Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: gyzLN8GntohLbo1Zz53Nr5jDvnIzIgf8LkNutBnpLLk=
Subject key identifier: D9:83:61:D9:97:48:6B:79:41:23:D9:1A:F1:F1:CA:0D:BC:4B:BE:74
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01A001DC9C58E23EC4A8A192505C73951EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:00:30 +0000
Manifest this update: Fri 14 Aug 2026 20:00:30 +0000
Manifest next update: Sat 15 Aug 2026 20:00:30 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: gsFK/naELg/zfopecBkprGtD2zBrOfbYG6FVKyOMA9Y=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:9c:58:e2:3e:c4:a8:a1:92:50:5c:73:95:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Aug 14 20:00:30 2026 GMT
Not After : Aug 15 20:00:30 2026 GMT
Subject: CN=d98361d997486b794123d91af1f1ca0dbc4bbe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:e3:3c:e5:01:07:7f:13:48:0d:bb:ca:0b:
f0:7e:65:ee:be:64:c6:2f:0a:21:d4:06:37:0c:31:
9e:11:52:2b:15:42:50:95:4d:1c:66:44:4e:df:06:
cc:e0:51:95:ca:ad:01:eb:6b:cf:d9:d3:e5:89:87:
0e:72:97:4d:5a:21:0e:a3:2a:69:4a:e9:7d:85:c4:
a1:82:23:69:7a:70:0e:13:c2:b2:5d:59:e0:f8:3e:
b8:8d:c5:7d:ae:17:3a:9c:09:08:9c:f7:73:9f:91:
c6:5b:bc:33:d1:fd:f9:91:f1:5d:92:62:8d:85:3c:
ff:18:e9:a2:a2:a9:d5:ca:86:70:7f:7b:b6:27:e0:
68:f1:b0:1d:31:a7:cf:2a:20:53:d0:f8:33:2f:98:
0b:ab:11:a1:25:ae:fd:2a:7c:c6:2a:74:94:09:7a:
a0:4b:80:db:5f:98:f9:00:ff:08:55:f7:0b:62:9f:
c9:ad:58:90:a4:6f:e3:d5:63:dd:ca:8d:ad:cb:07:
54:17:d7:7b:ff:21:9d:e5:42:51:ae:fb:90:78:26:
a5:39:e3:53:14:a7:30:95:f7:25:79:83:f7:c6:f8:
8e:20:9b:13:7d:7b:19:65:60:bd:00:7d:47:bd:f4:
c5:ad:88:d2:a2:ea:df:15:b6:ba:cc:6d:de:c9:4d:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:83:61:D9:97:48:6B:79:41:23:D9:1A:F1:F1:CA:0D:BC:4B:BE:74
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:79:5a:39:43:86:4b:b6:56:c1:65:8b:ae:7c:b3:5d:5a:ba:
af:e1:ed:45:01:85:d4:7a:7e:f5:5d:22:82:91:da:ce:a3:a6:
99:32:ba:14:2e:18:6c:22:8a:e6:46:ab:b6:26:ff:c3:a2:23:
be:37:9a:6b:f5:a0:a1:89:7a:e4:8a:4c:58:0b:07:10:19:34:
31:7b:69:de:29:fa:2c:7c:05:b8:08:61:08:8e:4e:47:80:d1:
43:2d:a1:df:9f:c1:05:8d:dd:58:61:05:38:e8:8b:fd:f6:10:
f7:2d:fe:25:1c:98:2b:c1:3c:14:9c:f1:e9:0a:6e:b5:a8:b1:
46:2c:e5:72:b6:4b:7f:f2:35:2f:c7:ec:00:35:36:ca:48:70:
db:dc:06:07:73:49:57:7f:ed:96:24:57:8f:24:b0:76:97:77:
12:58:ca:30:c3:87:fd:27:33:5d:0f:24:b0:be:9b:00:85:41:
a0:7d:f9:f4:e4:e9:7a:58:20:05:1c:49:7f:43:47:c1:6d:be:
7c:87:a8:ef:5a:d0:87:2a:2d:71:0b:69:a4:8d:7e:92:d3:3a:
2d:48:28:23:95:9d:9d:df:fa:7c:bb:12:33:b9:fc:82:33:07:
73:ac:28:02:de:95:78:cb:86:dd:3a:77:d2:e9:26:a6:91:80:
d9:cb:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:41 2026 by rpki-client