Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: EWE5jlE+yHYFR/LPEz+JdAnBsBI56XR1aAehqsQ7HbM=
Subject key identifier: 8A:09:A5:6C:D9:97:35:43:D2:58:A0:45:EA:22:9F:F2:3F:C7:C6:3F
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 01A16C48C1BBA916A004A7B9B99DB20D0ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 0A1B
Signing time: Sat 24 Oct 2026 05:01:09 +0000
Manifest this update: Sat 24 Oct 2026 05:01:09 +0000
Manifest next update: Sun 25 Oct 2026 05:01:09 +0000
Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: J7giBOkNLL2Dmv4u3DhcrEDXUWIM0Eo2FASxTNNJy2E=)
2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:c1:bb:a9:16:a0:04:a7:b9:b9:9d:b2:0d:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Oct 24 05:01:09 2026 GMT
Not After : Oct 25 05:01:09 2026 GMT
Subject: CN=8a09a56cd9973543d258a045ea229ff23fc7c63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:ba:8a:77:f1:e7:eb:95:12:5d:2e:ee:90:
89:b4:51:b0:55:82:51:53:82:30:d7:ff:59:e7:f6:
25:e6:37:f4:4f:d5:7b:7d:03:db:5f:d5:d3:18:18:
4d:b0:75:06:0a:44:d7:8a:58:18:10:c9:08:c0:e6:
85:7f:24:9e:19:90:8c:e3:7b:8e:88:91:70:19:2d:
ed:ce:d9:01:24:8c:4d:60:79:54:2e:67:8a:1e:84:
59:be:6c:7f:9f:08:24:5d:0c:71:91:e0:8c:db:71:
ab:ef:d8:c6:14:47:b0:36:04:c2:61:98:2a:1b:28:
17:c4:bb:91:1b:58:75:89:7c:b5:37:10:bb:26:df:
0a:1e:c8:92:fc:46:be:10:8f:4a:c4:ca:b5:c2:d8:
55:c2:ee:32:dc:f2:9a:e3:bf:e0:1d:32:06:14:44:
9b:93:8e:20:1c:f5:f4:97:4c:06:05:e4:92:24:83:
23:dd:4e:48:9c:4c:7c:5e:08:26:c2:25:d5:6b:2f:
6c:bb:64:8e:2c:29:be:90:29:7f:58:88:2c:a6:0b:
af:d7:ac:b4:bd:e6:bf:09:7d:63:fb:db:71:f5:85:
c3:a4:9c:f4:55:34:2c:60:3b:3f:54:84:85:3d:a7:
0b:de:24:69:de:7a:a7:cc:74:44:02:3d:84:b5:b5:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:A5:6C:D9:97:35:43:D2:58:A0:45:EA:22:9F:F2:3F:C7:C6:3F
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:8a:8b:1a:a9:f7:fb:71:9f:67:77:fc:74:ed:f1:b5:47:
2a:e0:f2:92:a3:55:c1:bd:11:e9:36:ff:83:c4:d4:41:54:a6:
8d:59:c0:cd:0e:a7:48:de:c2:ac:2e:f2:42:3a:3d:4b:5f:2e:
65:23:96:5c:92:cc:6a:f6:52:d6:84:eb:9a:94:12:94:41:a4:
53:2a:f5:87:ea:4a:96:f8:84:7d:2c:67:0e:18:0f:d2:45:1e:
b2:c4:61:60:d8:1c:34:63:82:f1:50:6e:4e:91:0e:ab:d4:35:
49:e5:19:22:1f:a9:a8:6b:01:ac:ec:6e:46:6d:8c:e8:18:05:
02:b4:f1:1d:82:56:0d:ac:e4:04:a6:12:12:35:84:72:99:4b:
97:09:73:90:90:cb:06:87:4c:01:e2:56:e3:ae:f8:ed:07:b0:
be:d2:a5:39:92:08:5d:e1:39:f4:a0:a3:7b:eb:90:6c:be:88:
e1:a7:c5:56:2d:04:76:69:7a:c0:05:b4:40:59:b1:a5:80:30:
81:49:9f:90:3e:e4:fe:1d:c7:44:12:63:04:41:4d:9d:af:7e:
4a:ba:bf:c2:4a:dd:47:88:b3:78:05:1f:b0:67:3c:12:bf:1f:
48:8d:dd:02:4c:41:e5:cd:09:48:b8:d3:d1:63:86:77:b4:a7:
e2:dc:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:40:52 2026 by rpki-client