Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: Tnx6WTeZGb63+MOIeLQWEj6jBmHwgQNe6aMyShefxG4=
Subject key identifier: 99:FD:C0:F4:0E:3B:C8:01:31:EA:F4:18:DC:4F:68:16:06:32:92:A3
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 019D394163339F2E48BC9201EAC3F2F226FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 73DNtAbfwr9q6yDwZd+ScWFwS2UUJy7C3KQhkiot6jY=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:63:33:9f:2e:48:bc:92:01:ea:c3:f2:f2:26:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=99fdc0f40e3bc80131eaf418dc4f6816063292a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:aa:e2:3a:6a:cd:16:69:e6:d0:04:27:20:
f1:58:a8:a5:fd:48:d3:6b:ca:3b:c7:2f:3c:4c:4e:
d9:43:05:f8:81:39:19:79:cb:81:ee:da:08:bb:60:
b8:18:2c:d1:b9:3b:d7:6f:d5:7c:61:a4:03:ce:1b:
8e:a9:1e:8c:b2:33:a1:0b:9e:47:a2:c5:01:8f:2d:
55:fc:d1:fc:8a:08:de:46:d3:0d:e9:fd:70:93:a2:
7f:86:27:e5:90:1c:d8:50:db:fa:00:1d:e7:60:48:
99:02:c5:11:fc:2f:f6:3c:08:a2:a1:a8:be:74:16:
fb:8e:b5:19:65:a5:a6:c7:8b:7e:33:c4:1e:f1:20:
ea:62:3a:db:50:90:c9:3a:52:1d:22:32:34:46:3f:
92:85:0c:10:8e:f2:41:77:0c:81:11:cb:50:49:2b:
6d:7a:85:a1:31:79:92:fc:90:c0:4d:c2:1e:2b:75:
92:af:c5:68:e3:ad:f8:2e:02:ae:10:5f:56:61:6d:
25:05:1e:77:8b:62:3c:65:80:0d:82:fa:4d:04:07:
c2:ba:cd:17:01:85:47:a1:9a:74:3b:28:56:8f:cb:
4f:29:92:5f:9a:39:ff:2f:a1:26:5c:14:76:da:e0:
bc:23:b9:ee:77:c4:d0:60:5a:72:10:33:93:28:16:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:C0:F4:0E:3B:C8:01:31:EA:F4:18:DC:4F:68:16:06:32:92:A3
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:41:a6:57:29:b6:0b:07:3a:63:87:dd:2b:0d:17:00:bb:91:
0d:f4:f2:dd:69:78:e4:99:7b:62:cd:6b:66:c5:2c:0e:c2:83:
e0:0f:ed:7b:e9:e1:67:de:02:38:6d:ed:bb:f1:0b:f6:59:c9:
e7:a7:24:c2:4b:4b:08:a9:33:c9:38:2a:68:d7:b8:0e:f9:43:
5f:53:68:c9:00:91:99:8f:a6:0c:ef:4e:f1:f0:5e:ee:3f:ce:
23:c0:fa:f9:d4:82:7c:9b:8b:75:ed:d9:2e:b8:5b:6c:3b:c2:
7f:9e:90:fc:37:5e:40:09:5b:95:70:75:12:bb:2a:a7:8c:cb:
4d:a5:c3:7b:ed:9a:84:87:cc:14:84:6c:ba:c2:44:db:b4:0f:
ce:11:90:98:3a:2f:71:97:fd:bd:51:b8:4c:7a:35:05:4a:ca:
50:ea:28:f7:14:87:d1:99:2f:de:1b:30:3b:99:de:ed:48:bb:
e0:b5:c2:60:c6:6a:ae:3c:c3:79:28:27:48:61:0b:5d:00:fb:
ee:18:ee:99:a3:88:6a:24:26:fa:59:dd:7e:2f:79:de:b1:bd:
79:0e:5e:ef:7d:e0:0e:54:38:27:c5:a0:bc:d1:86:25:8b:7c:
40:f6:25:50:91:a5:9f:b2:53:69:e6:9c:f0:81:31:13:08:27:
ab:d8:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:35 2026 by rpki-client