Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: EPQdgvpPOVZBOMWuagdJrhVu4YSWXwH1rBDE3k/gNmk=
Subject key identifier: 4E:42:F2:7A:E5:81:09:E5:9A:F6:6C:1F:AB:0A:A3:D0:36:B2:4E:B8
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 01A13D4A334EA052C3464F956C474FD6A7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 13CE
Signing time: Thu 15 Oct 2026 02:00:35 +0000
Manifest this update: Thu 15 Oct 2026 02:00:35 +0000
Manifest next update: Fri 16 Oct 2026 02:00:35 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: Npt3b7tTqR6MYMs0T92IQWWd5rV7cBI4EuXI3jxL5uA=)
2: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (hash: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:33:4e:a0:52:c3:46:4f:95:6c:47:4f:d6:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Oct 15 02:00:35 2026 GMT
Not After : Oct 16 02:00:35 2026 GMT
Subject: CN=4e42f27ae58109e59af66c1fab0aa3d036b24eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:6a:86:81:57:2b:87:9d:2a:87:19:06:12:
8c:39:1a:8d:ed:d6:b4:4c:3c:bb:7f:e6:3d:b4:26:
0a:e3:58:6d:de:23:73:4c:5d:ba:ee:95:49:f3:be:
27:7c:21:8d:8b:a9:4e:ed:3d:3d:5c:65:3e:34:61:
3c:b2:96:1f:3f:9c:96:99:ae:8c:56:6f:37:85:32:
bf:fe:b3:86:b5:32:39:ae:64:37:da:fb:32:ba:e7:
9e:6b:c3:83:9b:1f:28:4e:1e:32:c1:f8:b2:e8:65:
5d:42:d7:b8:da:c4:7a:cc:a2:11:8f:9e:56:d8:a0:
28:cb:d3:ab:35:18:e1:f6:6a:2b:5d:be:a7:5c:bc:
89:62:50:0f:c9:97:61:53:80:d6:21:9b:51:61:41:
3a:3a:57:31:c3:cd:8c:7d:fe:45:98:7b:25:b1:67:
94:ce:99:6f:85:1a:51:5b:0d:cb:f6:4a:47:70:d8:
33:a6:98:a7:e7:cf:b8:e0:3a:b5:c3:5b:cc:24:4d:
b6:2d:63:39:78:ef:69:0c:d1:10:c7:a6:64:a4:3b:
b3:5c:a8:4f:c1:d2:33:58:64:59:73:0e:9d:30:4f:
cd:61:04:e5:89:f9:87:56:01:a1:3e:33:e0:e0:62:
de:25:2a:cd:64:19:d7:07:4c:9a:cd:f9:6a:53:d9:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:F2:7A:E5:81:09:E5:9A:F6:6C:1F:AB:0A:A3:D0:36:B2:4E:B8
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:33:50:43:10:b9:53:97:11:a1:0f:a3:77:ca:b4:0b:85:7f:
4f:2a:06:13:87:a7:73:4d:09:08:fc:f8:15:1d:f5:10:0c:86:
0c:07:af:08:2d:0b:35:89:b6:d2:4a:07:26:8f:35:3b:ca:38:
f4:c6:3a:a3:8e:d9:d0:bd:bf:a5:0f:6b:7b:ca:2d:6c:dd:6f:
b9:09:1b:07:2f:b5:ea:3c:c8:e2:5a:db:bf:a2:5c:0b:70:7f:
50:5d:9b:f5:b3:87:eb:4b:cc:53:af:1a:40:2a:d0:ce:29:bf:
a4:71:21:c1:b5:de:23:65:1c:aa:87:ab:56:0a:26:c6:40:26:
84:bb:2a:e1:49:eb:d2:f5:e0:47:ec:c6:dd:a9:ef:53:70:dc:
9b:af:60:32:d7:8a:a9:0e:81:de:5f:25:c8:00:33:3c:fa:61:
b3:e3:9b:d1:5b:91:83:58:20:6b:72:ac:53:b7:33:a3:0b:ee:
d6:b5:61:40:ea:db:fc:c1:c3:7e:fa:6c:f5:86:42:d9:b3:76:
cb:87:88:63:42:7c:e2:b7:c2:35:0b:54:3c:a2:af:88:59:c0:
96:73:ce:a6:28:fc:63:c1:cb:3c:8d:13:0a:cf:cc:ed:bf:3a:
e0:30:d5:11:b9:c5:8d:ee:41:98:44:47:5e:7b:16:9f:90:f7:
ba:a9:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:06 2026 by rpki-client