Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: xsoHmjP0mqDnnT4P1UyyZbeO6UpcxQdxV/w9s3YxQck=
Subject key identifier: A8:79:E5:76:90:7B:8F:9D:51:0D:7B:09:7E:82:D9:34:11:38:E2:FA
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019CAA59373BA7EEC87F598E49DCA7C5E01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 170C
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: D4PaOwo3BRDBfZcjVAseAnE8IChju708RhmPJi9iFzo=)
2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=)
3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:37:3b:a7:ee:c8:7f:59:8e:49:dc:a7:c5:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=a879e576907b8f9d510d7b097e82d9341138e2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:b8:27:6c:5a:88:f3:80:63:8f:40:ab:34:
42:be:6f:5b:94:f1:98:a0:c0:44:2e:af:b0:04:7e:
e8:b4:c7:30:ac:9e:e0:68:8a:b6:29:f4:09:4a:fd:
bb:91:9d:cf:58:64:42:c1:55:1d:85:c8:3f:57:23:
2b:d9:7a:5e:62:0e:b5:96:c3:3b:23:1d:11:64:a1:
72:da:3c:38:cf:54:a5:4c:c4:e3:22:0d:1c:9e:64:
ba:a4:da:c4:b5:43:70:ff:50:94:1d:ac:ec:07:5a:
7b:22:a3:49:d7:bd:18:98:6b:93:80:09:34:17:3f:
82:3e:18:12:98:9c:38:a5:fb:f5:5c:20:e1:f6:c2:
a7:32:15:34:46:f0:ae:d4:6e:44:3a:8a:35:73:98:
0e:5c:88:f1:4c:16:cf:6d:64:85:d3:77:a1:71:c7:
48:57:49:4e:66:35:23:38:0c:9f:28:e3:45:61:d5:
9d:c7:88:0b:53:6f:47:48:7c:f5:9d:84:84:52:c0:
92:4a:87:63:b0:96:d9:70:d2:07:00:44:8c:b1:de:
2f:e5:aa:d0:83:9c:eb:68:a1:f6:ac:cf:82:d7:ab:
53:87:77:d9:6c:f0:13:23:d5:98:e0:d2:6c:fe:df:
64:a9:82:08:29:c3:9e:29:55:d4:b3:91:9d:d1:db:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:E5:76:90:7B:8F:9D:51:0D:7B:09:7E:82:D9:34:11:38:E2:FA
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:62:87:e0:9a:d0:8c:ff:6e:cd:24:b8:df:da:bc:d4:8e:88:
38:78:6c:a2:5c:e3:a9:06:5e:db:29:c8:1b:f3:38:15:88:57:
46:b6:91:63:9a:96:5f:d2:90:a3:75:40:23:69:3b:bf:35:b9:
31:b4:73:20:be:57:f0:38:af:76:39:3c:b2:06:22:1c:d0:a8:
94:ba:b2:d7:a7:59:c1:7d:91:7a:76:41:be:35:67:4c:a8:46:
7c:ec:7a:7e:27:f5:d9:c2:f9:d3:89:e5:12:77:19:3b:43:3e:
ae:08:99:49:00:67:71:f2:95:aa:3e:ba:48:b1:1c:48:0c:1d:
11:9e:2f:39:01:76:44:66:21:a5:05:4f:9e:99:78:8d:47:dc:
10:e9:65:b4:18:c4:fc:2c:d4:9f:a7:7c:6a:fe:37:51:7d:64:
1b:a7:fa:fe:0c:ec:c5:45:79:39:15:e7:a5:b0:27:fb:f4:47:
9a:d7:9b:39:21:3b:f8:8c:e8:55:60:71:bf:a8:50:38:24:8c:
8a:fa:ca:60:0a:41:e2:5f:44:6f:d6:59:14:86:fb:84:9a:76:
5f:80:51:c8:03:fc:2f:f7:83:f6:82:20:90:93:0f:5b:b7:7d:
0b:93:ae:ea:c9:4b:e2:da:7d:14:14:f1:b4:d0:78:c9:36:63:
d1:e6:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:44 2026 by rpki-client