Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: jdHji/XMU+WizxEroY0To9BxHZNARkSg/5n9THQ0LFI=
Subject key identifier: 89:C4:C9:24:08:D7:27:5D:25:2D:48:D6:1F:4D:F2:E2:E4:D1:7B:DD
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019E303B65829994A260629EF5C132D3B684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 172A
Signing time: Sat 16 May 2026 10:00:59 +0000
Manifest this update: Sat 16 May 2026 10:00:59 +0000
Manifest next update: Sun 17 May 2026 10:00:59 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: u3BwP4FyImeSjFAov4E16WqsCXRwv8PrsUsxRLAmwDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:65:82:99:94:a2:60:62:9e:f5:c1:32:d3:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: May 16 10:00:59 2026 GMT
Not After : May 17 10:00:59 2026 GMT
Subject: CN=89c4c92408d7275d252d48d61f4df2e2e4d17bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:5b:40:14:e2:f1:69:ee:fe:a9:52:1d:9f:
c1:40:60:d9:db:dd:bc:33:96:f6:78:ad:95:41:0c:
42:1f:37:f8:9e:51:52:fa:e1:c3:bf:c1:22:ef:01:
aa:dc:70:18:10:ef:22:b6:fe:86:61:87:c7:43:88:
b9:0e:d0:e2:d7:b1:3d:0c:96:b3:0b:7b:9e:49:73:
ea:c5:e9:05:0d:38:cb:73:a7:e1:44:f6:3f:03:92:
85:aa:ea:6e:1a:df:87:44:77:31:1a:49:d1:4e:84:
a7:7b:ab:15:91:e9:de:36:e8:9a:fe:6c:08:9f:ea:
2a:e2:90:8e:4b:73:56:c6:a9:27:6f:94:3d:61:66:
9a:0c:ce:c5:9a:6a:90:1c:c6:16:5a:75:18:3f:25:
d9:2d:52:d7:16:d5:ee:c5:f4:30:0d:a1:a2:5c:42:
9b:d1:7e:4e:5b:4e:2a:cd:34:0b:53:4e:7c:d7:48:
56:f7:53:da:4d:27:73:c8:25:09:72:a0:ed:71:f5:
f9:a2:55:d0:8a:c3:f5:c4:ed:c4:83:ab:cb:5b:58:
4f:cb:f5:0c:f8:73:d7:4d:5c:c8:ef:8c:94:86:76:
eb:1f:e1:e9:7e:f2:b7:fa:24:30:26:da:f4:bc:42:
6d:ec:82:f3:28:ff:40:93:7a:69:f9:55:d3:7e:3a:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:C9:24:08:D7:27:5D:25:2D:48:D6:1F:4D:F2:E2:E4:D1:7B:DD
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:60:4a:df:f6:82:14:3d:f8:a0:da:77:82:2c:0a:43:70:
78:3f:3f:05:1e:60:03:03:bc:2e:38:b2:eb:9c:cb:10:5e:c1:
b6:b8:95:f2:91:63:07:f5:b6:fc:17:f4:52:fb:fa:51:f8:0b:
85:0f:57:c0:b8:c8:4e:3d:3c:fa:50:56:6c:a7:7c:b0:34:59:
0c:c5:98:e8:e8:b3:06:b8:31:93:17:8d:77:59:b5:2d:8b:46:
57:ab:44:f0:e5:53:6e:06:6d:81:1f:e6:77:01:ba:f0:b8:82:
3b:b9:4d:17:a0:3e:44:e3:83:92:15:17:0f:a2:8e:49:72:bd:
bf:0e:2d:95:c0:e1:a9:24:10:0a:60:58:28:33:39:54:de:96:
dc:9b:38:b5:b9:26:40:65:cd:d5:ad:3d:22:de:09:6f:d9:a8:
8f:08:c5:79:b2:c2:c7:bb:7f:6d:6a:52:9d:75:72:3f:ab:d9:
e6:90:9d:8b:e9:1b:29:53:49:39:25:a8:a6:ec:47:d5:be:f6:
f3:dc:40:60:18:02:b3:f1:b7:7d:60:91:dd:03:79:8b:7c:29:
40:ae:8b:2d:cf:17:68:f5:93:c4:5c:68:9a:c5:e2:9e:9c:56:
5b:13:71:eb:83:d8:9d:dd:aa:26:6d:eb:7f:2e:31:a1:0b:34:
6a:d2:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:20 2026 by rpki-client