Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: f3LvDIGFtV1z1D9B2jwXgj6lhH9Ru1j3NnYYGvfMX+0=
Subject key identifier: D7:9E:0E:F3:85:1B:EC:CE:C1:A8:D2:46:5A:2B:EE:38:CF:D2:B6:15
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019E307205A55B0509E39569041066D164B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 11:00:39 +0000
Manifest this update: Sat 16 May 2026 11:00:39 +0000
Manifest next update: Sun 17 May 2026 11:00:39 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: cbOr6xevYuBp9hU9//cy4U5tX1yNkBqsf/n046p3ilQ=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:05:a5:5b:05:09:e3:95:69:04:10:66:d1:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: May 16 11:00:39 2026 GMT
Not After : May 17 11:00:39 2026 GMT
Subject: CN=d79e0ef3851beccec1a8d2465a2bee38cfd2b615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:2c:6a:f7:1a:d7:ab:bc:52:fd:88:d9:32:
3d:1f:47:a9:52:ac:83:af:b8:28:86:60:23:83:8c:
bd:21:49:e5:bd:05:8e:7f:5c:6e:df:42:3c:58:23:
c9:02:5a:8a:6e:7e:ee:4b:93:1a:df:98:cd:2d:70:
59:fb:41:c7:54:96:71:78:37:c7:ac:22:4f:fa:5b:
8c:a7:71:7f:4c:cb:0c:e0:76:a9:6b:e4:46:dc:ec:
b6:51:92:c1:25:35:93:b5:e6:b8:34:f4:a1:1e:3a:
2e:5b:3e:0e:5a:dd:7e:e8:e5:47:5b:ae:e5:b1:b7:
57:fc:0b:ef:d4:71:20:48:ef:98:aa:e9:72:d1:05:
85:77:23:24:b3:99:01:cc:5b:b9:68:8c:9a:d6:e5:
3a:0a:87:be:35:c4:fb:61:dd:12:67:b0:7c:0e:2a:
1b:ef:02:ab:76:ca:9c:0c:ef:37:66:a4:4f:ae:a7:
82:fb:ec:ba:f0:44:a3:06:2d:94:35:70:7e:50:70:
e5:86:0f:e6:99:43:b5:ca:52:6b:40:43:77:35:aa:
79:ed:8f:0c:1e:9d:5e:3a:56:03:1b:b4:5a:39:71:
6a:dd:34:d7:ae:88:54:d6:c4:31:69:9a:e8:cf:60:
51:d6:88:68:53:3e:72:04:35:df:7b:39:f7:16:07:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:0E:F3:85:1B:EC:CE:C1:A8:D2:46:5A:2B:EE:38:CF:D2:B6:15
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:34:ac:b1:6c:94:9a:d4:a8:5b:7b:29:e0:d8:d3:3f:44:
00:07:d0:69:d6:9d:d8:4d:fa:d2:c9:6e:27:fa:f2:4e:6e:c6:
cd:bd:77:79:76:80:51:ed:01:33:35:ce:69:14:1f:2f:2a:01:
97:37:ba:f8:b2:b0:d2:a2:6e:85:11:ff:af:b5:8b:a7:60:21:
fa:2b:3b:44:5e:d2:39:1d:44:bc:be:9b:85:d4:42:8b:ae:7d:
8e:b6:41:b2:3f:d9:2b:7f:d6:3c:20:e1:be:98:37:fd:df:e8:
db:b5:39:66:b4:22:fe:78:24:4b:bc:51:e9:59:c1:a3:db:39:
b4:9a:e3:e1:34:ae:cd:96:be:b5:99:d1:55:43:0f:e1:8e:e3:
f6:42:dc:a5:c1:1b:7e:9b:cc:a1:eb:88:ce:da:1c:dd:92:22:
13:43:62:6e:33:27:b5:84:4f:82:07:c8:2c:b1:b5:28:54:bf:
40:17:bb:d8:f7:d1:f8:56:f6:51:6e:2f:36:49:cf:17:32:3f:
78:c9:e2:78:86:54:7d:33:79:28:cc:ff:06:63:4f:28:16:68:
45:5e:8e:32:40:7a:b2:f9:cf:64:1b:86:ed:46:f8:27:a3:4d:
79:c8:e6:d4:c6:35:e4:18:bb:6f:06:f0:c0:87:a9:17:a2:b4:
ae:6d:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:16 2026 by rpki-client