Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: UHIajewJiPsYjSRiYKP1zsDhSLg+VuKEy2kFKNbJ6QI=
Subject key identifier: 67:CC:7B:5C:EA:AD:EE:A3:E3:66:40:67:4F:E8:48:BC:1B:CC:8F:90
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019CBEF2219F30692EDD7422893003AD4C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 07AF
Signing time: Thu 05 Mar 2026 17:01:05 +0000
Manifest this update: Thu 05 Mar 2026 17:01:05 +0000
Manifest next update: Fri 06 Mar 2026 17:01:05 +0000
Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: xYecTJzrxu78L4JkcIMD4EbJ80Pk9iTXKu4T37iWZZQ=)
2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:f2:21:9f:30:69:2e:dd:74:22:89:30:03:ad:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Mar 5 17:01:05 2026 GMT
Not After : Mar 6 17:01:05 2026 GMT
Subject: CN=67cc7b5ceaadeea3e36640674fe848bc1bcc8f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:cd:74:4a:5c:cf:fa:5b:57:b5:25:44:2f:
42:8e:65:83:b9:1b:64:24:75:50:fd:66:e5:7b:3b:
60:05:9f:f0:25:3f:61:be:14:6d:8b:8f:8b:e5:23:
ef:83:0f:97:70:cc:92:7a:7e:e5:17:e5:ad:aa:ed:
7f:33:24:de:22:56:12:f2:ca:17:6f:27:01:78:51:
c8:1f:19:7d:e5:0a:6a:31:60:a9:ea:55:a5:04:e2:
c6:77:65:dc:23:e6:bb:ed:5d:5d:b9:c2:ab:ad:13:
27:a2:62:fd:d2:02:5f:21:3e:de:96:41:61:6d:9c:
a7:3f:30:96:65:1c:4a:d7:c4:dd:30:61:3b:ad:98:
11:10:0f:f4:b0:1d:88:2b:d1:ae:27:c3:cb:bd:61:
66:ac:38:91:94:a0:9c:48:d6:88:08:d2:65:5f:57:
17:5f:2d:8c:84:88:ad:78:c6:26:4b:6f:7d:1d:a4:
98:07:28:09:0d:63:88:21:5a:8c:d5:01:72:1b:cd:
53:22:ba:a3:9a:42:c1:62:7b:12:77:c4:c3:41:e1:
49:d3:f5:0d:2b:8f:6b:77:c1:24:e3:ce:d1:e8:23:
b3:d2:11:8d:c1:b0:f6:b3:10:04:6e:84:d7:90:7a:
d2:d5:83:e8:69:52:fe:06:40:6b:02:42:fe:78:90:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:7B:5C:EA:AD:EE:A3:E3:66:40:67:4F:E8:48:BC:1B:CC:8F:90
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:db:e3:2e:65:1f:2d:8e:de:13:da:6b:66:4e:48:f3:71:66:
48:50:06:b6:a1:6d:17:b1:19:2b:8d:97:99:d6:be:fe:b2:43:
a4:05:75:df:84:45:f8:7f:ce:cc:20:c5:4b:78:a1:04:dc:1a:
83:7e:8f:02:09:f8:8d:1b:8c:6a:9c:90:f4:cc:5e:37:cc:67:
af:22:d1:5c:cf:fe:12:6b:51:9a:98:2c:42:e8:5b:49:41:68:
14:e7:51:c1:6f:a9:4d:c5:47:4a:ce:ec:ac:e5:a6:55:94:03:
dc:8f:5c:72:34:4a:c7:51:4e:07:79:3f:f9:bf:ff:4a:01:bd:
cc:d3:2e:88:89:48:b2:0a:d3:a7:41:2e:13:7c:ec:4c:a6:80:
e6:f4:b0:a3:ef:ed:89:6e:16:59:a7:c3:36:25:2d:d4:24:9d:
ef:5b:05:66:df:af:c6:ae:9b:77:b7:fa:55:b5:a7:eb:96:5f:
a2:1d:44:eb:e6:46:03:3b:42:a1:11:ae:3f:9e:54:c0:4c:65:
69:7b:7c:cc:91:ab:51:2a:47:b5:66:68:be:20:49:e9:4e:a3:
65:ce:a2:b2:c4:ba:72:e2:1c:8e:34:73:a7:f7:63:a6:79:2a:
2b:49:18:35:17:c4:33:76:4e:e8:19:17:7e:f3:ad:af:2d:9c:
96:60:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:42:39 2026 by rpki-client