Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: bf5eFauTvxSyOWyGBJrunGKoqNGNqLh2HshGl8E1/Hk=
Subject key identifier: FF:7E:C7:90:25:38:F8:7B:34:6A:C5:BD:F7:51:89:5B:D5:2F:AE:E2
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019E1DFE7CE799F6C07783DC22AFA9BCD833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: wwu1W7AawTMbDPtS/7BM0iLRfPwTvrtxI11jO9uaK5s=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7c:e7:99:f6:c0:77:83:dc:22:af:a9:bc:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=ff7ec7902538f87b346ac5bdf751895bd52faee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:0f:89:a6:13:93:66:c8:71:ae:6c:83:04:
71:0a:e3:2d:20:c0:a5:95:9c:07:30:b4:ff:01:02:
98:31:4a:80:ac:52:c1:4d:b7:95:5d:e5:d8:db:bf:
82:52:2b:34:d0:7a:63:e9:88:d3:55:f0:ad:31:39:
d0:6f:c0:db:2b:21:c3:9b:f1:a4:0d:fa:0c:2b:d7:
17:10:fd:9a:a9:e1:e1:01:32:e2:fc:38:5d:59:0f:
12:7c:a8:0b:6a:5e:53:91:3e:c1:12:94:d0:c4:b8:
d9:9a:e5:d4:8b:9b:a2:20:40:d5:14:cd:96:00:99:
33:65:78:c3:09:d0:a1:3f:41:42:fa:f0:22:81:5d:
f4:ca:68:1e:f5:29:95:82:26:fa:b4:fc:c5:02:f1:
b6:fd:a2:02:da:55:a7:1e:83:5d:fd:65:93:e4:ce:
d7:73:f8:f1:5b:43:a9:b2:11:83:7f:77:c9:40:5d:
25:8b:15:37:3d:d0:60:48:3f:d4:2c:c4:53:89:80:
3f:69:77:5d:95:66:6c:95:54:ca:1f:62:de:26:cd:
8b:9c:75:60:9b:92:e0:b7:8a:ca:32:6c:a1:d8:ae:
11:fa:36:09:58:c3:6f:51:af:51:02:ca:77:41:0c:
de:f4:4a:31:51:97:2e:e4:22:ed:25:3b:79:a4:93:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:C7:90:25:38:F8:7B:34:6A:C5:BD:F7:51:89:5B:D5:2F:AE:E2
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ce:8d:c5:26:b5:ea:3a:b7:9c:4f:5b:14:f5:53:8b:66:6a:
6d:46:00:a2:2f:e8:8b:e7:8c:c9:96:b0:23:1d:af:7f:62:12:
27:ae:dc:f7:5b:12:9b:4a:6a:43:29:fc:d8:28:fd:c7:4c:f7:
cc:d4:4a:0c:ba:b0:b5:56:ca:05:2a:b1:93:b0:86:70:85:7c:
5b:62:cc:44:f2:ba:ca:fa:9c:1e:0b:a3:fe:cc:c0:3f:4b:1f:
31:8f:15:3d:34:b4:d4:8a:f1:43:82:ee:7a:6c:1b:33:d0:2d:
d0:e5:4f:a2:a9:99:b2:50:af:46:2b:98:d7:82:80:6e:9a:af:
41:1b:a0:e5:46:bd:75:47:61:de:a7:d1:9a:5d:b1:44:75:dc:
08:26:62:31:81:6d:1a:3b:59:a0:73:e9:57:00:43:a1:d3:01:
71:31:c1:8f:a8:7f:f7:c3:0f:0c:29:c3:00:25:6a:c8:d1:08:
00:16:15:52:1c:c2:7b:f5:a9:d5:52:fe:11:dd:fd:0c:94:cd:
56:68:f3:12:46:72:cf:9d:8b:7f:89:2d:71:a1:f0:99:2a:7a:
8e:78:71:1f:d1:14:cd:62:92:c8:59:e7:05:bd:df:19:e2:c7:
05:70:a3:12:9c:33:87:9e:a4:26:09:32:58:86:48:a2:8f:b0:
a6:57:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:23 2026 by rpki-client