Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: 5Al7xJNlqMQDpHYBEsnqIhOQz/VQEDboyrFl/S+rU40=
Subject key identifier: 0E:6B:3C:7A:36:17:1F:78:12:BF:0A:75:B9:2F:D8:5A:89:66:00:B8
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 01A001DD0CF5AC352F04D1B2B3CDA1EE296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:00:58 +0000
Manifest this update: Fri 14 Aug 2026 20:00:58 +0000
Manifest next update: Sat 15 Aug 2026 20:00:58 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: CSbGd283XnR23uv8zVNKqf0kzib8joSHaAa0t1YVoK8=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0c:f5:ac:35:2f:04:d1:b2:b3:cd:a1:ee:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Aug 14 20:00:58 2026 GMT
Not After : Aug 15 20:00:58 2026 GMT
Subject: CN=0e6b3c7a36171f7812bf0a75b92fd85a896600b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:f0:4c:97:c6:74:6d:7a:67:3c:4d:2e:7f:
e9:e9:05:37:c6:be:4f:b6:21:52:56:0a:45:5d:56:
7d:43:c3:21:a0:6b:80:9e:53:d8:a7:7b:2e:30:21:
9b:f2:6a:8b:a7:12:70:15:1c:64:18:53:9b:06:ac:
4c:43:6f:2f:44:98:58:73:b0:55:cc:67:56:34:65:
46:91:12:30:ed:c0:d5:c3:fb:df:34:f4:0f:67:01:
39:13:2c:56:77:9f:0b:11:ab:98:ac:4c:ec:46:58:
cc:0e:02:d0:5e:f0:1e:b5:1b:2c:6a:c9:8d:ec:fd:
38:3a:79:05:bc:a6:ba:61:89:ee:fa:e5:17:1c:68:
b3:2c:5f:d7:c0:b1:29:b4:86:c7:e5:af:b8:86:be:
54:ca:51:62:0b:bd:cd:c2:c2:df:69:5c:3e:f7:6e:
58:6f:76:65:63:18:c6:62:80:84:32:68:11:9a:f8:
43:07:75:e6:84:2a:37:ec:cb:ed:e1:fe:2a:d9:0e:
a3:fc:2b:6e:7a:e2:ec:7e:d3:58:39:19:3e:f1:3d:
85:94:1c:f7:ff:58:d0:3e:2a:f6:7b:40:14:44:44:
b4:64:f7:d9:2d:b5:4e:31:e4:67:a0:31:94:63:73:
5f:4e:5b:4b:72:c9:b6:32:d9:57:cb:ed:14:61:f6:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:3C:7A:36:17:1F:78:12:BF:0A:75:B9:2F:D8:5A:89:66:00:B8
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:15:a3:1b:25:39:e8:cb:78:35:7c:38:64:36:82:62:26:
7c:e4:9a:2b:53:e4:5f:b5:43:61:13:de:d2:c5:52:95:b9:bf:
b8:7e:32:f9:2a:58:3a:2a:c8:28:be:4d:12:86:95:53:54:85:
ad:54:3d:b4:84:c6:7b:a1:9c:c9:d0:75:35:86:61:1d:03:b3:
04:70:58:a0:1e:9f:16:5c:6e:8d:54:74:77:76:f6:bf:95:67:
30:5e:3f:38:ee:62:cb:e5:20:87:05:67:fb:77:e6:3d:88:c3:
4a:64:84:73:39:9a:af:47:ba:dd:68:d2:0f:be:6e:d9:7c:3d:
91:37:8d:ab:7e:06:35:05:78:e0:bb:ae:68:9a:9a:f6:73:9d:
0d:68:55:73:8e:37:b4:45:20:b4:41:13:fe:df:ff:2f:cd:bc:
f6:e8:81:1d:6c:40:c2:6d:77:9f:01:a2:89:e7:97:75:d2:4d:
8c:dc:86:d5:18:f8:bb:aa:86:27:74:81:10:83:9e:d8:6b:ba:
05:13:68:61:a4:0e:fc:9f:2c:2b:76:69:1f:be:2e:15:cc:15:
bd:96:f2:a1:b0:48:2c:5e:b5:10:c8:af:de:f5:62:85:db:7e:
ea:88:8f:7c:0e:26:50:51:d0:45:72:f4:af:8f:06:d5:7d:db:
93:dd:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client