Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: FDaS3Ks6G5E2t6S6cc5O/LDLpqGI9PY2Mj0lNtsXYBY=
Subject key identifier: 92:36:EC:0B:8C:80:58:45:3B:CF:35:BE:F2:20:CD:D6:0D:1D:82:9C
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019D389C1FF930F27436D60CFC2CF8068AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 1173
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: LrKMQUzlOLWMUMnlG4Aj/d/j7HtCuQ9GyBf/Yxbqs/g=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:f9:30:f2:74:36:d6:0c:fc:2c:f8:06:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=9236ec0b8c8058453bcf35bef220cdd60d1d829c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:25:74:b3:f8:e4:a0:c4:45:ed:5b:32:c6:
a2:47:b0:13:12:0a:16:53:d3:42:a8:f3:a5:d2:29:
b5:a4:d1:f3:7f:f1:f4:d8:2f:15:53:24:50:90:ed:
20:60:02:4a:f8:e2:dd:3f:33:bf:d0:d0:b1:82:6c:
b5:02:9a:fd:6d:db:0b:99:6a:c7:ea:22:a2:82:2c:
5a:9b:1a:19:bc:61:24:07:67:66:69:d3:54:c2:c0:
28:95:77:07:84:da:19:7e:90:6c:cc:4c:57:da:87:
30:71:1b:00:8f:d2:3e:f1:a3:f7:1a:1b:17:0c:db:
50:cb:58:2c:18:c5:c3:1c:06:53:07:02:6e:fa:ac:
f9:65:7f:aa:c6:ce:8b:e8:6c:7d:2d:b6:db:e7:5b:
69:f0:a5:ed:1c:31:ce:c8:09:75:d1:d1:40:82:ea:
52:4f:39:0e:3d:f9:a3:de:73:24:f3:67:71:79:e0:
eb:88:a8:2d:28:91:ad:9c:bb:81:0a:62:c8:c7:91:
2c:53:0f:c5:cf:6c:3e:62:d3:bb:6a:da:78:45:81:
b9:56:0d:51:aa:fe:8d:4b:0d:3e:65:8c:f5:a9:7a:
60:e4:ce:a0:43:1f:5a:46:9c:dd:87:d5:48:8b:62:
42:92:12:16:79:18:ef:49:19:e4:e7:ee:c8:18:6c:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:EC:0B:8C:80:58:45:3B:CF:35:BE:F2:20:CD:D6:0D:1D:82:9C
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:b1:bb:39:f6:65:85:bc:2e:81:b2:48:10:97:8e:a8:45:
dc:fe:93:4c:dd:0c:a0:04:48:15:c8:32:15:47:96:e2:11:f3:
8a:33:14:5b:ab:cc:be:a1:78:4b:d8:6f:46:1f:0f:67:e4:3c:
b4:0b:93:82:58:69:f7:a5:91:69:ad:94:df:ae:6c:4f:5c:20:
34:82:2c:9a:7b:a1:bc:a0:58:1e:b2:bf:ac:7d:41:6a:95:ef:
e4:26:8a:b2:5e:5b:8c:2b:35:5e:23:e8:1a:87:11:b5:15:c7:
fc:ab:9a:2e:07:3a:f6:08:4e:59:bc:98:65:f7:51:b6:d8:d1:
54:2d:32:54:f0:f0:4d:4b:2b:12:7a:af:cb:b3:e7:c1:6e:25:
62:3b:59:ed:ca:a2:18:59:39:eb:4a:68:ef:74:0c:8f:14:44:
5b:6a:21:02:b2:b6:72:fd:ec:b3:40:97:63:71:70:44:2c:95:
43:b7:a3:a9:ca:b2:4a:fa:05:df:96:8d:5c:c5:69:65:e5:46:
7d:ac:4a:b5:45:3e:99:d8:66:6c:d1:e0:fd:ad:ed:6f:95:13:
df:09:b8:5e:1b:04:4f:2d:54:a0:0d:65:c9:b8:22:91:1d:49:
0d:b4:cb:65:d6:bc:3c:f7:29:16:e6:fd:68:d1:7a:83:56:af:
53:80:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:29 2026 by rpki-client