Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: o61lfAQ1/fp95gSxq/hVH0LD5DizbcvS2bDDFNJYDaI=
Subject key identifier: DA:EA:E2:8D:7F:77:CE:C7:AA:E4:AE:AF:D0:7C:9D:98:9C:AC:57:CE
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019F118A094ADD324F34874DC37B3E600C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 16F1
Signing time: Mon 29 Jun 2026 04:01:26 +0000
Manifest this update: Mon 29 Jun 2026 04:01:26 +0000
Manifest next update: Tue 30 Jun 2026 04:01:26 +0000
Files and hashes: 1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: kipTWH9pAQJPDZ/uWzf+FKxRdE/3/VDsI02kJcflU4M=)
3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
4: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
5: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
6: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
7: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
8: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:09:4a:dd:32:4f:34:87:4d:c3:7b:3e:60:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jun 29 04:01:26 2026 GMT
Not After : Jun 30 04:01:26 2026 GMT
Subject: CN=daeae28d7f77cec7aae4aeafd07c9d989cac57ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:9f:05:80:18:97:49:ef:0e:6a:76:2d:80:
3f:82:99:8a:37:d2:23:ba:ff:64:bd:13:91:9e:53:
66:c4:c2:19:bb:09:23:af:f4:03:0a:03:ca:10:8e:
a0:47:c5:a9:77:19:8d:a4:54:8a:52:59:1b:5f:f9:
d1:cc:2e:cc:13:90:ab:f8:fa:17:23:47:38:61:55:
45:9b:29:69:6f:9e:7d:29:c9:c6:7f:7a:88:ac:c6:
10:cf:b4:7e:41:1c:bc:ae:34:39:ab:3e:8d:74:60:
be:1b:9e:f7:53:c9:b6:96:9a:e7:12:63:37:2a:77:
68:64:32:eb:4e:78:47:44:be:69:c1:3c:20:87:25:
bb:68:b3:9f:44:61:fa:41:bf:73:a4:a2:84:8f:d6:
d0:37:57:c3:4d:e1:7f:80:cb:1d:c9:65:82:d8:3c:
8d:7b:b6:dd:e9:f0:e1:5c:01:52:e5:c8:49:08:f3:
1f:a0:2f:a1:c6:40:ea:e4:cf:ae:04:48:86:a6:ec:
e6:e2:c3:76:be:2b:c2:df:ce:3d:0a:8a:83:0b:7b:
dd:5a:1b:4d:51:3d:18:9f:df:53:48:90:94:2d:f4:
0b:c0:6b:9d:59:e9:ed:cc:93:84:2d:0c:42:bf:6a:
8a:cb:39:db:15:8c:e1:6d:3d:24:2d:2e:b0:08:fd:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:E2:8D:7F:77:CE:C7:AA:E4:AE:AF:D0:7C:9D:98:9C:AC:57:CE
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a2:fc:2f:0a:9f:d2:b4:4c:e4:df:c3:fe:09:5d:07:6b:d0:
65:72:c2:ec:2a:8b:db:22:4e:22:f6:a2:e6:6f:00:9b:8f:a3:
50:10:e5:ba:e3:14:93:0a:ee:c8:a1:2f:40:75:42:97:5a:98:
ad:ee:f2:1f:56:6f:ee:07:64:3b:16:b7:42:42:13:2d:48:01:
d7:77:90:47:7e:70:d4:f0:71:2b:05:20:ad:f8:ad:e9:75:a4:
bf:b6:e8:28:51:ce:2b:b0:ea:a7:33:69:d5:9b:14:77:e6:49:
e2:d7:8d:4e:a6:8b:56:16:f1:48:37:d3:f7:f8:b6:6f:32:3e:
3a:c0:c7:c2:9e:b1:52:84:60:f2:4d:52:ce:c9:f7:53:01:d4:
22:18:ab:aa:ac:54:5b:b2:ea:9a:c7:5e:0f:66:54:ce:de:e9:
ec:14:41:e0:1a:0c:9f:d7:31:87:5e:1f:a0:6a:eb:3a:b2:1b:
4b:03:a1:8a:c0:31:18:9c:14:43:ec:b3:ea:38:65:78:36:72:
60:b2:72:2d:86:43:99:63:0d:90:f3:5e:0a:78:6c:66:47:07:
b0:59:5f:63:94:7b:87:6b:82:c6:e1:8f:08:00:65:58:6e:ee:
18:cc:3f:69:d3:7c:7b:b0:0d:d5:e8:35:0a:83:4b:ef:07:ac:
4e:c0:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:04:18 2026 by rpki-client