Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: MED64UmZTiRZokpMKfCRd668n9Pxh7i7q4OR6s/DIhM=
Subject key identifier: C7:4A:D6:D4:8F:9D:4B:10:F7:47:E8:C1:3B:6B:76:ED:36:DB:F6:AA
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01A001DD4EE01ECA02E3521FC5365023F316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1722
Signing time: Fri 14 Aug 2026 20:01:15 +0000
Manifest this update: Fri 14 Aug 2026 20:01:15 +0000
Manifest next update: Sat 15 Aug 2026 20:01:15 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: +wdIUJw2z2oXLjTfNn9N+yFKHy/ttYuhlTXRmwE/YQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:4e:e0:1e:ca:02:e3:52:1f:c5:36:50:23:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Aug 14 20:01:15 2026 GMT
Not After : Aug 15 20:01:15 2026 GMT
Subject: CN=c74ad6d48f9d4b10f747e8c13b6b76ed36dbf6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2d:ff:fb:40:4f:eb:f5:ae:d2:cf:09:91:ce:
bc:94:c5:e0:c2:1f:6d:0a:0b:41:e0:22:04:9f:61:
93:28:92:de:80:2a:a5:5b:c5:5f:5e:8d:43:ec:9b:
17:8d:96:f8:60:f2:d8:38:0e:d6:a4:db:a7:51:a8:
21:4d:71:ac:0a:5c:7c:53:c5:19:85:b8:7a:a3:95:
70:bb:ac:9f:83:44:12:41:e2:69:62:72:7a:63:42:
f1:92:53:55:ee:c8:fc:f4:be:22:1a:df:d3:9e:7a:
ff:b4:a9:a2:8a:63:36:47:86:6a:c9:ce:25:ed:93:
fb:18:5d:bc:81:58:84:34:49:bc:59:62:25:19:53:
5e:9e:9f:04:1e:14:b7:1d:ed:d4:be:81:19:23:29:
41:7f:57:fa:48:33:eb:ff:65:2a:09:71:4c:f3:c2:
63:50:ba:02:ed:cb:4f:16:fd:f1:2c:c3:cb:a7:c0:
97:6e:43:0f:09:8d:da:78:f8:01:25:88:db:2b:60:
5e:17:a1:85:a7:52:fe:a2:8d:35:ca:8f:08:09:87:
46:1c:9d:ea:18:53:8b:2f:8c:04:e4:41:de:73:0d:
2f:22:9a:55:f5:fb:1d:9c:c0:15:e4:71:b9:9f:fc:
ad:a7:bb:3e:7f:3d:8e:94:89:0a:00:54:f3:da:6b:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:D6:D4:8F:9D:4B:10:F7:47:E8:C1:3B:6B:76:ED:36:DB:F6:AA
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:24:15:34:a4:5a:4f:57:d7:7a:61:1f:24:52:50:65:2f:92:
7c:b0:2f:d5:f6:eb:30:92:e2:94:9f:f7:c5:ca:ab:06:fb:79:
7e:9e:aa:0e:93:11:be:91:7d:f7:18:c9:ae:1b:16:44:45:d7:
98:e1:74:4a:42:c2:b9:a6:3d:98:8b:73:07:a9:0f:d2:73:41:
de:03:56:13:00:a8:58:82:86:61:9d:ab:72:53:bb:d0:3b:a4:
41:6e:a6:7e:5b:86:31:d8:b9:10:82:14:98:fd:6a:c3:75:a4:
fb:b5:28:53:3c:53:55:12:12:6e:84:42:02:b7:49:00:d4:6e:
03:c1:5c:11:ab:6c:09:dc:38:fe:61:32:08:56:ae:0c:8b:5a:
15:7d:91:ef:33:54:0f:63:9e:74:dd:c5:55:67:83:2e:e0:3f:
4b:ef:88:fb:97:4f:f4:bb:26:77:cf:aa:e1:6f:0e:71:90:88:
d3:24:1b:b8:8b:4f:8d:60:c9:6a:0d:85:7e:75:7c:76:83:84:
e2:5a:7b:e7:bf:7c:8b:18:da:de:1b:f9:5c:4b:75:61:2d:5f:
82:45:62:cf:9e:da:d0:c9:1e:54:d1:91:c3:1b:b3:07:c3:76:
5e:8b:97:c1:c6:5e:8a:ed:70:e7:b9:0c:08:b5:3f:44:09:5d:
fd:c4:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:33 2026 by rpki-client