Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: SInTOaA9ZMsDbEIgueagfdonW3piQXdOMfyQP9uFv/Q=
Subject key identifier: 51:CC:A8:3A:91:6A:18:48:EB:F5:4E:70:EC:1E:91:A7:EA:94:F6:5F
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019D37534775C71AF8AFC1544102D846AA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:37 +0000
Manifest this update: Sun 29 Mar 2026 02:01:37 +0000
Manifest next update: Mon 30 Mar 2026 02:01:37 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: pyY4DXSJRYYnmNZXMgKCSLRpbt+oXYKT7hd8qBYD9qM=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:47:75:c7:1a:f8:af:c1:54:41:02:d8:46:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Mar 29 02:01:37 2026 GMT
Not After : Mar 30 02:01:37 2026 GMT
Subject: CN=51cca83a916a1848ebf54e70ec1e91a7ea94f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:db:aa:82:f1:9b:08:da:7f:37:c1:18:60:
e0:f5:3f:95:5f:a2:99:67:7e:70:7b:ef:bd:c0:6c:
eb:22:f1:56:33:ab:f5:5c:cc:95:e5:55:c3:93:1b:
83:22:87:71:97:d4:1b:d3:33:71:74:79:cf:64:eb:
73:33:d9:eb:0e:84:ca:f8:ac:28:6d:c5:40:e1:8b:
01:f6:dc:c5:b0:bc:97:d4:2c:a5:e6:59:a8:41:1c:
2d:db:03:0a:8e:20:26:9a:95:39:e3:e1:90:0a:0e:
9b:35:f9:36:39:35:3f:e4:e7:87:10:68:a9:01:fb:
c8:56:77:07:01:22:33:05:13:09:65:ef:24:ba:43:
cd:76:2d:20:f3:23:7f:76:25:c3:b0:89:32:18:9b:
c6:53:01:9a:e4:f9:4b:b2:31:1c:a5:1a:af:62:d5:
75:dd:12:81:eb:f2:53:60:8d:02:52:48:a4:cb:ec:
f7:ff:00:0d:ae:31:b7:83:86:c6:ba:aa:f9:7d:b3:
09:c4:66:50:2e:60:4d:aa:11:de:f8:a4:f9:11:3e:
5d:c9:b3:c5:ae:8d:2f:0e:9b:64:25:a1:b2:c2:8c:
fe:c5:02:81:5e:bb:3b:6b:b4:2c:86:63:b8:fb:1d:
35:b8:b2:69:b4:ac:ff:fd:b0:e6:69:9b:a0:78:92:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CC:A8:3A:91:6A:18:48:EB:F5:4E:70:EC:1E:91:A7:EA:94:F6:5F
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:71:54:79:9a:8e:9d:a2:75:b2:ce:f9:c3:31:e5:bc:f4:
a1:60:30:4c:cc:ea:10:c2:cf:9f:37:00:11:3c:02:64:7c:1d:
c6:35:ea:81:5f:65:52:6c:94:ea:b3:cb:ec:bd:42:e1:2b:e4:
59:9c:e2:1a:82:fc:14:1e:2d:53:64:bc:2a:9e:bb:2f:a9:bf:
87:a7:9c:f3:fe:2b:2f:64:55:85:01:52:a1:09:ea:0d:5c:7b:
7d:24:92:43:2f:4a:81:f6:1b:31:bb:e4:82:93:1b:02:b4:65:
b1:71:25:e2:6a:ed:dd:71:1e:5e:f7:51:a6:e9:04:8b:4c:b9:
65:c8:b3:9a:25:ea:05:eb:ef:20:29:ee:dc:29:cf:de:6d:bf:
0e:b0:39:9e:ed:d0:a0:73:04:b2:83:19:e4:d8:80:54:94:b5:
91:6b:6c:f6:26:76:43:e2:8b:4d:12:0a:e2:ea:95:2b:1b:c8:
c0:fa:d6:74:46:ba:f6:eb:99:36:c0:ca:31:e7:8b:24:d7:43:
da:36:e8:a1:b3:4a:9e:34:30:e8:41:82:b1:75:c4:5a:2b:47:
aa:3f:1d:f5:29:4e:68:a4:ce:d4:73:9b:33:6a:0c:d2:1b:a2:
58:0d:6a:98:0b:52:38:87:4f:2a:48:b6:fb:7e:cb:aa:d1:d9:
21:62:f1:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03U0d1xxr4r8FUQQLYRqpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjYwMzI5MDIwMTM3WhcNMjYwMzMwMDIwMTM3WjAzMTEwLwYDVQQD
Eyg1MWNjYTgzYTkxNmExODQ4ZWJmNTRlNzBlYzFlOTFhN2VhOTRmNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr/bqoLxmwjafzfBGGDg9T+VX6KZ
Z35we++9wGzrIvFWM6v1XMyV5VXDkxuDIodxl9Qb0zNxdHnPZOtzM9nrDoTK+Kwo
bcVA4YsB9tzFsLyX1Cyl5lmoQRwt2wMKjiAmmpU54+GQCg6bNfk2OTU/5OeHEGip
AfvIVncHASIzBRMJZe8kukPNdi0g8yN/diXDsIkyGJvGUwGa5PlLsjEcpRqvYtV1
3RKB6/JTYI0CUkiky+z3/wANrjG3g4bGuqr5fbMJxGZQLmBNqhHe+KT5ET5dybPF
ro0vDptkJaGywoz+xQKBXrs7a7QshmO4+x01uLJptKz//bDmaZugeJIl0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHMqDqRahhI6/VOcOwekafqlPZfMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLlxVHma
jp2idbLO+cMx5bz0oWAwTMzqEMLPnzcAETwCZHwdxjXqgV9lUmyU6rPL7L1C4Svk
WZziGoL8FB4tU2S8Kp67L6m/h6ec8/4rL2RVhQFSoQnqDVx7fSSSQy9KgfYbMbvk
gpMbArRlsXEl4mrt3XEeXvdRpukEi0y5ZcizmiXqBevvICnu3CnP3m2/DrA5nu3Q
oHMEsoMZ5NiAVJS1kWts9iZ2Q+KLTRIK4uqVKxvIwPrWdEa69uuZNsDKMeeLJNdD
2jboobNKnjQw6EGCsXXEWitHqj8d9SlOaKTO1HObM2oM0huiWA1qmAtSOIdPKki2
+37LqtHZIWLxXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client