Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: WlCJs8T7PCu1yhlmLsqL6eaz8KF8cwBQm5rwyT9SMG4=
Subject key identifier: 2F:3A:09:94:CE:2B:80:EF:5F:67:C5:FB:2E:4C:38:71:72:C4:08:CD
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019D37C0AF2EAF3EAD8631B3D964188940E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 15FA
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: Q/2e5ky/Ou6SMCWy8lpsjIJ1VCbnKXa4ZfFPJDv+zQM=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:af:2e:af:3e:ad:86:31:b3:d9:64:18:89:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=2f3a0994ce2b80ef5f67c5fb2e4c387172c408cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:d0:e2:85:74:b9:1b:26:e3:01:97:18:81:
a7:20:62:7d:fa:2d:1b:bf:45:91:ee:a9:ad:de:54:
ee:30:99:04:60:8b:bb:9b:94:34:b7:27:ee:e1:1a:
8e:dd:6b:7e:18:15:33:e9:7c:c7:32:b2:67:0a:73:
12:cc:ca:d6:b9:b4:6c:02:52:2e:79:de:13:fc:d8:
b0:93:03:eb:b0:e3:e3:43:20:14:3a:51:9a:1f:da:
49:7b:23:44:be:ca:76:46:7b:c8:58:ac:e1:46:7f:
0c:87:cf:39:14:0d:a7:57:45:ad:ed:b8:50:9d:87:
8d:fc:32:ba:be:9c:4a:03:e0:80:dd:b5:95:ce:bd:
61:8f:5f:c4:d1:75:97:33:23:28:ac:82:94:03:fc:
1b:7f:ab:55:dd:28:c0:83:48:f1:c5:75:3b:42:aa:
e9:cd:b9:17:32:96:5b:b7:f4:82:92:0d:f0:20:0a:
a9:a9:4c:0c:3e:be:cc:ba:9b:7a:c5:d2:9b:bb:1e:
7b:fe:b2:14:38:85:3c:a5:89:df:31:75:ef:02:d7:
fd:68:ba:62:97:ea:55:f5:e3:09:64:34:fb:47:1f:
38:ec:93:00:d2:ea:e3:23:54:e8:4b:ca:76:69:ed:
31:9a:ca:fd:91:a1:a5:87:5f:8f:2f:cf:ba:e3:06:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:09:94:CE:2B:80:EF:5F:67:C5:FB:2E:4C:38:71:72:C4:08:CD
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2a:55:12:40:ad:c8:68:ee:2a:c7:05:f6:20:d0:8c:04:07:
2b:28:15:fd:7f:0e:80:16:28:90:6f:18:d7:bf:96:83:ea:2b:
12:dc:fc:1b:a6:79:5b:78:50:fc:89:d6:c3:7d:fc:e5:8a:26:
56:38:8b:2e:47:17:78:16:69:f7:b8:48:17:ab:d7:b8:f3:60:
36:60:bb:47:f6:7c:39:d2:72:88:9b:97:64:b2:34:bb:56:b6:
35:5c:e1:84:98:a8:b3:34:e9:0e:87:23:53:ec:1e:00:99:d6:
cb:1c:1a:d5:e3:e1:86:67:d5:37:ea:3e:3f:33:e6:62:ef:44:
64:1f:32:42:f2:cf:04:31:d0:b3:1a:a1:f0:9e:57:0d:07:35:
7a:a8:56:33:0e:14:a8:6c:69:2e:19:fb:b0:95:91:55:2c:3c:
64:03:6d:4b:f8:38:9a:41:74:cd:ef:ac:59:78:99:89:23:26:
f3:42:3e:d8:63:75:50:f5:ca:24:82:6b:6c:94:55:7f:c1:63:
7e:e5:84:db:a0:25:b6:9c:02:95:2f:d6:db:0b:fd:17:f8:84:
d1:ab:5e:c6:88:cf:88:f1:45:ec:c4:ae:d4:fc:72:e8:3d:1f:
b7:70:01:2f:a1:77:59:62:f5:88:60:29:61:71:1d:f7:28:f2:
57:9a:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:31 2026 by rpki-client