Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: O6NOfvtwu3+GS0iw/YuHa1Qd16zA1GNdVbGVCHkOs6w=
Subject key identifier: 6D:60:19:C8:5D:91:C3:7F:C7:93:30:2B:1E:FC:B4:05:D1:19:78:68
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019F1830FE33E58B2E4A6A84D2A5AF1DFA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:01:31 +0000
Manifest this update: Tue 30 Jun 2026 11:01:31 +0000
Manifest next update: Wed 01 Jul 2026 11:01:31 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: yAaNFFFMU1Zvk+UwFj0uHXa06mz7iJ0YUrK3edwSzmU=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:fe:33:e5:8b:2e:4a:6a:84:d2:a5:af:1d:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jun 30 11:01:31 2026 GMT
Not After : Jul 1 11:01:31 2026 GMT
Subject: CN=6d6019c85d91c37fc793302b1efcb405d1197868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:c0:9e:2b:f0:c9:6a:41:40:da:00:43:22:
38:1d:f0:38:36:b0:59:37:bb:79:53:28:8c:f8:05:
28:ca:04:0e:d6:aa:06:2a:ed:b6:83:ce:60:f9:9b:
29:c1:7d:22:46:7d:54:6c:7d:b5:eb:d5:26:6a:d3:
bd:59:1a:0b:9e:c5:bf:c1:a7:e2:db:63:32:f0:37:
fd:55:f7:68:fc:86:1a:18:05:3a:de:a6:3f:ab:38:
f1:63:f9:89:e0:4b:ac:b3:6c:4d:7f:62:be:8d:b4:
37:de:62:e0:bb:c7:8b:3b:40:fb:dd:07:dd:40:b3:
a6:45:6c:86:13:e9:0f:7b:7e:0f:50:62:07:a1:15:
11:7a:c0:75:54:ed:cc:01:f9:fb:54:3e:d7:ae:02:
1b:f8:df:a0:b1:7e:77:d4:b1:73:9b:2b:13:ff:26:
73:4d:af:35:8b:f3:9e:1d:55:c7:85:30:25:98:5f:
10:31:42:f7:ed:fd:47:41:3c:82:16:f4:8b:f4:8e:
d5:34:de:08:fb:9c:77:95:51:77:88:fa:7c:70:43:
a5:14:ca:5f:8b:a8:cf:da:70:1d:b8:88:6b:39:34:
cf:d8:9e:b7:5d:00:13:2a:f0:72:0a:35:ad:2f:5f:
da:18:2b:6d:98:f0:ca:18:2a:6d:78:b2:81:20:6b:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:19:C8:5D:91:C3:7F:C7:93:30:2B:1E:FC:B4:05:D1:19:78:68
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:fb:71:ec:47:ef:a4:66:6e:2d:06:fb:80:c9:d1:35:7b:
35:78:19:84:16:3b:55:2b:2d:71:a7:a3:ca:df:e5:6e:3e:d0:
90:d3:bd:84:95:00:f4:0d:da:0d:2d:92:81:aa:c9:19:97:ef:
69:99:09:ef:cf:b6:79:ac:73:43:db:7b:1b:fe:98:78:b6:31:
7a:88:a4:d6:6f:4e:9b:0d:04:ff:b0:96:01:70:91:54:ac:9e:
76:9c:10:e3:0d:fe:de:c4:61:1c:37:35:b4:21:e6:f7:25:12:
b0:68:1f:0d:f0:1c:ea:94:2c:6a:c3:72:8e:dd:14:1b:55:5b:
27:14:ec:87:7c:04:a1:d5:18:9a:5e:c7:30:18:ed:52:ff:c9:
ea:b7:4b:0c:f8:17:e9:78:bd:73:22:5c:70:f9:43:0d:bd:cf:
f4:df:92:31:52:3b:45:67:69:d1:dd:f1:56:3c:5e:3e:45:52:
14:95:2f:c8:50:8f:22:fb:19:43:80:22:1d:4f:74:e9:9f:63:
95:e1:0c:af:62:1a:94:5f:e3:01:92:45:57:0c:6e:04:ab:b0:
0f:ab:47:0e:47:14:98:4a:c6:ac:7e:96:b2:2b:81:31:71:4e:
21:ac:35:ce:20:65:de:8d:3d:7a:13:fa:af:86:17:e5:77:68:
47:d3:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client