Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: pvKO+9StlB4zR5WfgOg6PelOAeUM+2NhlbhzteaoyAw=
Subject key identifier: 90:8C:58:4A:F5:75:27:50:DF:28:68:17:8A:87:B6:C2:37:16:F2:B6
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019DA89E31F0469785167D79A63135CFEDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 0828
Signing time: Mon 20 Apr 2026 02:00:32 +0000
Manifest this update: Mon 20 Apr 2026 02:00:32 +0000
Manifest next update: Tue 21 Apr 2026 02:00:32 +0000
Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: 4GTL1ZMolNaNCylifqHYZTauC1Bok2vdlGb1AKqSmbc=)
2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:31:f0:46:97:85:16:7d:79:a6:31:35:cf:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Apr 20 02:00:32 2026 GMT
Not After : Apr 21 02:00:32 2026 GMT
Subject: CN=908c584af5752750df2868178a87b6c23716f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:f5:af:b5:55:45:40:d8:73:e7:d1:18:55:
54:8d:8b:5a:d0:9d:35:9b:97:6c:d3:bd:65:d2:71:
7e:1a:13:b5:99:bc:23:0d:ee:76:ac:0d:35:55:80:
2e:a9:ba:30:60:ad:9f:31:2c:3d:b4:98:dd:74:e5:
f4:40:e3:6a:fc:11:60:59:7f:4b:1e:09:44:79:cd:
b7:7c:90:d7:1b:3d:f7:d4:1e:0d:c8:a7:07:72:a8:
e1:c0:7e:d5:0e:7d:80:e6:55:06:8a:1e:4b:36:5d:
c7:3f:8e:a4:c3:1b:b8:1a:36:ba:86:ce:df:7c:aa:
d2:10:a7:ed:7b:80:a3:bd:75:4b:3c:ef:13:5b:5f:
60:36:8b:cc:66:28:03:f3:2a:32:76:1b:f5:fc:f4:
ef:25:da:ca:ac:3a:36:06:16:41:51:b3:95:3e:be:
76:a4:12:bf:99:63:cb:e4:b4:a3:e3:ad:25:c2:ab:
0a:9e:d8:e3:b3:e2:b0:45:da:61:dc:65:16:23:80:
1b:6a:ee:3d:a5:45:04:ef:74:65:c2:f6:e5:f7:63:
34:55:07:cf:13:41:16:1f:64:42:3a:a6:9e:a1:35:
b6:78:00:1d:30:6a:a7:b7:02:1f:92:ff:db:c3:e5:
15:35:38:26:3a:36:78:ec:a8:87:ca:2a:42:59:37:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:58:4A:F5:75:27:50:DF:28:68:17:8A:87:B6:C2:37:16:F2:B6
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:32:f5:c4:0f:e4:05:03:b4:c4:21:73:06:ff:52:96:85:
b0:a9:30:eb:b7:fa:20:e8:1e:dd:88:6b:1f:16:f7:b0:de:d5:
9b:92:50:ff:c4:a5:af:4c:ee:f9:e8:5b:5a:6f:f4:c0:80:c9:
48:4b:c8:3c:fc:58:2a:74:a2:3a:b6:65:23:fd:3c:7b:fc:4e:
bb:4e:02:77:8c:5f:c8:1f:59:33:45:40:19:62:78:3d:29:06:
51:3b:b0:dc:4c:e1:2c:94:4b:9a:3c:18:c8:e4:6c:76:ab:a7:
4d:b7:26:ae:37:71:d2:46:0b:5e:2c:e8:b8:3d:f7:70:b0:fe:
02:2c:55:8b:ce:a0:13:9f:53:80:2f:0b:25:fb:68:92:8b:d0:
b3:f5:28:73:91:36:9f:54:69:d9:3b:4d:e1:6a:07:ea:8f:46:
73:96:bf:20:9b:2d:9d:a7:8d:a6:c8:75:1d:06:0d:b4:6a:b8:
1d:fb:f6:97:84:e2:87:29:6e:6f:d0:3a:1a:e9:fd:3d:41:80:
d5:5c:d6:49:33:15:99:25:43:50:fb:ca:cd:bd:e3:1e:6a:06:
be:b5:ea:74:87:1b:72:25:a9:21:7a:77:4c:63:ad:bc:38:96:
c9:b7:f1:38:61:3e:9e:ed:d7:67:08:b5:0b:6a:10:b9:1a:a4:
4e:28:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:53:26 2026 by rpki-client