Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: XTT7u77b2QKwgN1rfvCUAyEBwvUKfKcZ04PK7S6CVT4=
Subject key identifier: E5:6D:9F:F7:CB:2A:EA:BC:45:A2:30:C9:45:C9:17:67:04:FE:E7:CE
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019F129C70DEB7F1CFC09843B77060565285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 01EE
Signing time: Mon 29 Jun 2026 09:01:10 +0000
Manifest this update: Mon 29 Jun 2026 09:01:10 +0000
Manifest next update: Tue 30 Jun 2026 09:01:10 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: +AK0LZViVySyulkGK6vCWxz+zMsJ9/ilaHI2gDXwW24=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:70:de:b7:f1:cf:c0:98:43:b7:70:60:56:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Jun 29 09:01:10 2026 GMT
Not After : Jun 30 09:01:10 2026 GMT
Subject: CN=e56d9ff7cb2aeabc45a230c945c9176704fee7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:7c:46:f9:3f:93:60:06:c0:9d:99:92:8e:
ca:fe:4b:d6:01:47:f1:33:6d:74:bb:38:7d:c4:17:
03:e4:b4:9c:d3:24:0e:1f:80:6f:11:98:02:69:9a:
3b:5e:34:14:01:f9:a4:b6:3c:f4:3a:d3:7d:e7:d9:
21:f2:92:61:57:73:0d:cd:fc:17:d9:84:0b:40:0f:
29:8f:eb:24:0d:f9:95:a2:7c:c4:f1:1c:76:7f:bc:
99:54:1a:4d:24:08:6c:98:2d:b1:ea:4c:43:4a:6a:
3f:fb:4b:eb:33:74:e6:04:bc:a0:37:30:83:e8:4c:
32:97:b4:45:ad:a7:34:61:34:5e:77:38:c6:02:30:
e5:6e:b3:57:f9:4d:70:89:86:34:3c:fa:aa:fd:48:
21:84:85:f6:53:4b:68:a6:44:dc:c2:11:0f:3c:e0:
be:4f:12:47:06:f1:5b:9a:84:e1:fc:d0:c0:0d:97:
4d:72:e0:81:ba:d3:7f:73:eb:3a:53:34:80:b1:0e:
5d:b8:43:a3:9f:1d:91:56:78:a5:6f:d4:21:58:19:
5a:88:99:69:8a:97:d8:6f:f5:a0:61:3f:c5:8c:3d:
1b:c6:83:0a:bf:6a:df:68:99:a3:ab:33:db:f8:25:
22:7d:8d:cf:94:e3:6a:c0:2f:2d:79:6b:c1:17:d5:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:9F:F7:CB:2A:EA:BC:45:A2:30:C9:45:C9:17:67:04:FE:E7:CE
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:a9:81:1b:e6:30:9f:e5:5d:ff:29:da:39:9e:f7:39:01:
7d:95:82:36:0d:24:c0:72:d9:13:9b:a0:07:0c:94:88:5d:6c:
06:00:6c:f7:3d:bd:66:4f:e3:a5:d8:79:2f:70:44:6a:83:61:
13:53:41:3c:cf:9e:02:2f:05:66:97:88:09:50:78:61:7d:29:
57:7e:d3:03:63:b5:91:4b:10:3b:b7:1d:c0:da:fd:dd:c7:a7:
6a:b4:8f:ef:3c:c9:75:21:16:6c:18:dc:70:b5:bd:f8:0f:8e:
e5:6e:ff:19:a2:4e:95:c0:74:f2:cc:40:e9:9b:61:50:45:e7:
51:b2:03:8e:58:07:47:63:34:ad:72:5e:90:0d:3e:29:e0:38:
06:1d:66:49:79:a7:ee:b1:71:05:6d:a7:59:78:09:1b:3f:ba:
51:7e:6e:d1:44:49:3f:77:89:2f:25:d7:6d:6d:5a:9c:2a:43:
97:a3:30:82:b8:4a:8f:96:2d:07:e8:28:a7:ea:c9:17:34:64:
00:9f:19:fd:c4:52:56:78:30:db:31:46:41:37:af:ab:7a:9d:
56:56:85:8f:44:34:6c:4b:20:63:b5:20:3c:19:ec:f1:de:5b:
e5:da:e3:c8:59:03:90:93:17:a8:45:85:05:81:16:7a:e1:fa:
78:61:7f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnHDet/HPwJhDt3BgVlKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjMwM2U5NjgwMzc5M2MzYzQ4Y2RhNTIwN2E0MWU3NGU1
MGNiN2MwHhcNMjYwNjI5MDkwMTEwWhcNMjYwNjMwMDkwMTEwWjAzMTEwLwYDVQQD
EyhlNTZkOWZmN2NiMmFlYWJjNDVhMjMwYzk0NWM5MTc2NzA0ZmVlN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfN8Rvk/k2AGwJ2Zko7K/kvWAUfx
M210uzh9xBcD5LSc0yQOH4BvEZgCaZo7XjQUAfmktjz0OtN959kh8pJhV3MNzfwX
2YQLQA8pj+skDfmVonzE8Rx2f7yZVBpNJAhsmC2x6kxDSmo/+0vrM3TmBLygNzCD
6Ewyl7RFrac0YTRedzjGAjDlbrNX+U1wiYY0PPqq/UghhIX2U0topkTcwhEPPOC+
TxJHBvFbmoTh/NDADZdNcuCButN/c+s6UzSAsQ5duEOjnx2RVnilb9QhWBlaiJlp
ipfYb/WgYT/FjD0bxoMKv2rfaJmjqzPb+CUifY3PlONqwC8teWvBF9WpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVtn/fLKuq8RaIwyUXJF2cE/ufOMB8GA1UdIwQY
MBaAFNsjA+loA3k8PEjNpSB6QedOUMt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTIt
NDVmMmFmYzkxZDJkLzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTItNDVmMmFmYzkxZDJk
LzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9qpgRvm
MJ/lXf8p2jme9zkBfZWCNg0kwHLZE5ugBwyUiF1sBgBs9z29Zk/jpdh5L3BEaoNh
E1NBPM+eAi8FZpeICVB4YX0pV37TA2O1kUsQO7cdwNr93cenarSP7zzJdSEWbBjc
cLW9+A+O5W7/GaJOlcB08sxA6ZthUEXnUbIDjlgHR2M0rXJekA0+KeA4Bh1mSXmn
7rFxBW2nWXgJGz+6UX5u0URJP3eJLyXXbW1anCpDl6MwgrhKj5YtB+gop+rJFzRk
AJ8Z/cRSVngw2zFGQTevq3qdVlaFj0Q0bEsgY7UgPBns8d5b5drjyFkDkJMXqEWF
BYEWeuH6eGF/aA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:58 2026 by rpki-client