Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: lgMYG8SZqUM5SztENkeLytJcsq+XWuTYHExV+LcwxFw=
Subject key identifier: 81:48:BF:9D:07:74:50:B5:E1:5E:E8:77:32:66:FB:98:12:C6:6C:A4
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019E318512F5776A95475F700D588479C4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 16:01:05 +0000
Manifest this update: Sat 16 May 2026 16:01:05 +0000
Manifest next update: Sun 17 May 2026 16:01:05 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: 7M/N5fyaFASIvMFWHjjUDIlx06by0rCLJo/dalwZdx8=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:12:f5:77:6a:95:47:5f:70:0d:58:84:79:c4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: May 16 16:01:05 2026 GMT
Not After : May 17 16:01:05 2026 GMT
Subject: CN=8148bf9d077450b5e15ee8773266fb9812c66ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:09:c8:96:09:f9:de:28:25:07:95:ab:e6:
87:db:0a:78:4c:5e:a0:10:95:a0:ec:36:0c:22:f5:
50:04:73:0a:65:49:c8:36:f9:da:fd:ab:bd:4d:9a:
6d:db:34:41:26:0a:ac:a8:7f:24:33:ef:36:7b:c7:
06:08:a8:66:00:ec:64:a4:ed:0b:5e:f8:14:1b:c2:
68:74:47:ca:f0:73:33:2a:12:6c:4d:8d:a4:9f:60:
c0:f8:36:3f:eb:4c:47:a2:21:a8:40:c9:d5:bb:d0:
ad:ef:64:b1:1e:3e:98:24:c0:7a:10:cc:43:90:52:
fa:c4:8d:6e:0d:e7:ee:23:b9:53:d4:14:ed:9a:26:
30:85:1c:b2:b7:53:a1:c4:ee:c3:9f:e3:9a:18:24:
43:aa:56:95:21:c5:8f:28:76:9c:ff:b3:23:89:8a:
18:19:4a:db:ff:57:66:4b:73:6a:b0:1c:34:9f:ad:
4f:52:46:ed:cf:ea:30:47:77:3d:71:02:71:01:18:
d9:02:c0:3c:68:2f:36:68:5d:e6:3a:0f:c8:0b:f9:
04:02:d2:d9:25:1d:01:ac:45:01:93:e3:79:8a:5d:
3a:d4:ab:0a:d7:ac:aa:f3:d5:eb:e6:2c:cb:d3:de:
47:50:5e:9d:f0:97:5f:e3:ef:f7:25:63:84:e8:60:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:BF:9D:07:74:50:B5:E1:5E:E8:77:32:66:FB:98:12:C6:6C:A4
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:22:55:75:79:87:09:a9:af:e3:ca:ea:36:82:06:88:08:50:
0e:ca:72:88:a5:20:41:74:14:ce:88:c0:4d:fa:bf:55:10:9e:
4a:dd:fb:15:28:ef:16:26:ca:62:cc:5b:17:09:6e:c5:18:d9:
cb:2e:63:2f:d3:1b:95:8b:bd:80:38:57:41:cf:9d:d6:2f:5e:
df:a2:d8:b6:69:b5:ca:e3:46:7c:50:a4:c2:f0:5a:4e:a1:13:
55:6a:62:57:6f:1b:00:80:45:88:e8:66:1d:e9:27:46:07:49:
ee:d1:b8:25:4a:a9:a3:04:dd:f4:ee:b3:f0:0a:fc:8b:e5:b5:
0e:8d:dc:ff:19:c1:55:78:15:e3:99:58:0f:7d:b0:5d:be:5a:
0e:79:74:67:08:a1:71:05:91:8b:50:63:69:38:dc:97:7a:1d:
c6:78:bc:00:86:cd:16:1e:5d:10:57:fb:a0:13:6f:5a:56:85:
07:9c:c4:a2:2d:07:40:17:72:46:56:b4:7f:1b:98:10:d7:ec:
61:1f:76:4c:ff:5a:3c:53:99:f7:fe:8c:bf:df:bd:20:39:fd:
e0:04:dc:85:90:13:d7:63:6f:3c:cb:fb:e0:81:ac:e5:4c:78:
d2:6a:9d:c5:bc:75:04:0b:f7:93:7f:17:95:51:9a:0b:d3:c4:
62:1c:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:11 2026 by rpki-client