Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: Q3rJBU8qzA26mcRUv9guJQNAWK/E59W5TSafqxhWkSk=
Subject key identifier: 99:DD:31:5F:73:0C:AE:7A:EC:F7:4E:14:17:25:D5:C2:9B:F2:52:92
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01A13E94D262CEE0C50B518328723C11F70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 08:01:42 +0000
Manifest this update: Thu 15 Oct 2026 08:01:42 +0000
Manifest next update: Fri 16 Oct 2026 08:01:42 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: IomIj1NbYIAQKqzj1ShDYUfn38QjmNlU8ly8ag4v6IE=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:d2:62:ce:e0:c5:0b:51:83:28:72:3c:11:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Oct 15 08:01:42 2026 GMT
Not After : Oct 16 08:01:42 2026 GMT
Subject: CN=99dd315f730cae7aecf74e141725d5c29bf25292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:14:8d:09:1c:de:21:cc:a0:4f:c3:d8:c7:
c8:bd:b6:ac:6b:c8:be:66:d8:98:05:65:de:5f:07:
f9:5e:32:25:28:96:7a:88:39:c4:b6:7e:2a:36:12:
2c:96:66:48:04:68:a0:65:f0:ca:61:e0:9c:c2:27:
8b:8a:53:0c:42:db:41:1f:f4:a2:66:bb:1c:a8:d8:
77:62:23:85:0e:70:a6:95:37:80:5a:d1:b5:0b:3c:
11:38:c9:1b:46:44:8e:04:06:94:b8:d0:fb:00:ba:
e2:a5:b3:2d:fc:46:74:ea:1f:2b:f8:79:6a:4c:e6:
5e:ff:b9:73:a6:e4:8c:6e:50:92:de:24:11:65:e2:
05:c0:f7:12:2e:4d:b9:31:5d:a3:17:9f:de:5c:5a:
ab:8f:f1:6e:86:19:98:c1:94:51:a0:b3:1c:82:1e:
ba:25:1d:e5:e6:dc:3a:6c:56:a9:c7:14:2f:a0:37:
66:87:d9:f7:3a:cf:df:98:31:16:8e:d6:7a:c0:61:
3b:1f:67:6e:93:f5:ed:4f:e8:84:70:8b:1f:d1:59:
ca:8f:a5:fa:b3:e5:45:d1:1f:87:a4:73:cd:bb:82:
d7:2b:c3:e0:0e:7e:ee:2d:fe:48:a9:70:24:39:99:
55:30:61:ee:79:e5:a6:10:29:87:53:91:99:f9:8b:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:31:5F:73:0C:AE:7A:EC:F7:4E:14:17:25:D5:C2:9B:F2:52:92
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:51:91:a7:63:ab:6e:04:44:0f:25:68:53:91:88:26:0b:
45:e6:c3:e4:8d:fc:b6:d0:68:bd:2f:ad:dd:36:38:d9:cc:e6:
98:d1:88:32:44:9a:bf:3b:21:d4:54:60:1a:ac:eb:49:f1:b0:
bc:61:6e:ef:3d:f7:d1:d0:87:20:2e:b8:2c:b8:de:9f:f7:ca:
65:18:87:ba:13:79:d8:d2:07:c9:d8:b4:d5:4d:90:58:24:70:
a3:86:df:fe:87:08:38:a5:de:76:48:60:ff:f8:98:06:d1:ba:
f2:0c:f0:7e:51:cb:e4:c1:b4:e9:60:f1:01:8f:38:50:a0:9e:
fa:d1:4e:bf:62:65:4f:f2:a5:d7:2a:dc:d0:2d:70:55:db:fe:
26:58:92:10:77:e8:97:7a:44:31:1e:c2:57:fb:02:20:36:f1:
fc:d5:0a:28:bb:2a:b2:c3:0d:02:64:09:65:38:99:dc:e5:b5:
10:50:30:10:75:01:14:cc:9a:10:75:c0:28:a0:cf:ae:da:55:
03:8c:52:53:51:54:1f:c2:ba:12:9e:8e:18:21:4f:84:7c:12:
1d:ff:ed:b3:29:c9:f1:fe:9a:90:68:fe:16:a6:4c:b1:f2:5d:
4b:f3:d7:75:80:e7:70:57:0f:9d:a8:0a:d5:a1:22:53:e2:fb:
d2:b7:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:23:44 2026 by rpki-client