Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: NSwJNdAPcZqfM6O9c0L931h5m5rf+uEetQQi0TSpkIk=
Subject key identifier: 28:74:A2:18:2D:1B:51:07:92:47:A1:B5:62:B3:F1:19:B8:14:0A:78
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 01A03FDFF71B7105689B85178E0A4197B556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 038E
Signing time: Wed 26 Aug 2026 21:00:37 +0000
Manifest this update: Wed 26 Aug 2026 21:00:37 +0000
Manifest next update: Thu 27 Aug 2026 21:00:37 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: yyPjYz0eebDqzmAjD+4VqTzQD/e/JjMY0vQfWv4fSbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:f7:1b:71:05:68:9b:85:17:8e:0a:41:97:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Aug 26 21:00:37 2026 GMT
Not After : Aug 27 21:00:37 2026 GMT
Subject: CN=2874a2182d1b51079247a1b562b3f119b8140a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:d4:42:c9:5c:ab:47:2f:84:82:1b:11:77:
da:68:20:4e:0d:95:b6:a7:60:80:26:3a:a6:69:1f:
34:8e:cb:54:d2:e6:76:8d:21:ed:1d:2e:9e:fa:0e:
7b:a3:d6:13:97:e0:0e:2f:55:10:bf:f1:86:a7:76:
5d:8f:9c:87:c9:3c:20:eb:c5:03:24:25:a4:5f:31:
e0:20:41:3b:20:02:6e:01:70:ee:46:28:86:79:76:
83:fb:c4:81:3a:d8:83:74:d1:26:70:23:30:d4:56:
c6:c9:14:d7:f2:d6:9d:04:29:d0:92:26:a3:99:a0:
74:f3:9f:01:fa:cf:f6:35:28:f0:64:b2:22:4b:8c:
85:39:83:89:06:fd:00:6a:5c:57:3a:cc:5f:20:b2:
40:fc:0c:28:61:90:61:2d:5a:47:7f:31:78:e9:b3:
76:d5:db:03:2f:83:2e:ef:8f:d6:c0:40:23:3f:11:
f9:b9:2f:fb:5c:b8:2c:26:56:70:f1:37:5d:42:06:
6c:84:58:de:98:31:11:4d:eb:4d:a7:28:d4:04:51:
18:72:48:da:04:83:77:4b:a9:36:8f:b6:bd:b7:16:
48:8a:af:3e:f3:3f:f4:28:23:33:49:64:cc:64:23:
2d:29:bf:c4:25:92:ec:2e:23:af:6e:9b:8e:32:e6:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:A2:18:2D:1B:51:07:92:47:A1:B5:62:B3:F1:19:B8:14:0A:78
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:34:51:76:a5:43:37:ec:df:ec:f1:12:ac:13:a3:68:7a:
5f:6c:0d:59:7f:c5:d4:3b:e5:76:97:ed:a0:53:20:12:ff:aa:
87:60:71:55:c1:66:c4:95:42:b4:e9:ea:92:52:69:aa:75:c5:
69:b9:75:81:cf:e3:79:39:d4:b0:76:ed:9b:9a:0e:04:36:2a:
2c:ea:35:87:f2:43:fa:48:dc:6f:91:6c:dd:37:52:dd:57:63:
c0:92:9f:e5:6a:ff:eb:4a:2f:91:5a:c6:54:6c:dc:e8:8d:5c:
89:3d:a2:37:3c:cb:a0:c9:de:15:9e:56:52:e0:e1:f3:49:68:
b5:35:94:f5:4c:bf:bb:7b:fd:1c:1b:0e:2f:ed:31:36:50:38:
32:07:6d:eb:15:58:45:c2:6c:e2:01:1e:7a:aa:f7:d1:5b:e9:
ca:20:e9:cd:98:28:40:30:3c:5c:08:4e:e2:69:2d:0f:db:62:
98:80:fb:a0:2e:14:a8:ba:38:28:fe:fd:ab:d5:87:d4:e1:26:
08:46:d3:ec:8a:59:60:53:8c:70:12:38:85:ef:79:2c:48:2f:
da:ba:88:ca:fe:64:73:56:20:01:af:4f:68:33:60:1f:ad:88:
88:f1:36:b3:db:c8:e2:c3:6d:ab:f9:f0:fc:69:03:06:96:d4:
75:e0:e3:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/3/cbcQVom4UXjgpBl7VWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmVmMDUzZmE2NzQ4MWVlMjc3N2E3MjczYWQxOGE0MzFj
M2JhYjEwHhcNMjYwODI2MjEwMDM3WhcNMjYwODI3MjEwMDM3WjAzMTEwLwYDVQQD
EygyODc0YTIxODJkMWI1MTA3OTI0N2ExYjU2MmIzZjExOWI4MTQwYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP3UQslcq0cvhIIbEXfaaCBODZW2
p2CAJjqmaR80jstU0uZ2jSHtHS6e+g57o9YTl+AOL1UQv/GGp3Zdj5yHyTwg68UD
JCWkXzHgIEE7IAJuAXDuRiiGeXaD+8SBOtiDdNEmcCMw1FbGyRTX8tadBCnQkiaj
maB0858B+s/2NSjwZLIiS4yFOYOJBv0AalxXOsxfILJA/AwoYZBhLVpHfzF46bN2
1dsDL4Mu74/WwEAjPxH5uS/7XLgsJlZw8TddQgZshFjemDERTetNpyjUBFEYckja
BIN3S6k2j7a9txZIiq8+8z/0KCMzSWTMZCMtKb/EJZLsLiOvbpuOMuZLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh0ohgtG1EHkkehtWKz8Rm4FAp4MB8GA1UdIwQY
MBaAFNsu8FP6Z0ge4nd6cnOtGKQxw7qxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUt
NjMwZGYzNTdlNTdkLzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUtNjMwZGYzNTdlNTdk
LzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3I0UXal
Qzfs3+zxEqwTo2h6X2wNWX/F1DvldpftoFMgEv+qh2BxVcFmxJVCtOnqklJpqnXF
abl1gc/jeTnUsHbtm5oOBDYqLOo1h/JD+kjcb5Fs3TdS3VdjwJKf5Wr/60ovkVrG
VGzc6I1ciT2iNzzLoMneFZ5WUuDh80lotTWU9Uy/u3v9HBsOL+0xNlA4Mgdt6xVY
RcJs4gEeeqr30VvpyiDpzZgoQDA8XAhO4mktD9timID7oC4UqLo4KP79q9WH1OEm
CEbT7IpZYFOMcBI4he95LEgv2rqIyv5kc1YgAa9PaDNgH62IiPE2s9vI4sNtq/nw
/GkDBpbUdeDjpw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:54 2026 by rpki-client