Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: w5cxFPFdcaSOXIfnKiJqeWuKpBs4CSLqZXdZMiU7HvU=
Subject key identifier: 39:BF:0B:4F:5B:EA:64:5C:42:FE:08:1C:0A:A5:89:F8:8E:FD:27:8E
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01A000CA7CE384D0683814EDAC4D8D0F6505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:01:05 +0000
Manifest this update: Fri 14 Aug 2026 15:01:05 +0000
Manifest next update: Sat 15 Aug 2026 15:01:05 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: /UOlqjk3/vZvOZ/ujue2BLzMNBQywHYdWph+Em97JmQ=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:7c:e3:84:d0:68:38:14:ed:ac:4d:8d:0f:65:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Aug 14 15:01:05 2026 GMT
Not After : Aug 15 15:01:05 2026 GMT
Subject: CN=39bf0b4f5bea645c42fe081c0aa589f88efd278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:f8:2f:03:43:49:83:77:0e:5c:4d:8b:b5:
86:d7:0c:99:50:43:0a:d0:7e:69:c4:73:10:bd:f2:
85:4e:63:11:6d:77:aa:6e:3e:42:c1:ad:13:07:7c:
c4:0d:91:60:95:2d:58:85:2c:49:a6:f7:c5:c2:64:
42:17:a5:73:4d:5e:4f:93:b3:dc:8a:8b:71:b5:26:
cc:2d:cd:c2:ff:61:50:ce:a4:05:e1:4c:1e:29:04:
e7:68:15:5e:cd:34:6b:81:51:e2:b1:7d:4f:a1:6d:
45:03:dd:8b:e8:64:3f:52:f7:0a:f8:dc:69:87:bd:
a7:8e:27:fa:ef:d6:ae:70:6f:b2:e5:ad:d5:70:3c:
77:43:bd:4c:d9:0f:74:08:88:67:b5:a6:e4:ea:85:
60:13:ae:32:8e:de:fb:5d:1c:b1:47:8e:78:b7:3f:
2e:42:57:af:69:fb:d1:e1:38:c5:bb:96:89:25:ff:
7d:0d:21:10:47:31:bb:23:fa:92:0c:93:f0:bf:3f:
20:51:d5:60:37:1d:ed:26:9c:15:fa:df:eb:6c:89:
af:e4:c1:cc:80:2b:15:49:0f:d1:48:2e:4b:06:c6:
96:9a:8f:78:42:0c:1d:1d:84:f4:f2:91:24:af:00:
7c:c8:7d:8d:93:82:ef:e8:c7:63:cb:2a:4d:3c:ad:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:0B:4F:5B:EA:64:5C:42:FE:08:1C:0A:A5:89:F8:8E:FD:27:8E
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bc:ac:82:fa:32:8e:85:b9:0a:9c:c6:a8:e7:44:58:00:96:
8c:4e:7c:b1:06:3d:86:2e:f7:d0:9a:fb:26:2a:18:41:78:f0:
89:94:4e:02:ea:84:2f:80:33:90:1a:09:b5:2d:c7:6a:99:74:
50:88:07:b1:29:ab:d0:e6:7d:1f:f9:22:c4:18:ea:8b:1e:1f:
03:79:ee:3f:93:ad:37:56:64:55:f1:64:bc:02:4a:a0:4c:b9:
45:77:18:e4:33:f9:b2:10:ae:3c:8a:69:27:06:c8:93:a7:fe:
2a:e8:b6:13:bf:c4:9e:4f:d2:44:a3:8f:d7:b0:33:d3:cb:92:
9d:5e:26:98:24:9a:1f:28:f3:4e:72:4e:25:c9:28:78:e0:b2:
61:de:bc:78:ed:4d:7c:b4:39:6b:b9:18:32:13:50:fc:ed:c5:
dd:b4:c5:51:48:cd:75:f9:c2:27:a1:ba:d5:63:b6:68:8e:1e:
05:41:33:36:94:1b:7a:96:9d:9f:1c:45:cd:db:cf:a2:b8:4f:
7c:af:af:58:a1:05:e2:21:52:b2:ee:1f:12:26:61:8d:f0:ea:
dd:32:65:9f:1a:2e:82:5b:d2:27:bd:c6:09:8f:2d:4f:f8:4c:
a8:a3:d6:ed:f0:ea:91:bd:ee:e1:44:7a:e9:ab:29:df:27:e9:
5b:47:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:18 2026 by rpki-client