Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: 03cLynM2oDSgLpyorcjHcM2iSkktTijQ27dv4G0qOC4=
Subject key identifier: A6:F7:F3:E4:14:8C:24:89:7E:72:EB:5D:0C:D2:13:AB:F4:AD:10:40
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 019F1943EAE29900CBAE1E13F37E74BCA16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 0571
Signing time: Tue 30 Jun 2026 16:01:49 +0000
Manifest this update: Tue 30 Jun 2026 16:01:49 +0000
Manifest next update: Wed 01 Jul 2026 16:01:49 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: Yp/EAAV4OlVsIyPhXuMXfttmgRey5oDjDNenlVANcMs=)
2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:ea:e2:99:00:cb:ae:1e:13:f3:7e:74:bc:a1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Jun 30 16:01:49 2026 GMT
Not After : Jul 1 16:01:49 2026 GMT
Subject: CN=a6f7f3e4148c24897e72eb5d0cd213abf4ad1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:8e:10:97:ff:c1:e3:d9:96:5a:e2:14:31:
e6:cc:33:68:61:5d:45:e6:8a:97:ba:0c:7c:8a:d1:
0b:fe:71:26:40:4d:48:e9:cb:82:ba:a7:48:36:7b:
ee:24:c6:a8:95:5f:26:e8:e3:dc:cc:7e:1d:41:51:
cf:7e:ae:e6:e7:bf:5f:29:72:be:2a:c6:45:a1:9c:
bb:c5:ee:8f:e3:f2:ae:0a:cf:3f:dd:ba:f2:85:64:
a6:f0:4d:78:b2:c8:ef:0c:4d:2e:ca:24:93:d2:16:
e8:98:7a:50:b2:21:d2:71:ce:44:74:fc:01:1f:25:
1a:cb:c2:60:e7:bf:ed:da:bd:6f:36:2f:26:5b:80:
23:53:0e:a0:89:dc:66:d6:54:a4:c7:4f:4f:b2:ec:
44:6f:a0:d3:50:7b:7c:e0:24:75:ec:6b:d4:ec:5f:
35:5a:3f:4e:65:2c:55:d5:9b:33:bc:fe:da:18:f3:
6d:81:c3:1d:9a:bf:7c:d3:e9:22:77:ab:41:b1:70:
5a:96:dc:61:43:91:bc:0b:5d:54:7a:84:2d:b1:75:
b1:f0:d0:a6:81:08:a2:7c:48:f3:55:97:30:c0:f4:
91:26:18:a9:e1:e1:5a:c3:a6:e7:04:88:27:c9:94:
4c:77:1c:c2:cd:8b:58:b5:1f:9a:1f:f3:79:b4:6a:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:F3:E4:14:8C:24:89:7E:72:EB:5D:0C:D2:13:AB:F4:AD:10:40
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a8:a6:24:3d:92:12:b5:a2:02:8b:ba:1a:da:ce:cc:2d:87:
8c:a1:8d:f4:30:88:79:2f:61:a3:d8:a5:e7:fb:68:f9:dd:0c:
aa:7c:3d:0c:20:ea:51:0b:d3:2e:c2:2f:5a:8a:09:b4:f2:d4:
83:23:04:2d:94:7a:c5:63:de:c8:8a:6b:4d:76:0c:73:2e:d3:
42:f6:76:da:45:ec:01:f2:3f:db:b7:8e:87:e1:3e:d0:00:c6:
d8:a8:e1:36:ac:c4:67:82:c8:6a:ed:b6:eb:f5:9c:8b:ec:9c:
4e:18:ee:46:18:4b:98:bd:73:a1:0f:fc:e9:9c:15:82:b7:61:
29:b4:f4:06:d0:8f:08:f0:67:b7:18:d3:be:14:0b:f5:5a:f0:
17:5c:5e:bf:5b:de:53:a2:69:f5:15:ae:77:10:68:fc:5e:65:
58:4b:7c:de:a1:82:50:77:f5:d1:21:29:e6:36:8c:31:fc:98:
39:06:cd:8c:2d:bd:e8:11:cf:49:4d:16:45:ec:e0:13:41:7a:
9a:64:78:7f:d1:cc:fc:e4:ee:46:7a:13:8b:89:4e:2d:63:41:
26:de:1b:b0:d5:f7:3f:1a:14:5d:36:0b:f4:9d:02:08:ab:8e:
c4:2d:26:7b:91:c1:7a:e9:f8:1f:87:3b:3b:05:0f:e5:7a:64:
b5:85:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:57 2026 by rpki-client