Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: PzQvbnL6333wt8MBzu3rQ5Bcrrx8TtQTaNws4/PKHeU=
Subject key identifier: 9B:5B:52:2F:B1:66:F8:9E:8E:A7:D7:39:B6:78:7A:A5:CE:14:58:CE
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 019D378959F86F518A9DA0711BDF972AB835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 01FC
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: GdzF7kW5sZ19KxSk0UC5SZ624pr4T0UuneiVHt1NcSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:59:f8:6f:51:8a:9d:a0:71:1b:df:97:2a:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=9b5b522fb166f89e8ea7d739b6787aa5ce1458ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:bb:1a:0e:e2:84:64:d6:d1:7f:db:ab:84:
12:27:42:67:50:fa:89:21:6e:33:39:f2:e1:39:ca:
5a:5b:72:8f:f1:ae:bf:a7:f6:2b:d7:6a:c4:ed:d1:
75:16:a1:cd:cc:d1:c3:4b:8b:f3:0c:cb:2e:51:17:
9c:b3:41:19:8a:2f:a8:f7:75:6c:20:79:58:59:b3:
5a:49:b4:8f:94:c6:1a:7c:0b:39:ad:53:ac:5b:09:
60:78:1e:40:30:aa:b5:61:c4:01:0d:ec:58:43:e7:
22:81:a4:94:33:4a:68:6e:2f:a7:7a:c9:ea:72:fb:
0f:a8:72:15:8f:81:98:93:fb:1b:0c:60:5c:c1:26:
4f:23:65:55:f3:52:ea:af:aa:27:5d:a7:c0:1c:04:
dc:d7:1c:2d:35:1c:47:1e:e7:9c:de:b2:19:1b:5c:
54:0f:08:b6:97:87:32:46:00:c5:59:1f:70:68:f3:
62:5b:7d:91:a7:39:a3:26:3c:27:0b:fe:a9:7a:e1:
5d:db:41:2f:3f:f5:d2:72:eb:d5:b3:1c:2e:9b:7c:
1b:83:ba:17:58:ee:f1:1f:59:60:51:5a:5f:75:1b:
bf:44:56:a1:cf:1e:c0:9f:b0:4d:35:bc:3c:f4:7d:
4f:42:86:16:05:6b:69:1c:f1:38:1d:ec:1f:0a:6d:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:52:2F:B1:66:F8:9E:8E:A7:D7:39:B6:78:7A:A5:CE:14:58:CE
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:21:71:a8:e4:43:89:4b:04:d1:ca:ca:d0:80:2c:8d:af:31:
57:34:57:0e:df:97:ee:bf:6a:e4:df:68:b2:72:f2:6e:65:10:
fe:82:44:2a:09:30:92:de:79:46:23:26:78:7e:da:62:0a:88:
e3:e6:20:b3:bc:20:8e:e6:e7:b7:1e:a9:89:8f:b9:df:19:b3:
01:bc:64:cd:b2:0f:52:89:99:07:27:ad:b9:8e:99:5a:0a:e5:
dc:2b:d5:bc:5e:b6:48:58:ab:d2:80:6d:7a:4d:f1:99:8c:f1:
00:89:b2:fc:95:6e:20:2e:ee:a1:9b:c9:5f:76:cc:1e:6d:97:
e0:b3:ac:37:43:d2:01:e1:3a:5b:25:6d:2e:ff:49:ef:e9:24:
f2:6f:76:fc:dd:48:ad:e5:8d:6f:bb:fa:8f:0a:a7:45:41:bb:
37:f7:db:e8:47:c1:62:6d:3e:64:c9:40:6f:c1:e3:c9:34:62:
2d:4b:d8:7f:c5:2c:f6:25:e1:82:b9:7b:3b:09:f0:67:76:5d:
82:43:a9:b3:41:68:e6:b2:dd:a2:90:d2:4a:2f:b5:16:14:ce:
ca:cb:18:77:bd:0c:ac:9e:12:30:9e:1a:89:48:fe:0b:7a:60:
df:aa:41:6c:35:a5:0a:07:29:8c:46:6b:b6:da:70:9d:1a:2f:
39:52:29:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVn4b1GKnaBxG9+XKrg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmVmMDUzZmE2NzQ4MWVlMjc3N2E3MjczYWQxOGE0MzFj
M2JhYjEwHhcNMjYwMzI5MDMwMDQxWhcNMjYwMzMwMDMwMDQxWjAzMTEwLwYDVQQD
Eyg5YjViNTIyZmIxNjZmODllOGVhN2Q3MzliNjc4N2FhNWNlMTQ1OGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j67Gg7ihGTW0X/bq4QSJ0JnUPqJ
IW4zOfLhOcpaW3KP8a6/p/Yr12rE7dF1FqHNzNHDS4vzDMsuURecs0EZii+o93Vs
IHlYWbNaSbSPlMYafAs5rVOsWwlgeB5AMKq1YcQBDexYQ+cigaSUM0pobi+nesnq
cvsPqHIVj4GYk/sbDGBcwSZPI2VV81Lqr6onXafAHATc1xwtNRxHHuec3rIZG1xU
Dwi2l4cyRgDFWR9waPNiW32RpzmjJjwnC/6peuFd20EvP/XScuvVsxwum3wbg7oX
WO7xH1lgUVpfdRu/RFahzx7An7BNNbw89H1PQoYWBWtpHPE4HewfCm3D4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtbUi+xZviejqfXObZ4eqXOFFjOMB8GA1UdIwQY
MBaAFNsu8FP6Z0ge4nd6cnOtGKQxw7qxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUt
NjMwZGYzNTdlNTdkLzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUtNjMwZGYzNTdlNTdk
LzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayFxqORD
iUsE0crK0IAsja8xVzRXDt+X7r9q5N9osnLybmUQ/oJEKgkwkt55RiMmeH7aYgqI
4+Ygs7wgjubntx6piY+53xmzAbxkzbIPUomZByetuY6ZWgrl3CvVvF62SFir0oBt
ek3xmYzxAImy/JVuIC7uoZvJX3bMHm2X4LOsN0PSAeE6WyVtLv9J7+kk8m92/N1I
reWNb7v6jwqnRUG7N/fb6EfBYm0+ZMlAb8HjyTRiLUvYf8Us9iXhgrl7OwnwZ3Zd
gkOps0Fo5rLdopDSSi+1FhTOyssYd70MrJ4SMJ4aiUj+C3pg36pBbDWlCgcpjEZr
ttpwnRovOVIp+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:29 2026 by rpki-client