Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: lqtXRjSVHx8i3/7sj0Vuo6+IeNtU/KhnMI9YS+9zX9E=
Subject key identifier: 71:92:B3:D6:A2:F5:7F:E6:0B:9E:57:2D:C0:52:8F:1E:B6:42:03:5C
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019F18309223CFEC030B0D9826469A5D1946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 16A9
Signing time: Tue 30 Jun 2026 11:01:03 +0000
Manifest this update: Tue 30 Jun 2026 11:01:03 +0000
Manifest next update: Wed 01 Jul 2026 11:01:03 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: LP1T9im7u6Q0ewEHldDpJUYwM8lCnph2pLIl4TwDoRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:92:23:cf:ec:03:0b:0d:98:26:46:9a:5d:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jun 30 11:01:03 2026 GMT
Not After : Jul 1 11:01:03 2026 GMT
Subject: CN=7192b3d6a2f57fe60b9e572dc0528f1eb642035c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:a0:03:20:d8:23:6c:68:de:fd:b9:be:43:
07:cc:37:81:bc:1b:be:ba:d6:7b:7d:63:d6:d2:1d:
4c:86:2c:06:b7:5a:b6:8d:73:ed:72:1f:17:9e:ab:
72:95:dc:4e:f3:c8:96:7d:fa:94:86:0c:71:ac:ae:
69:70:f1:49:c9:b1:77:71:c0:b5:bf:9c:7c:30:7c:
0f:24:e2:f0:f3:20:38:5f:b6:eb:12:b7:90:59:f2:
f8:3a:c7:08:39:f3:33:17:50:bb:a0:32:e7:50:93:
d9:0d:83:13:8e:b7:70:2b:d8:34:f8:ab:26:a8:18:
65:b7:eb:80:90:61:0d:a2:0a:14:96:f6:c3:14:62:
1f:94:d3:66:77:3b:35:41:ba:ff:f1:73:86:38:41:
c2:71:48:82:04:9f:d7:a9:2f:8d:0d:32:db:74:a8:
5c:b3:fe:93:77:bf:e2:be:c9:b4:e8:28:99:71:53:
e5:49:48:70:a7:38:a5:5d:0b:11:ae:ab:c4:51:64:
41:1a:6c:8f:3d:45:08:9d:31:68:45:5d:ab:4d:3a:
cf:ed:68:01:02:9c:2e:6b:e0:d9:b3:b4:6c:3d:7d:
1f:07:f8:43:e0:26:a3:db:79:41:93:07:19:fc:62:
aa:67:08:67:05:d1:f7:4f:76:36:43:9b:26:a3:35:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:B3:D6:A2:F5:7F:E6:0B:9E:57:2D:C0:52:8F:1E:B6:42:03:5C
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a9:46:0b:d3:dc:6c:47:2b:b9:cf:67:2b:fb:66:2f:18:c5:
04:60:47:7b:75:3a:31:26:05:cd:01:e5:de:ee:9f:cf:a6:3b:
7a:73:6b:7d:60:11:ad:1a:3e:8b:f6:4f:f1:9a:dc:28:a5:bc:
3d:89:1a:30:51:6b:ec:27:b7:40:da:a9:6b:d3:95:c9:b6:b2:
19:1a:b3:dc:33:41:47:67:61:a0:ab:bc:21:e2:d1:9f:26:4f:
77:ea:e8:8b:4d:f1:40:eb:9f:a2:9f:89:d4:fe:e0:bf:dc:ab:
88:c9:5f:58:d5:5c:e6:7b:ee:00:6b:e6:f2:f0:25:e2:05:52:
89:84:c8:e1:eb:9a:8f:6d:06:c1:1a:4d:d2:d6:0d:16:b3:bb:
ad:23:bd:1b:58:b7:61:1b:37:d9:a6:49:ee:8c:39:6f:c0:65:
44:38:d8:d7:3e:b9:30:6a:0f:97:69:78:00:62:d6:90:ef:a5:
49:11:0f:17:d1:bb:33:ac:99:7c:f2:7c:1d:63:85:46:ed:ff:
5c:05:c3:c0:f7:60:75:71:d0:22:7d:2e:fa:0f:db:14:05:84:
48:4d:8c:21:ce:9e:e8:6c:5f:a6:ad:b6:b8:33:d7:05:dc:d5:
55:cf:3f:ad:ed:cb:11:2a:a1:a3:2d:5b:8f:2b:71:2f:f1:a0:
6f:1f:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:33 2026 by rpki-client