Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: 8LeaFvLwcILlrtio8g8P9O85PKyrBLaEQlurb5/Kung=
Subject key identifier: D0:40:E2:B9:E3:16:80:CB:D4:94:9C:F8:45:61:71:13:89:CB:6D:5F
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019E30729C942EC51726414E4BC92B2BC6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1631
Signing time: Sat 16 May 2026 11:01:17 +0000
Manifest this update: Sat 16 May 2026 11:01:17 +0000
Manifest next update: Sun 17 May 2026 11:01:17 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: Lrcf9Pu0BmKf6DlOCxTpYI0pHs4lb3PcPWGZLw+3olo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:9c:94:2e:c5:17:26:41:4e:4b:c9:2b:2b:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: May 16 11:01:17 2026 GMT
Not After : May 17 11:01:17 2026 GMT
Subject: CN=d040e2b9e31680cbd4949cf84561711389cb6d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:74:91:0c:46:72:bc:43:29:b0:c0:5b:cb:
b3:b9:c4:49:a3:71:51:73:38:aa:06:43:9e:35:83:
a8:54:0a:1f:13:c2:67:df:eb:bc:8f:a2:dc:fd:64:
93:48:bf:84:aa:57:e2:da:0e:e1:37:98:80:26:9d:
ca:20:d2:71:fe:90:89:c4:78:61:bb:e4:5c:e5:34:
a4:f7:c0:7d:c2:ab:b6:d4:99:f2:38:dc:1d:ca:16:
e0:c0:4f:68:6a:96:52:ec:04:82:df:83:47:29:da:
ef:a2:14:bc:86:d1:5a:d0:87:43:c4:84:54:9f:c5:
84:93:76:ce:3b:f4:98:3a:fc:70:8d:dc:85:7a:ea:
c7:34:2f:8a:66:80:9b:11:b7:2e:5f:03:55:5a:3d:
a3:b9:70:3e:33:6f:f2:21:6a:b9:38:dc:8a:db:14:
d8:2b:07:8a:53:c9:56:16:fe:20:12:e5:de:50:6a:
20:af:7a:c8:c7:d3:d9:60:4d:04:13:ae:0d:86:d1:
5d:06:e5:3b:be:50:bd:1e:f0:fa:72:19:ab:c4:cd:
17:62:b8:cc:d4:0a:66:d0:c7:48:0f:71:94:21:80:
e9:f4:b1:be:ed:40:59:d8:9b:7d:cc:0e:ae:11:6b:
7c:ba:2a:41:a7:19:0a:c5:fa:74:10:fc:c1:53:39:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:E2:B9:E3:16:80:CB:D4:94:9C:F8:45:61:71:13:89:CB:6D:5F
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:ff:53:95:9c:79:25:45:49:fe:15:d6:55:37:2c:9e:33:
58:65:dc:f9:4c:79:c3:04:fa:a5:c8:48:c7:37:c1:4f:ab:55:
8f:26:90:ca:33:b1:74:10:6b:3a:21:1a:ab:80:d6:a9:a0:ca:
09:8a:69:78:e6:52:34:fb:1d:c7:63:0a:8a:e4:35:94:34:9e:
0e:c8:80:a5:47:1e:06:d6:37:1b:86:52:de:fe:9e:fb:39:3e:
83:d5:ec:54:9a:6c:8f:b0:31:32:e3:8c:cb:41:39:04:7b:3d:
59:ca:f3:6c:5a:3e:b7:7a:df:3f:8f:aa:8c:1f:db:69:fc:1f:
d4:f9:00:de:09:18:49:69:06:f6:ed:f5:93:2f:a8:cb:72:76:
e9:9e:67:e9:19:40:bc:c3:84:ec:7d:dc:e8:a1:23:3a:e6:a1:
d6:95:f7:fa:5e:11:b6:4a:a1:bc:28:2a:4c:3b:71:29:61:94:
cb:b4:3d:e5:03:7f:b5:c9:3c:fd:4e:08:89:27:99:9d:75:37:
0b:06:94:29:bd:2a:dc:4f:58:bb:78:e6:17:a1:c3:7b:d8:3f:
79:80:7a:5e:c7:60:7b:93:03:1d:5b:32:7d:97:79:a6:c4:2c:
58:84:6d:4d:ee:88:a3:ee:17:c0:be:9d:88:69:87:5d:ac:73:
cf:6e:1c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcpyULsUXJkFOS8krK8a6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjYwNTE2MTEwMTE3WhcNMjYwNTE3MTEwMTE3WjAzMTEwLwYDVQQD
EyhkMDQwZTJiOWUzMTY4MGNiZDQ5NDljZjg0NTYxNzExMzg5Y2I2ZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEp0kQxGcrxDKbDAW8uzucRJo3FR
cziqBkOeNYOoVAofE8Jn3+u8j6Lc/WSTSL+Eqlfi2g7hN5iAJp3KINJx/pCJxHhh
u+Rc5TSk98B9wqu21JnyONwdyhbgwE9oapZS7ASC34NHKdrvohS8htFa0IdDxIRU
n8WEk3bOO/SYOvxwjdyFeurHNC+KZoCbEbcuXwNVWj2juXA+M2/yIWq5ONyK2xTY
KweKU8lWFv4gEuXeUGogr3rIx9PZYE0EE64NhtFdBuU7vlC9HvD6chmrxM0XYrjM
1Apm0MdID3GUIYDp9LG+7UBZ2Jt9zA6uEWt8uipBpxkKxfp0EPzBUzmwNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBA4rnjFoDL1JSc+EVhcROJy21fMB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7X/U5Wc
eSVFSf4V1lU3LJ4zWGXc+Ux5wwT6pchIxzfBT6tVjyaQyjOxdBBrOiEaq4DWqaDK
CYppeOZSNPsdx2MKiuQ1lDSeDsiApUceBtY3G4ZS3v6e+zk+g9XsVJpsj7AxMuOM
y0E5BHs9WcrzbFo+t3rfP4+qjB/bafwf1PkA3gkYSWkG9u31ky+oy3J26Z5n6RlA
vMOE7H3c6KEjOuah1pX3+l4RtkqhvCgqTDtxKWGUy7Q95QN/tck8/U4IiSeZnXU3
CwaUKb0q3E9Yu3jmF6HDe9g/eYB6Xsdge5MDHVsyfZd5psQsWIRtTe6Io+4XwL6d
iGmHXaxzz24c7w==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:01 2026 by rpki-client