37:a8:14:5a:a7:01:
e3:3f:51:14:01:fb:50:05:79:66:5a:c4:40:7c:97:c9:ec:44:
53:42:ba:50:88:96:71:e6:cb:81:8f:18:fe:06:d2:0d:e7:bf:
52:b5:4d:5d:55:c7:be:4b:11:f8:b6:27:52:6d:a9:90:af:e0:
12:cb:a2:ba:29:ef:f5:df:1d:30:88:21:15:2e:96:f6:d7:ed:
ff:bb:ec:51:89:c5:66:df:79:09:99:c6:23:c4:61:fd:a9:80:
1c:79:58:24:35:b9:f9:d8:b8:05:a8:ef:a9:01:ae:d6:77:92:
0e:79:50:08:a7:a7:b9:b5:83:8a:a9:fc:10:97:a8:36:4f:93:
90:b6:a6:6c:b6:18:7f:68:cb:c1:a8:e8:fe:60:b5:1f:41:99:
6e:2c:d8:02:c1:42:ff:93:bb:f2:a7:ce:5f:d0:57:73:1d:f1:
f7:9e:0a:ff:92:c3:83:5c:7e:12:f5:47:61:3c:f8:cb:7d:8b:
f5:8a:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:12 2026 by rpki-client