Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: KwUqhHE5BNrmtocUQsIdObfHzqDWL3KalwwSP+M2lFo=
Subject key identifier: AA:4E:DB:E7:CF:69:EC:FB:0B:E4:B7:CC:23:08:D3:6D:2B:98:FA:AD
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019F17C32422179B965A57731B2850E3356B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 1603
Signing time: Tue 30 Jun 2026 09:01:32 +0000
Manifest this update: Tue 30 Jun 2026 09:01:32 +0000
Manifest next update: Wed 01 Jul 2026 09:01:32 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: Mtu3rQuLy2KWqzN0TiCxAAtTNF/gvzyHe5tZMkc1N/w=)
2: B858kg8THjaSoEIim6530sspUXs.roa (hash: HCD5tBX+9y/cDnZBRIi513FjVWEfPLJ8ux8RH4V8Dpk=)
3: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (hash: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc=)
4: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (hash: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE=)
5: dOKAlcT195hvrnl94GECXypnUw4.roa (hash: uCgRu9pSvcyUSoOdBM4Z/JT81zNcZoR+ge8afkxI5PA=)
6: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (hash: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q=)
7: x8_4aac4Nz-MFK0_jVyanCY1Njs.roa (hash: W//4mpSYdJPZzB2svcIDaGv0bAnhUuw6rNgGJNlJgIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:24:22:17:9b:96:5a:57:73:1b:28:50:e3:35:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jun 30 09:01:32 2026 GMT
Not After : Jul 1 09:01:32 2026 GMT
Subject: CN=aa4edbe7cf69ecfb0be4b7cc2308d36d2b98faad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:6d:9c:2c:3c:ad:fc:b0:5b:2d:0b:d7:ed:
f0:c1:0c:2a:33:6f:ac:d0:90:a8:dc:14:22:a2:ca:
80:2e:97:32:75:1b:1e:4d:29:17:bc:74:da:d2:fc:
3a:7e:49:08:ec:a9:2c:10:3a:cb:04:20:d9:3d:61:
17:c5:d4:8e:ec:2c:39:0c:4c:33:d2:5c:19:18:5f:
bb:b8:7c:26:df:da:bc:70:28:50:cd:1e:92:ca:96:
51:b6:f5:33:aa:76:18:72:07:d2:0b:de:92:b5:48:
64:f8:22:49:78:1b:40:3e:e9:1a:cf:77:d1:16:c8:
37:4a:88:7e:76:7d:8d:a0:42:d9:90:9f:d4:a1:39:
94:b0:1b:2e:a3:61:bb:d3:65:2d:77:cd:76:26:88:
3a:a4:ee:f1:db:f7:fd:fe:49:e9:da:45:86:fe:f0:
3d:a0:1e:ef:b0:b4:de:11:ca:61:af:9c:11:9c:d6:
53:0a:f2:24:83:3b:11:a1:5a:fa:ff:1c:14:84:5c:
6b:bf:b9:c6:28:e0:db:28:45:8f:22:ed:99:72:5f:
90:a2:d4:a3:b4:60:dd:77:9b:46:6b:bc:8f:81:fa:
31:44:23:ce:d6:48:f2:de:fb:0d:1e:55:f5:16:43:
41:ab:97:1d:0d:49:f4:ec:56:bc:b2:97:b5:64:cc:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:DB:E7:CF:69:EC:FB:0B:E4:B7:CC:23:08:D3:6D:2B:98:FA:AD
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6a:01:25:a9:49:76:78:fb:27:f4:18:3c:9d:e5:de:72:c6:
61:84:4d:8a:94:5e:2a:79:f8:aa:e0:a2:a1:d4:2f:79:b5:14:
fc:2e:ab:83:a2:4c:4c:ce:c3:af:c1:21:6b:83:ad:b7:19:0b:
dd:cc:25:6b:bb:f4:0b:68:3b:00:52:dd:32:3c:fa:62:e1:f4:
e4:8a:f3:bd:a7:a3:83:8c:d9:b3:0f:a3:b4:14:f7:06:fd:0d:
2b:44:0d:b7:04:aa:dc:9b:17:a3:95:f8:e9:ec:3d:27:75:84:
d0:d8:ba:17:51:1c:49:c8:76:42:6a:60:fc:c2:27:ba:cb:34:
a9:87:97:4e:3f:f6:0d:a9:66:66:36:2f:c9:58:f5:90:0b:de:
d1:de:cd:c1:27:53:b3:61:12:a6:03:c0:5f:1e:1a:0b:4c:bd:
9c:6b:a7:f6:99:95:d1:40:42:ad:fe:3d:88:c3:dc:e9:68:22:
f1:cf:ef:0a:11:6c:bc:6a:28:22:35:be:f9:fc:b8:52:aa:5a:
be:1d:8d:4d:c0:68:40:f4:6d:ee:56:1f:d7:00:b0:f5:57:a8:
b6:e2:a1:62:3e:d5:c4:7b:37:51:c8:1b:a8:7d:9b:bf:38:fa:
b3:7f:3f:c3:13:7a:e0:a7:0d:83:9d:78:5a:31:13:e2:b1:c8:
20:b5:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:26 2026 by rpki-client