Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: W2knppxmwZkiL+E9vpVLRp4u3AiSt2HAJXYwTMXeUBk=
Subject key identifier: D8:C2:C1:6C:A4:29:90:30:0D:A1:A4:FB:00:AF:D8:77:4A:31:F5:89
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 01A13E5CB4F46CDB0E8EC5277F55C74EAFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 18BF
Signing time: Thu 15 Oct 2026 07:00:25 +0000
Manifest this update: Thu 15 Oct 2026 07:00:25 +0000
Manifest next update: Fri 16 Oct 2026 07:00:25 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: uR4E8JV3teD4JhC0FygJs4v1cw/A4sjRuvJ5Q6ZaXsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:b4:f4:6c:db:0e:8e:c5:27:7f:55:c7:4e:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Oct 15 07:00:25 2026 GMT
Not After : Oct 16 07:00:25 2026 GMT
Subject: CN=d8c2c16ca42990300da1a4fb00afd8774a31f589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:13:dc:2e:be:68:23:42:91:3c:4d:91:dc:
9f:69:1d:c3:39:2f:77:b1:40:57:a0:0c:5c:d5:16:
03:08:4b:4d:df:a8:d3:a4:ce:90:95:34:a8:98:ce:
a2:db:5b:2c:28:8c:f7:8b:90:09:db:64:11:03:3d:
03:43:80:7c:0d:3c:37:08:db:5e:88:f1:e5:01:74:
c1:a6:fd:f8:08:a9:19:d8:25:5c:aa:4a:50:7e:9f:
07:b5:af:2a:b4:3f:72:dd:d7:3f:81:f5:d8:e4:91:
cb:cd:c0:1f:b3:9e:ab:ed:5f:16:0c:1a:32:fd:22:
c9:cf:44:80:6d:9f:bc:c3:5c:57:45:c8:98:b0:a3:
3b:1a:82:9a:7f:87:96:e5:13:58:39:b1:2d:b4:cc:
cc:c9:a6:c3:bb:74:af:16:ab:ba:c0:0c:5d:37:bd:
28:69:5f:50:da:7d:bc:e5:ad:20:43:28:f4:72:63:
28:82:7d:e1:97:e5:a0:f4:12:4a:d6:9c:bb:ba:09:
60:de:07:0d:12:74:ac:6c:93:a2:01:af:de:b0:4a:
0e:b2:3b:53:c3:eb:8d:dd:ad:b7:a8:61:ba:2d:2e:
07:d7:d9:84:07:ae:0c:ec:2e:d5:38:9f:52:cd:ad:
69:fb:fc:05:37:be:5b:2b:db:5b:a0:ab:94:a6:1b:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:C1:6C:A4:29:90:30:0D:A1:A4:FB:00:AF:D8:77:4A:31:F5:89
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1a:8c:bd:4d:19:d1:e4:03:ec:ec:55:3b:8a:c4:f0:39:21:
21:99:6c:dc:83:69:df:e8:7e:35:44:46:23:e7:f7:42:c3:59:
bb:44:a0:ee:bc:c4:76:36:e1:e6:9c:90:06:d3:71:9a:ce:1a:
c5:68:67:7b:0c:7e:16:e9:e5:d5:56:d3:37:84:7c:6e:7b:e4:
58:05:db:4f:c5:3a:58:0c:e1:81:19:85:63:6e:66:cf:be:93:
92:7e:a8:85:17:53:c5:90:e0:14:cb:3b:79:5b:e0:5e:9d:05:
23:72:85:9e:db:2a:c0:b3:5d:f2:08:c7:94:f2:29:4d:a0:31:
58:f3:87:4e:8d:09:78:8f:e1:fa:95:c1:54:ed:f5:e7:ee:02:
61:14:cc:bc:c2:f5:ed:a3:a5:27:4c:ff:00:4c:f4:f0:c6:a4:
33:5f:2a:92:7c:2e:d2:43:b0:2f:0a:df:d6:a6:15:81:e6:13:
a6:60:a5:65:26:8c:3a:fe:5c:49:06:8f:17:c6:5d:16:aa:b4:
05:9f:ea:e5:08:32:38:04:bb:e1:6f:0f:ea:9c:17:0d:71:a7:
c5:47:67:28:86:5e:2f:4e:06:7c:ea:3d:bf:ec:93:3c:76:ff:
42:e9:20:cb:0f:18:5d:f6:d4:3b:17:6e:7f:8e:42:10:4b:cb:
d7:41:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:20 2026 by rpki-client