Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: wu9Q6bJ5dH2VImQhblIhrpGWQI4cNOPNJ3WbO173QHI=
Subject key identifier: C2:80:95:F1:85:17:DB:33:C3:13:C6:AB:CA:72:D8:C7:18:46:E1:2C
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 01A14797378277A41EB8B2561E2578A5ACE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 138D
Signing time: Sat 17 Oct 2026 02:00:54 +0000
Manifest this update: Sat 17 Oct 2026 02:00:54 +0000
Manifest next update: Sun 18 Oct 2026 02:00:54 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: TllxCoJ0c4kKa/YXVn4F1Oe8jj+VspxkQ16vRm0Whzc=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:37:82:77:a4:1e:b8:b2:56:1e:25:78:a5:ac:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Oct 17 02:00:54 2026 GMT
Not After : Oct 18 02:00:54 2026 GMT
Subject: CN=c28095f18517db33c313c6abca72d8c71846e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:39:df:06:56:df:26:e0:a9:b8:1f:73:2a:
21:58:fa:d2:48:56:d9:45:53:c1:2f:a1:f3:e6:d2:
5e:52:75:17:a4:19:bd:fd:6d:d8:73:10:25:74:b5:
96:b1:bc:1c:b9:ef:16:5a:e7:93:38:e5:78:da:c6:
af:e3:42:ca:a7:44:62:9c:08:35:eb:84:8f:ee:0e:
ad:97:d6:cc:c7:ab:33:93:05:a4:03:3a:e1:4b:6f:
1d:6b:0f:bf:4b:61:3a:a8:e2:5c:a6:90:2b:35:fa:
b5:af:82:87:5d:ca:15:48:3b:16:8d:55:dd:48:65:
76:50:f8:88:f8:c8:4f:ba:45:c2:9d:55:a9:6e:84:
3b:79:64:36:38:91:cc:db:e2:dc:f9:d9:2c:bb:97:
e0:f2:41:b7:fc:05:9e:26:d0:91:b6:98:c9:3e:09:
d5:80:32:9c:e4:15:7f:2e:dc:d3:fe:a3:c4:90:1e:
89:58:09:0b:a2:ef:5d:cf:f7:84:df:5a:6a:28:e2:
72:5f:88:f2:73:01:7e:40:21:f0:07:b4:4f:38:48:
40:f5:bb:80:e3:5c:e6:ad:25:dc:b4:84:a8:0c:f5:
4a:aa:ae:cb:0d:d7:46:42:1c:11:f0:d7:0c:75:28:
76:10:f7:84:00:26:d5:e5:b1:b8:a6:78:53:6d:f5:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:95:F1:85:17:DB:33:C3:13:C6:AB:CA:72:D8:C7:18:46:E1:2C
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:59:31:36:28:db:a2:d7:ba:72:7e:19:e6:83:29:6d:df:4e:
c7:6d:18:55:15:6d:62:e8:16:b0:b3:b7:62:30:84:48:5a:32:
ad:a9:f7:8d:91:b2:ed:59:f8:27:c7:8e:f5:40:b6:c0:a8:73:
8f:a9:cb:fd:5e:45:7f:c2:64:8e:e4:14:92:ca:c3:6d:db:ab:
1d:c9:ea:7f:88:13:48:96:c4:f0:ea:81:a2:7b:04:e7:0e:4f:
40:94:fb:b6:a0:dd:3d:db:50:9f:4b:a9:92:4d:f3:c2:dc:95:
9c:08:a6:90:a1:82:7a:c2:69:6c:d0:eb:0f:78:70:b5:08:6d:
a2:27:f9:ab:01:15:74:85:e1:01:06:66:21:ae:cf:4d:bc:92:
23:c3:c6:4d:6f:33:e8:77:4a:da:45:ca:87:f3:12:22:a9:dd:
5f:f9:56:4f:01:e7:0a:49:91:4f:a0:4a:41:11:b2:94:99:51:
6e:61:fa:46:3a:a3:e0:8c:cf:bf:c4:33:7c:bb:34:9a:1b:46:
90:fa:de:e8:f3:94:7b:0a:e1:de:00:ca:c9:35:e3:b3:d4:3d:
1b:97:71:e6:99:6d:1f:96:b9:29:84:dc:65:af:ac:bf:fc:b7:
f5:15:9a:98:ae:98:99:ce:f0:49:12:b6:0c:5f:bc:fe:fb:4b:
6a:55:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:04:20 2026 by rpki-client