Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: W+NdLiYe5Qt3ece+Oe1doW/0AzleFCn3wv74uK/h/x4=
Subject key identifier: 65:3B:51:70:33:AE:63:EB:D9:3A:A9:97:35:A9:35:D1:E3:3D:CC:04
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019E2FCD798BD35605856555788FAF9708E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 11F3
Signing time: Sat 16 May 2026 08:00:55 +0000
Manifest this update: Sat 16 May 2026 08:00:55 +0000
Manifest next update: Sun 17 May 2026 08:00:55 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: jT/B5GjQBjdDvpoZUxMErUU6Oet1DUpzI5JSJpoNvcE=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:79:8b:d3:56:05:85:65:55:78:8f:af:97:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: May 16 08:00:55 2026 GMT
Not After : May 17 08:00:55 2026 GMT
Subject: CN=653b517033ae63ebd93aa99735a935d1e33dcc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:06:4d:8d:dd:59:59:5e:90:fb:f8:29:e4:
e6:38:7e:45:c3:f3:a7:62:ae:0f:fd:1a:f6:cb:b7:
bb:c9:4c:a3:39:2a:cd:8c:35:ed:97:2a:ba:c9:5a:
41:f0:b0:45:58:84:8c:85:f8:4a:7f:62:b6:a1:a6:
f4:33:b5:a2:81:a9:75:81:76:ee:db:5a:83:17:ad:
26:30:64:2b:f2:bc:a3:17:30:57:cf:10:7c:14:02:
34:24:90:15:43:12:de:4a:ec:01:16:ce:d5:80:2f:
7d:25:da:90:b6:c1:6f:70:76:2f:9a:62:f4:c5:de:
cc:1b:c0:55:83:0b:29:89:6a:9c:d9:fa:28:fc:19:
30:92:69:8d:1d:64:0d:d8:74:32:68:f8:3e:57:30:
fc:e3:cf:2e:7c:b3:5b:44:b5:b3:62:4d:3f:b1:de:
81:31:9e:34:c9:8e:fb:08:f5:6a:88:b9:f3:e4:e5:
21:0f:93:a5:ad:78:a7:fe:4d:48:be:d0:39:8d:2d:
88:1b:55:67:b9:99:da:46:9c:3b:d3:91:b8:f0:67:
38:95:d3:2b:f4:52:ad:70:e8:9a:3a:2e:6e:d8:5e:
00:ed:46:e5:f0:b9:77:d8:24:14:a6:a6:6c:0c:cc:
dc:5e:ea:04:d5:a6:6e:81:0e:3c:89:f9:ea:b2:90:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:51:70:33:AE:63:EB:D9:3A:A9:97:35:A9:35:D1:E3:3D:CC:04
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f6:bd:c2:b0:16:0f:51:b2:09:31:7b:a7:1d:8d:eb:a9:d4:
3e:bb:9f:87:9f:4d:88:3c:da:62:50:e8:2f:1b:84:14:30:42:
13:f1:3e:93:5a:19:8d:36:bb:b9:c5:15:b2:6c:24:31:e5:67:
71:6c:f0:99:4b:ff:a3:21:d3:e5:01:51:19:fc:01:20:18:05:
be:fb:26:59:58:0b:f2:5a:95:64:35:71:03:73:a5:0a:86:22:
57:df:d4:85:66:f0:8c:44:1e:76:46:85:a1:ff:41:29:7a:2e:
51:77:26:b4:b9:64:42:05:bd:5d:91:af:4c:05:33:59:97:2b:
cb:71:02:ef:00:21:2e:24:a2:c2:cc:03:b3:fd:c4:b0:fd:1b:
d1:83:b2:3c:c8:20:9f:d0:e0:a7:da:a7:65:d6:e1:48:c6:18:
ce:b3:db:4f:dd:a6:f4:15:b2:32:0f:cc:b0:dc:e4:9e:b1:f5:
18:6b:ca:82:83:a3:10:d7:dd:17:31:fd:50:0a:6e:72:40:a4:
95:2b:22:8c:65:99:3f:77:6f:0d:62:da:28:2d:0c:7e:d6:61:
de:7f:8a:2a:8c:33:83:74:8a:f7:0d:68:ac:d2:4c:b8:fe:75:
28:98:15:d0:d6:ad:4c:b3:35:e3:20:8c:fc:d3:de:88:74:3c:
02:17:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:20 2026 by rpki-client