Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: ySpAUaPghmDshE9CDFG0IggAGbiNZ3zMRp5NRBIgVio=
Subject key identifier: 55:75:E7:CA:E2:E7:C3:D7:A3:8C:4E:25:E9:DD:BA:AA:2A:F3:22:FB
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019D3909EBF24AA9724DF7D418582FC087E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 16AA
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: SCsYVxmWXXuvXxFDcXHuZB90GqcBqfclAsTX+uSYwiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:eb:f2:4a:a9:72:4d:f7:d4:18:58:2f:c0:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=5575e7cae2e7c3d7a38c4e25e9ddbaaa2af322fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:35:6c:9e:0f:f7:e3:b8:3c:68:6d:51:9d:
69:dc:e0:ae:49:4f:83:35:a2:58:46:99:01:db:4c:
0d:3e:92:a2:52:ed:a5:82:21:ad:65:02:a4:a4:11:
3c:18:f4:1d:83:fb:bb:c5:7e:98:af:99:f4:63:ce:
5e:33:b8:24:4e:ae:7e:7c:f4:26:07:ae:e3:65:54:
eb:cd:92:6d:b2:36:42:43:36:20:26:67:47:9d:59:
df:b3:b6:3c:b7:54:d2:fb:6b:50:b1:e5:00:0d:61:
bf:1e:89:09:e8:56:be:88:20:ea:93:b5:49:10:bc:
fc:11:42:31:34:6e:23:f3:e2:23:b2:a3:4c:a4:be:
7e:da:26:c5:02:a9:16:48:f3:64:19:0c:b3:30:2e:
0d:b6:b2:ac:1d:1f:18:44:37:4d:01:c9:44:ce:49:
ba:21:e9:a4:ef:7a:d9:70:21:e2:32:e7:8c:78:f7:
a8:7e:44:07:5f:99:fd:2e:f6:7f:9c:b0:3d:00:ee:
f3:48:d9:af:9e:40:21:0e:69:d7:2c:9a:4b:53:04:
6d:0c:be:9f:a5:41:6d:2e:1c:1b:65:22:2a:5a:d1:
9b:9b:24:d2:39:c7:bc:63:0b:54:16:81:87:9b:6c:
ea:77:d8:cb:0d:ab:49:59:17:bd:0e:b8:8c:56:8b:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:E7:CA:E2:E7:C3:D7:A3:8C:4E:25:E9:DD:BA:AA:2A:F3:22:FB
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:73:e1:82:91:7f:68:76:59:d4:cb:f7:2b:d3:82:4d:68:
98:69:d8:06:a1:26:3c:06:e6:30:3f:a1:42:c4:75:6c:4c:1f:
4f:93:b2:6b:19:89:6f:b9:a1:67:86:f4:47:a0:4d:98:ed:13:
e4:bc:58:8d:c1:39:a1:39:0d:ea:44:73:80:01:e7:d7:13:35:
c7:b8:0b:ff:72:a2:80:9d:a2:89:52:7b:8b:89:74:1f:01:8a:
24:44:a2:c1:8a:f3:9a:ab:6b:ee:eb:42:23:05:e1:33:41:e5:
96:a2:b1:a2:ca:aa:ff:c3:d4:3e:11:3e:4f:e4:4c:45:f6:13:
21:bc:7e:d4:6e:13:67:78:50:96:4e:71:32:f5:b2:e6:21:07:
c2:e5:27:94:1e:60:43:35:9f:f9:d4:eb:29:4a:50:ab:39:f5:
90:dd:52:c9:12:5d:5a:83:06:c4:a3:5b:e0:cb:a6:41:c4:ce:
81:07:c9:42:d6:73:f5:58:7c:96:4d:86:26:b8:0b:43:52:a3:
e8:21:32:12:d6:aa:a9:15:98:fe:12:01:9c:93:9f:cf:89:fa:
99:d8:c8:73:a4:b3:bc:c3:f3:ae:17:79:54:c6:65:fc:0d:c6:
f1:f5:f2:2a:34:a8:8f:f6:f2:d9:4b:f0:ae:32:54:91:0c:1f:
3c:02:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:07 2026 by rpki-client