Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: gqXjZD6FvKVIPN5MPU1uDpkNXLP94EKwYxxMzsMLKjE=
Subject key identifier: 27:9A:43:3A:14:1B:1A:87:EC:37:CC:69:A8:94:1B:C3:D2:37:58:24
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019D28BBDAE686CD952B84A22D1309CC0AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: Fbv0Gt+XoUngroragt0hXYNtCDn7kqf/xgdpBXLx8rs=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:da:e6:86:cd:95:2b:84:a2:2d:13:09:cc:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=279a433a141b1a87ec37cc69a8941bc3d2375824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:7d:ef:ab:16:be:b1:f5:27:0f:28:c0:26:
f6:28:2d:58:5f:7d:00:a3:3b:98:17:b1:5b:f5:6a:
fd:61:cf:bc:5d:63:ba:9c:92:38:38:6a:10:d7:f9:
e1:c0:fa:80:64:c3:7e:bc:cf:d6:91:dd:64:24:fd:
af:35:a4:05:53:be:78:d1:79:94:ac:84:fb:29:b5:
ac:cb:b0:ac:1c:69:3c:87:f4:98:20:78:ec:5b:78:
0c:9a:be:3c:6e:80:90:8c:48:4c:b4:92:41:fd:c9:
95:05:21:7d:ca:43:b3:84:6d:58:9b:ad:1e:64:09:
fc:70:8c:81:da:a6:df:22:19:69:1c:2f:a7:c6:a7:
0c:a0:58:8a:b5:f5:2e:ca:a9:fe:29:c2:52:09:42:
1b:08:2f:dd:64:c1:9c:e6:8f:84:f8:36:12:22:dc:
5d:9c:aa:05:dd:78:c8:d1:7e:f8:e9:ae:df:d3:7c:
4a:3a:ff:39:10:54:e1:72:40:06:24:74:78:4d:6a:
92:ac:0b:38:f5:71:e2:c4:75:2a:e3:29:28:c9:09:
2b:6c:40:76:5f:7c:f0:84:b6:f5:16:e0:c1:73:83:
f3:7a:e1:e0:e6:96:aa:4d:0c:51:a9:e8:e8:41:1a:
c0:77:97:0d:17:f2:17:dd:8f:09:3c:27:91:b8:56:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:43:3A:14:1B:1A:87:EC:37:CC:69:A8:94:1B:C3:D2:37:58:24
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:7a:0e:20:21:7b:b5:bb:15:4e:46:86:f3:07:ac:55:90:
03:89:a9:c9:d7:54:a5:13:ed:2a:09:15:a4:e3:a3:f3:bc:4f:
71:04:49:f3:86:c8:8f:36:8c:5e:e2:2d:c1:09:15:1c:f0:03:
6f:bc:c0:5b:2e:f2:3f:df:82:4c:8b:be:d3:19:78:02:8d:52:
5d:70:61:dc:41:c8:ba:90:c5:c0:be:d6:b6:a8:34:de:60:0d:
c8:94:b6:44:de:6c:93:de:57:3e:da:6e:55:0e:6f:8b:eb:b7:
4c:65:78:38:f1:6f:b6:fc:e5:44:d3:c6:32:94:c6:93:0b:9a:
2c:3c:68:8d:fd:86:38:8c:e4:02:de:ec:d9:54:35:5d:d6:10:
f6:a6:5e:e5:0c:a5:28:c4:c7:40:ae:ff:b6:d8:db:42:ca:69:
4e:06:75:4e:08:c3:17:be:29:82:5d:29:9e:5c:5b:89:0a:15:
31:dc:95:2c:32:a0:e0:99:55:b2:2b:47:0b:b4:8d:01:cb:1f:
04:4b:ea:1d:58:9d:72:79:1d:1a:0f:2d:60:fa:2d:6c:54:7f:
4d:af:62:7e:53:73:1f:e6:9f:d7:0e:93:1c:06:39:23:57:2b:
d0:8c:88:fa:d4:86:bd:6d:a8:39:0e:58:05:cd:56:0b:3c:f9:
fc:ae:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:50 2026 by rpki-client