Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: 30zeskU85iE9g76bDRcgHLcUtMFCinmU47zju5kz/aQ=
Subject key identifier: 21:75:F0:51:5E:9C:8F:8A:65:32:DB:56:BA:58:AA:C4:0F:8A:51:5A
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 01A10DA7859DFDB14A2E1246810978314594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 1923
Signing time: Mon 05 Oct 2026 20:00:44 +0000
Manifest this update: Mon 05 Oct 2026 20:00:44 +0000
Manifest next update: Tue 06 Oct 2026 20:00:44 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: gme6cyLcxS5687D+8oIn3DuBjKnqqgyplwSgOnjG4L4=)
2: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (hash: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg=)
3: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (hash: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc=)
4: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (hash: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a7:85:9d:fd:b1:4a:2e:12:46:81:09:78:31:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Oct 5 20:00:44 2026 GMT
Not After : Oct 6 20:00:44 2026 GMT
Subject: CN=2175f0515e9c8f8a6532db56ba58aac40f8a515a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:cc:57:77:ce:fc:a2:b5:e7:77:1f:63:b8:
b4:bc:64:d2:1d:11:c0:bb:91:7b:ca:08:f8:e0:f4:
9d:7a:a5:0f:b3:45:29:9d:ff:4d:e6:98:f3:07:04:
42:76:39:a0:07:29:71:90:4a:fc:eb:ca:4f:96:20:
aa:0a:5b:96:91:37:fa:d4:ad:62:f1:74:48:41:e6:
a5:c0:e3:2a:3a:4a:b9:62:1b:ff:1f:79:23:57:03:
ff:a6:05:00:59:aa:a0:fa:d2:55:3e:49:9f:2b:e0:
4c:ac:e0:26:6a:b2:3a:93:4e:8e:67:f2:b8:fc:18:
39:d2:f8:2d:2e:b9:55:14:f8:2a:79:3e:96:6f:98:
53:92:49:5a:38:83:3c:ed:12:b1:50:61:cd:8a:0f:
65:4b:bb:f7:d9:16:cc:74:cb:69:9b:c6:2c:e1:d9:
9e:c1:48:b2:24:21:5e:69:58:d7:b4:04:72:de:d8:
61:4f:24:9d:ef:1a:36:5f:b8:0b:15:45:ce:1f:c9:
a9:3a:96:65:5e:c6:7c:6a:9e:05:c8:50:90:40:71:
fd:cc:01:f5:33:67:66:30:28:fc:58:51:78:43:b5:
5e:a3:e7:85:39:65:3a:a9:c1:a1:dd:21:6b:4e:c5:
5f:38:10:a0:fd:b4:b6:23:40:00:dd:03:f4:e2:fa:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:F0:51:5E:9C:8F:8A:65:32:DB:56:BA:58:AA:C4:0F:8A:51:5A
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4d:15:12:d1:fd:88:e7:39:ac:78:9a:31:8c:79:84:77:9a:
93:a9:36:15:90:61:41:f1:ad:05:7d:ce:c6:50:ef:5f:70:40:
61:4a:48:f1:c9:72:dc:ff:bb:40:5e:cb:53:41:a4:c1:ca:1d:
b4:e2:b1:c0:84:b8:db:dc:97:93:0a:30:40:35:8f:57:ba:8d:
30:d9:75:a4:80:8e:03:a4:e5:ce:55:f3:51:d7:62:c7:60:bc:
11:0b:ca:a9:9b:d7:7e:89:7a:53:48:ff:55:d2:81:a3:f9:c6:
e3:da:62:05:d5:c2:66:69:77:c3:84:9e:e1:ae:42:94:e2:76:
90:9e:ed:4c:47:bd:37:1f:0a:31:6c:13:ea:9d:b2:ff:ff:d6:
b8:dd:a5:24:71:65:c3:e6:8f:85:14:f9:96:9d:0e:c9:44:a6:
05:c2:4f:8e:ed:d1:83:eb:01:d3:37:66:2f:00:e2:c7:aa:e2:
45:b3:6b:f9:65:d3:52:f2:15:dd:7f:be:e5:eb:9e:03:2e:cc:
f7:43:7d:eb:53:1d:e7:bc:30:51:8f:43:7f:08:56:63:da:0a:
23:30:90:c3:97:33:d1:3a:d5:72:6f:5e:d1:5e:81:a7:72:cc:
43:95:3b:72:8b:a6:a7:9a:57:b7:6c:d2:7d:e5:41:75:20:62:
6f:0b:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:56:47 2026 by rpki-client