Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: 0gMQt+xLZynFagX75kRJFcuKyz0AjegcUm1AXNiQHB8=
Subject key identifier: EC:4C:99:5A:C0:C0:C2:9A:DF:0A:7F:A7:30:99:E0:6E:AB:3D:CD:D7
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01A1445EF4C380CCF2E3F87B217023FBA253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 17C9
Signing time: Fri 16 Oct 2026 11:00:36 +0000
Manifest this update: Fri 16 Oct 2026 11:00:36 +0000
Manifest next update: Sat 17 Oct 2026 11:00:36 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: stR8p6CwIL9sSs+HbCVH9jSw9t6rDBZgCGHMVdFX0Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:5e:f4:c3:80:cc:f2:e3:f8:7b:21:70:23:fb:a2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Oct 16 11:00:36 2026 GMT
Not After : Oct 17 11:00:36 2026 GMT
Subject: CN=ec4c995ac0c0c29adf0a7fa73099e06eab3dcdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:df:58:98:5f:38:69:17:cf:b5:bf:81:c4:
25:46:37:aa:9f:6c:37:25:45:26:64:7e:9c:67:98:
87:5b:f5:90:37:2e:4d:de:a7:fd:f9:82:70:42:80:
a5:7d:cd:5a:2d:e9:c1:f0:b7:63:56:51:dd:0f:ac:
70:be:e8:47:c2:75:1c:db:7f:45:ba:e3:94:f1:f9:
87:16:0d:e8:c3:bd:b1:be:34:16:8d:05:ac:e8:fa:
31:93:e9:40:56:73:6e:d7:a9:2d:fb:59:68:de:29:
f9:64:9c:fd:94:a0:06:c9:4f:bf:fa:4e:ce:2f:b5:
b1:68:f9:ab:3c:c0:b7:2a:16:d3:51:53:ac:b7:af:
2e:60:ec:c0:5b:d7:fc:cb:68:eb:ce:9b:78:b8:8a:
13:ec:db:fe:81:5d:26:fd:3b:c0:ca:f3:c3:c0:67:
39:29:5e:11:7d:42:86:93:cd:c2:83:fb:30:c8:95:
53:07:90:b0:c2:1f:da:0f:be:0d:f3:cc:69:af:38:
48:e5:24:fc:93:7b:72:be:e4:5c:54:75:3c:ce:ea:
96:18:28:d7:3f:99:bf:72:40:4c:cb:f9:55:4e:85:
2c:44:90:4b:10:6c:b6:53:5a:bd:47:24:d4:6b:6f:
4e:1c:16:f7:58:1d:cd:ed:33:c2:fb:3d:ce:0c:db:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:99:5A:C0:C0:C2:9A:DF:0A:7F:A7:30:99:E0:6E:AB:3D:CD:D7
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ed:4c:81:91:aa:10:50:41:ee:5d:b8:40:59:46:12:68:48:
c3:c5:c1:8b:8b:20:06:74:7d:63:01:c1:fd:cc:21:78:c6:57:
88:e9:17:32:b1:4e:f0:f3:78:ee:5b:45:3e:6f:39:aa:4a:31:
97:e9:62:10:14:97:a5:a1:27:a8:13:32:44:60:6e:63:0e:b3:
26:0c:f2:2e:e0:bc:71:f5:3c:59:5c:3c:fa:14:be:a9:51:a6:
0c:d3:19:e2:ae:88:05:90:01:36:6f:cb:f1:60:33:7a:9b:f3:
0f:15:6c:82:6e:72:8c:1a:e5:99:b8:5d:c3:00:5f:e8:1c:c6:
2f:a1:86:c5:8a:5d:6d:56:9e:e3:c2:2e:41:f1:7d:96:03:b2:
49:29:4b:8c:f2:65:cb:6d:ae:dd:03:e9:70:2c:52:c2:f8:89:
70:9f:ed:19:ac:44:12:88:51:2e:40:1f:d2:1b:d0:a4:c5:78:
e2:cc:cf:5e:1d:8d:34:16:7f:ef:a0:39:42:00:f4:37:be:fe:
05:db:fa:8f:55:7c:12:12:53:9e:9e:89:0d:2a:70:7e:2f:c0:
3a:16:c5:81:24:ba:6b:59:94:6e:97:82:99:81:10:8f:60:6d:
9c:cb:3c:0c:c9:98:ab:09:2c:1e:7a:8c:ae:6d:83:81:42:7e:
00:db:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:42:54 2026 by rpki-client