Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: mt03oDEzL6AkNYzQXal8SjjR4to0g7J9K8d/tgkaxHg=
Subject key identifier: 6B:8C:FD:E2:7C:01:34:2B:60:65:78:4D:A0:44:67:4B:F6:36:0E:B3
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01A0DCF2ABEC0C36F4941100D39FF1C1C13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 09:01:26 +0000
Manifest this update: Sat 26 Sep 2026 09:01:26 +0000
Manifest next update: Sun 27 Sep 2026 09:01:26 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: LIQQkWzxK+JgPERvm2hZU3RP9tvNNxcxxB0RS4yRwmQ=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:ab:ec:0c:36:f4:94:11:00:d3:9f:f1:c1:c1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Sep 26 09:01:26 2026 GMT
Not After : Sep 27 09:01:26 2026 GMT
Subject: CN=6b8cfde27c01342b6065784da044674bf6360eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:21:1a:69:1a:e0:25:f4:93:85:f9:12:43:
ae:25:37:55:5c:00:78:dc:bb:69:d3:43:e1:b7:41:
3c:72:ff:7d:55:f2:58:f0:85:51:1e:05:08:75:ec:
fe:f0:8c:b5:ca:c1:b6:d8:4d:54:13:37:46:45:4d:
d3:0d:e9:18:99:7e:07:85:96:ed:ec:f6:73:3a:fd:
12:ce:f5:01:3f:c7:5f:8b:8b:91:cf:1a:3c:ea:d6:
b2:d9:54:7c:df:62:1d:6d:e1:05:54:23:a1:3b:52:
9b:09:af:39:dc:7d:cc:03:99:a2:6d:dc:73:51:05:
73:09:61:61:b7:fa:88:ed:d6:a6:6b:51:61:7a:0e:
26:6d:a4:4c:66:91:5f:ce:51:af:8e:f3:e1:4c:d4:
75:75:b1:25:96:fd:cb:39:d5:c5:70:36:6f:49:b5:
23:09:d4:21:bd:1c:e7:1b:57:9b:5f:51:49:19:58:
00:fa:97:97:f3:86:bc:46:a5:e1:42:b5:cb:e9:1f:
e7:a6:4e:62:a0:41:cb:89:02:a3:01:48:3d:e4:ac:
4b:97:69:da:20:1c:c0:2a:04:7a:4e:48:46:9d:4d:
b5:c6:54:94:98:0d:1b:61:b1:c2:71:0d:fb:ab:4b:
19:fc:0b:ac:0e:2a:b0:7e:f4:27:ac:c7:17:b7:45:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:FD:E2:7C:01:34:2B:60:65:78:4D:A0:44:67:4B:F6:36:0E:B3
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:04:1b:5a:5f:76:07:89:94:83:53:70:a4:25:a7:db:03:ed:
1f:be:08:bd:62:4e:21:b9:6b:33:bd:7a:ee:bb:d5:69:7a:32:
1b:51:5d:e4:70:c0:d1:ad:1e:4f:f2:29:92:6e:0a:ec:03:57:
9a:5a:1f:62:12:91:e3:a9:7c:3b:7b:13:42:d1:2a:74:52:cb:
02:42:cf:17:13:cf:6f:89:1a:7e:6b:aa:4b:27:94:8b:85:18:
e0:67:49:80:ab:1e:75:ba:7c:8a:24:6a:ba:9b:51:2f:c8:b0:
c0:83:11:aa:f7:69:05:65:51:e6:22:f8:75:de:f3:db:32:65:
68:91:17:0e:6a:54:aa:7f:00:00:88:7f:60:7b:4e:26:84:bf:
eb:5b:c8:5f:91:41:c5:76:f8:ee:08:2b:59:8c:51:d1:6f:47:
8a:92:16:53:d2:f9:66:7e:cf:cb:37:c3:30:7b:0e:ee:09:bb:
e6:50:77:03:1c:3b:4a:97:04:c4:c8:86:8a:74:00:23:f2:dc:
27:4a:86:10:57:aa:61:ee:24:7e:58:71:e9:1a:02:9c:4c:79:
43:d7:81:1c:84:28:91:dc:64:98:00:05:7b:18:5b:b0:5b:cd:
8b:16:18:1d:a5:5d:ee:cf:6d:9d:92:bb:80:d2:40:f3:34:5b:
83:34:5f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8qvsDDb0lBEA05/xwcE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj
MTdmMzQwHhcNMjYwOTI2MDkwMTI2WhcNMjYwOTI3MDkwMTI2WjAzMTEwLwYDVQQD
Eyg2YjhjZmRlMjdjMDEzNDJiNjA2NTc4NGRhMDQ0Njc0YmY2MzYwZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtghGmka4CX0k4X5EkOuJTdVXAB4
3Ltp00Pht0E8cv99VfJY8IVRHgUIdez+8Iy1ysG22E1UEzdGRU3TDekYmX4HhZbt
7PZzOv0SzvUBP8dfi4uRzxo86tay2VR832IdbeEFVCOhO1KbCa853H3MA5mibdxz
UQVzCWFht/qI7dama1Fheg4mbaRMZpFfzlGvjvPhTNR1dbEllv3LOdXFcDZvSbUj
CdQhvRznG1ebX1FJGVgA+peX84a8RqXhQrXL6R/npk5ioEHLiQKjAUg95KxLl2na
IBzAKgR6TkhGnU21xlSUmA0bYbHCcQ37q0sZ/AusDiqwfvQnrMcXt0VdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuM/eJ8ATQrYGV4TaBEZ0v2Ng6zMB8GA1UdIwQY
MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt
YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1
LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwQbWl92
B4mUg1NwpCWn2wPtH74IvWJOIblrM7167rvVaXoyG1Fd5HDA0a0eT/Ipkm4K7ANX
mlofYhKR46l8O3sTQtEqdFLLAkLPFxPPb4kafmuqSyeUi4UY4GdJgKsedbp8iiRq
uptRL8iwwIMRqvdpBWVR5iL4dd7z2zJlaJEXDmpUqn8AAIh/YHtOJoS/61vIX5FB
xXb47ggrWYxR0W9HipIWU9L5Zn7PyzfDMHsO7gm75lB3Axw7SpcExMiGinQAI/Lc
J0qGEFeqYe4kflhx6RoCnEx5Q9eBHIQokdxkmAAFexhbsFvNixYYHaVd7s9tnZK7
gNJA8zRbgzRfYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:31:46 2026 by rpki-client