Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: loLgyodnvwCATgVicHqBJuHujstiyEfopRjF8ISxAQU=
Subject key identifier: A7:C5:40:97:BF:E8:17:89:E1:85:74:00:A1:9B:94:95:6D:0C:7B:9C
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01A0D64C05A370299CFA284DDE552E5BC87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1790
Signing time: Fri 25 Sep 2026 02:01:41 +0000
Manifest this update: Fri 25 Sep 2026 02:01:41 +0000
Manifest next update: Sat 26 Sep 2026 02:01:41 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: t8n/BOdpT2jk+8ZJPvsOowbNDKn0MBq98uQeHaEvdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:05:a3:70:29:9c:fa:28:4d:de:55:2e:5b:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Sep 25 02:01:41 2026 GMT
Not After : Sep 26 02:01:41 2026 GMT
Subject: CN=a7c54097bfe81789e1857400a19b94956d0c7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:82:c2:63:03:68:77:fd:2d:36:45:c1:b3:
52:01:58:fa:21:b2:8f:53:cf:b4:03:fb:9f:1c:68:
cf:f3:40:f3:e7:39:a1:f9:2d:82:32:9f:64:1d:26:
0b:1f:c1:71:92:29:1e:ae:94:d0:f5:4d:b5:14:be:
90:a7:4b:16:9b:79:ad:0a:40:52:67:11:02:e3:e2:
6e:b4:dc:9a:95:87:fd:d0:49:cb:3e:5b:d7:fd:92:
27:ed:de:0d:33:e1:12:6c:a7:ae:92:bd:e8:5c:4a:
82:9a:cb:10:9d:3f:d9:2c:32:b5:1d:6d:9f:78:cd:
a0:b7:35:e4:02:5c:48:fc:7f:4f:fd:6a:59:fa:ae:
bf:65:e7:af:0e:b7:8f:59:0a:b3:87:81:2d:b4:a4:
23:e7:fa:38:8b:37:5c:e3:d1:f1:95:69:d6:46:6d:
69:fb:a5:34:8d:5a:60:57:52:3e:d3:88:64:86:3b:
ed:01:ee:63:29:ef:f1:60:a2:7a:39:d0:e0:85:b3:
f8:65:25:0e:92:3d:7f:8a:1c:e8:cb:ee:96:70:1b:
0c:48:21:90:23:3a:e7:45:8e:83:ee:23:b5:da:01:
b9:77:2d:b2:1a:62:1f:0f:d7:7d:b1:c6:67:64:63:
e8:b4:47:ee:08:1f:1a:2c:69:30:26:85:f5:14:e0:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:40:97:BF:E8:17:89:E1:85:74:00:A1:9B:94:95:6D:0C:7B:9C
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2f:97:06:63:3d:1a:5c:4f:04:6b:3a:a6:87:bb:ab:07:be:
47:49:ef:b7:4d:e0:54:87:05:ed:5e:f4:20:b0:14:7b:1d:78:
fa:00:b4:c0:13:d5:8c:3e:92:4a:4b:40:e6:f5:02:f8:c7:ca:
03:19:63:f0:ea:03:2a:8d:cc:5f:40:f7:1f:00:e0:d2:5e:ea:
23:c2:48:d9:7c:bd:d3:ac:02:4e:fa:bf:a0:d7:71:70:2f:a3:
7e:03:38:8c:f0:ae:95:38:e2:f0:c9:f9:2b:99:5c:fe:2f:f4:
bd:e9:fe:7e:b1:8b:a9:c7:de:a4:a3:01:18:9a:a6:e2:ff:83:
be:58:38:1b:5a:91:df:83:2b:c8:65:53:20:82:00:e0:99:94:
3f:8d:f3:a0:3b:eb:58:70:90:4f:e5:d8:10:db:11:a0:fc:d8:
98:a6:67:dc:ee:02:37:b3:0d:35:88:e7:87:36:05:66:ae:8f:
19:5d:fe:6e:86:e6:26:4a:1c:e7:7b:6f:71:5f:b0:da:f8:ff:
f1:11:48:ad:7e:cb:0a:22:85:ec:0e:b6:96:16:39:5c:78:3c:
ec:66:fc:9b:19:4c:d2:dd:37:04:8f:aa:bc:f7:74:f2:07:b7:
e8:47:ac:48:94:a1:d8:4d:99:39:8c:c1:15:e4:8e:7b:70:5f:
ce:a5:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:20:57 2026 by rpki-client