Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File: 2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier: indWtFefKxel9Ow4eSSgF0hyjG2ZCU2ATe4GuuLeLR4=
Subject key identifier: 5A:13:EC:B1:64:DC:5B:01:48:62:2C:6C:EC:F9:9F:C3:E3:7B:4A:0D
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial: 019E28B9108736873492EF8CE53DE6A32BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number: 013B
Signing time: Thu 14 May 2026 23:01:17 +0000
Manifest this update: Thu 14 May 2026 23:01:17 +0000
Manifest next update: Fri 15 May 2026 23:01:17 +0000
Files and hashes: 1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: oZRYleu9ebizwTP2OgWNNtdemp/fTTHRsRgx08LDvjw=)
2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:10:87:36:87:34:92:ef:8c:e5:3d:e6:a3:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Validity
Not Before: May 14 23:01:17 2026 GMT
Not After : May 15 23:01:17 2026 GMT
Subject: CN=5a13ecb164dc5b0148622c6cecf99fc3e37b4a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:88:3b:f6:bf:58:63:fb:93:f7:55:7b:19:
cc:56:0f:9d:08:3d:c6:0b:9b:2f:a5:f9:86:4b:fa:
6e:fa:d1:a5:45:ec:63:b8:18:32:83:6d:44:4d:0f:
c4:51:6f:60:28:fb:c1:1e:cb:c4:56:4d:65:45:26:
09:df:b7:1f:69:65:0d:aa:a7:dd:4a:e1:76:98:8d:
ee:33:2d:f6:7f:b6:9d:ab:96:8f:ae:4e:3b:c7:3d:
ab:c0:e5:a2:7a:ce:6e:0d:d0:09:17:48:50:9a:6e:
c0:be:e1:00:ee:fa:95:5b:ed:7b:54:e0:6f:26:00:
e5:09:87:3f:bc:17:65:b7:5a:0d:bb:07:f2:a0:ec:
e8:43:2e:11:ca:ad:d6:c5:54:9b:11:a8:c5:92:c0:
61:db:e2:c3:9d:68:70:d2:05:d7:a8:d0:f8:ea:91:
a6:e2:79:d5:13:26:a3:57:14:76:e3:0a:c1:32:ef:
1c:1d:ae:66:f9:66:8d:59:41:3d:d2:9b:98:98:fe:
72:20:a1:56:f3:42:13:ad:8b:db:2e:b7:81:74:4d:
8a:1b:cb:3f:56:77:2e:e5:f1:1c:56:8c:f2:88:62:
23:0d:5c:6c:eb:25:c0:e7:3a:2c:f1:fc:71:f4:00:
ec:1b:2d:30:22:f9:a1:17:52:b9:15:74:6e:24:48:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:EC:B1:64:DC:5B:01:48:62:2C:6C:EC:F9:9F:C3:E3:7B:4A:0D
X509v3 Authority Key Identifier:
keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a0:ca:28:ce:8f:25:8e:40:25:20:ac:53:5d:35:37:76:13:
43:e4:04:ef:0a:5d:b6:00:93:71:8c:61:5c:55:af:e6:3e:20:
2a:e9:3f:f9:a6:66:ea:57:a1:7d:3f:14:29:f8:9c:f3:a3:21:
cd:11:c0:c4:25:c0:34:48:35:58:dc:d1:9a:dc:bd:ad:90:cb:
7c:f5:c6:52:e8:9f:89:82:a9:c0:94:48:f5:52:0d:ab:cf:cf:
5c:12:30:f7:0c:7d:80:bd:1d:98:5d:81:aa:3a:d2:ee:7e:64:
a6:01:ce:cf:0f:9d:57:1f:e5:ab:dc:9c:09:34:df:ed:67:c0:
3c:82:0c:08:79:9b:41:5a:0a:1c:48:70:6c:04:f4:ff:0d:7b:
99:c7:50:56:54:3e:bc:69:fb:83:39:29:62:36:9a:8f:6c:b4:
4a:78:07:7c:42:24:5d:8a:5b:11:d4:49:1a:21:eb:1c:b1:25:
17:25:98:62:4b:17:c8:65:ec:4a:0d:5a:1b:2d:16:78:2e:fc:
4a:ae:40:20:b2:a7:0e:ed:46:fc:72:77:39:93:8e:6a:eb:8a:
b0:43:21:4a:12:65:89:93:a5:bd:94:1f:b8:ba:ff:0d:08:33:
b2:0c:25:b6:40:d0:c7:4a:e6:7f:e1:be:73:92:8e:b4:04:4e:
ab:23:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:14 2026 by rpki-client