Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: NKtEHtqQ04d35lxilhcUrvdkenSDq13lEGfhpDUTReg=
Subject key identifier: 2D:14:BA:6B:D8:6F:32:E7:B4:F3:98:17:8F:BC:02:FE:78:90:EB:1F
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 01A001383C5F3A92BC03D2AEB09E7B010AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 12E4
Signing time: Fri 14 Aug 2026 17:00:57 +0000
Manifest this update: Fri 14 Aug 2026 17:00:57 +0000
Manifest next update: Sat 15 Aug 2026 17:00:57 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: r3MfsDiWyW7xGzO9U3fMTjoDWQR9EMnpfY7hU2rXvUc=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:3c:5f:3a:92:bc:03:d2:ae:b0:9e:7b:01:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Aug 14 17:00:57 2026 GMT
Not After : Aug 15 17:00:57 2026 GMT
Subject: CN=2d14ba6bd86f32e7b4f398178fbc02fe7890eb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ce:51:f3:46:3e:6c:c6:5a:b7:ea:6e:76:
fc:f2:21:be:87:d4:f5:81:39:d7:ae:73:31:3b:9f:
86:f9:9c:e4:65:0b:72:9e:2e:0e:f1:eb:ee:33:2d:
8f:4c:fa:24:77:fb:22:ce:81:7f:05:63:7a:6b:00:
8f:87:4e:91:9d:05:f2:26:3b:c3:33:2a:c4:17:bb:
b1:e0:80:70:51:70:a3:02:ec:cf:67:27:7d:d7:44:
05:ac:79:6c:7e:a1:0b:5a:7d:95:f3:23:80:c8:38:
cc:88:14:2c:62:a0:e9:93:26:ef:8d:de:f3:bb:3a:
c2:ae:b8:f6:e0:b3:f8:b9:d6:12:e0:a3:ad:92:b7:
5e:be:05:4b:ba:d3:81:79:2f:52:e2:14:3e:a2:92:
fc:c2:c2:14:e2:43:56:26:1a:b4:f6:f1:29:cd:e5:
7d:a6:75:f7:22:0c:e2:f6:d7:82:ac:f3:5d:ed:f8:
e5:01:f9:ae:2b:eb:fc:11:23:7d:8c:3d:ac:13:bc:
71:ea:58:5e:13:e0:3f:e4:fe:65:dd:b2:86:d2:bd:
31:86:71:57:ee:11:f2:e1:ff:ae:e7:ac:2b:ed:de:
55:d8:b9:c6:12:80:fa:fd:2f:a6:67:31:f6:66:f9:
e6:91:7d:3a:76:f4:e9:f6:1a:ac:5d:46:27:70:f6:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:BA:6B:D8:6F:32:E7:B4:F3:98:17:8F:BC:02:FE:78:90:EB:1F
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:16:ea:61:c0:f3:5b:d6:80:a6:50:d0:04:66:7c:22:a7:2b:
aa:15:8f:0d:79:5e:5c:21:4a:4a:3c:d9:1f:13:f2:d2:b1:d0:
9b:f4:93:1e:74:2f:43:4c:81:11:09:8e:aa:74:7b:d1:b1:98:
9a:1f:09:95:38:4a:97:b0:05:95:d1:e4:5e:33:8e:c4:b5:9d:
b7:04:68:68:c9:ec:cd:9e:5d:fa:5d:cc:54:5f:96:57:05:26:
9e:79:ff:04:2c:b4:c3:99:f3:4d:29:33:94:98:74:be:28:f7:
cb:97:09:f7:c8:fe:1f:36:76:a1:81:50:6e:10:6f:9e:e6:c6:
43:79:14:9e:8b:2d:72:93:30:45:23:dd:16:ce:5d:58:da:7f:
d9:8a:63:99:74:ca:94:3f:08:e8:be:e7:07:16:2e:75:89:16:
90:c6:2f:8c:16:eb:8b:b1:d7:e9:df:c6:5e:28:cb:55:15:92:
cc:66:2b:eb:bb:32:70:38:74:c5:0e:0d:21:da:a9:4d:8a:e8:
ab:f7:ed:3b:52:01:82:76:73:46:f2:c0:da:bf:f6:c4:6a:7c:
0d:46:8b:b6:81:47:24:00:45:07:10:f9:4b:19:a5:c2:de:ae:
03:e1:d4:a0:d0:2a:d1:cc:1c:6f:c3:fe:00:b3:7c:58:79:fd:
18:cb:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:25 2026 by rpki-client