Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: RwLSX+CTk6VnAhaR00fYwUkUTykJ7x/MCI/erfEhSfM=
Subject key identifier: F7:77:3D:8D:F5:C8:04:35:84:9A:90:B7:49:D5:7B:FB:A2:BA:25:BD
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 019CA97D3E2557B4B92E32FCC6DBD4E8272D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 03EB
Signing time: Sun 01 Mar 2026 13:01:23 +0000
Manifest this update: Sun 01 Mar 2026 13:01:23 +0000
Manifest next update: Mon 02 Mar 2026 13:01:23 +0000
Files and hashes: 1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: j8P504g7UbW5dVHiJbovM2cdVrAw/Q4RLb+jaHX9M4Q=)
2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:3e:25:57:b4:b9:2e:32:fc:c6:db:d4:e8:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Mar 1 13:01:23 2026 GMT
Not After : Mar 2 13:01:23 2026 GMT
Subject: CN=f7773d8df5c80435849a90b749d57bfba2ba25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:17:10:14:89:52:46:b1:19:e9:38:73:1d:
37:6a:51:43:3e:c8:bd:91:98:23:82:05:cb:b9:70:
7e:1b:0e:ca:de:92:fc:ce:3d:52:1b:a4:f1:70:26:
3f:bf:99:32:63:5d:b5:6b:a8:58:72:29:3d:9f:bb:
19:2d:cb:24:6b:0a:21:5f:c8:c8:05:79:dc:7f:a9:
87:11:bb:e7:ea:9f:8a:fb:54:5f:7b:f4:5c:17:af:
99:b5:59:d8:08:7e:32:7a:81:22:ef:89:3b:68:10:
a8:7a:36:fb:36:ae:5f:f8:be:59:82:e8:d0:31:36:
56:3e:d4:c4:bd:e4:f8:ad:cc:b6:16:0d:23:11:50:
79:86:26:f4:5e:8c:98:06:8c:6f:cb:db:5e:42:5a:
a1:81:81:6e:7c:04:63:37:ac:97:71:c0:d3:49:43:
e8:db:dc:71:38:c9:14:54:05:6d:47:c7:9b:45:cf:
98:e9:54:96:44:5b:50:c0:ed:bd:40:53:e8:48:18:
a6:df:70:fc:f9:15:b3:31:3c:b8:78:b4:c4:e5:af:
40:c2:fc:e3:75:9b:5d:e2:30:09:0d:d3:e0:bd:ce:
46:1a:c6:91:34:9e:ee:1a:2f:d0:88:ef:4a:bd:f2:
89:20:29:54:0d:ad:1e:f7:b8:81:12:af:bf:8a:d6:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:3D:8D:F5:C8:04:35:84:9A:90:B7:49:D5:7B:FB:A2:BA:25:BD
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:d2:2f:71:f8:90:5b:d3:f4:55:96:3f:89:d0:b0:64:73:
b8:ba:31:43:b4:9a:a7:b4:97:38:6c:ec:26:81:46:20:9b:64:
19:9d:9d:65:b6:67:67:e9:5b:66:30:51:3d:7a:cd:07:b1:05:
2a:fb:10:f0:10:63:56:f1:a8:72:90:c4:eb:bb:3d:bd:6a:c8:
2a:f3:ed:23:3a:cf:21:dc:e6:f9:dd:9b:ba:8c:18:0e:4e:d4:
1a:7c:8c:a7:66:50:e0:5e:3a:da:f7:49:50:02:56:1b:d7:93:
9b:66:76:2a:75:e1:a9:f0:1f:38:90:ee:62:a5:60:d2:4b:0e:
53:26:a8:de:d1:96:89:0c:9c:4a:06:8e:ba:9d:d9:52:09:5a:
1b:ec:1c:97:81:d5:8d:6a:88:9e:0e:2f:f4:6f:2c:53:ff:ea:
5d:e6:d1:c3:a2:3a:4a:d3:7a:b0:cb:b5:49:de:03:b1:69:e1:
09:25:a1:29:0e:09:e3:2c:d6:b7:dd:ae:c1:16:ce:e6:c4:44:
c8:ca:8b:e7:9f:46:97:d3:cc:96:6e:99:b1:08:72:20:63:aa:
c1:f1:e6:aa:a6:78:21:63:6e:dd:4f:a9:25:7d:05:e4:7b:9b:
5f:78:cc:61:d1:e1:90:99:97:eb:eb:d1:b4:35:07:07:f4:d8:
ab:de:a8:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfT4lV7S5LjL8xtvU6CctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz
MDM5YTQwHhcNMjYwMzAxMTMwMTIzWhcNMjYwMzAyMTMwMTIzWjAzMTEwLwYDVQQD
EyhmNzc3M2Q4ZGY1YzgwNDM1ODQ5YTkwYjc0OWQ1N2JmYmEyYmEyNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH0XEBSJUkaxGek4cx03alFDPsi9
kZgjggXLuXB+Gw7K3pL8zj1SG6TxcCY/v5kyY121a6hYcik9n7sZLcskawohX8jI
BXncf6mHEbvn6p+K+1Rfe/RcF6+ZtVnYCH4yeoEi74k7aBCoejb7Nq5f+L5ZgujQ
MTZWPtTEveT4rcy2Fg0jEVB5hib0XoyYBoxvy9teQlqhgYFufARjN6yXccDTSUPo
29xxOMkUVAVtR8ebRc+Y6VSWRFtQwO29QFPoSBim33D8+RWzMTy4eLTE5a9Awvzj
dZtd4jAJDdPgvc5GGsaRNJ7uGi/QiO9KvfKJIClUDa0e97iBEq+/itZugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd3PY31yAQ1hJqQt0nVe/uiuiW9MB8GA1UdIwQY
MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt
ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3
LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqjSL3H4
kFvT9FWWP4nQsGRzuLoxQ7Sap7SXOGzsJoFGIJtkGZ2dZbZnZ+lbZjBRPXrNB7EF
KvsQ8BBjVvGocpDE67s9vWrIKvPtIzrPIdzm+d2buowYDk7UGnyMp2ZQ4F462vdJ
UAJWG9eTm2Z2KnXhqfAfOJDuYqVg0ksOUyao3tGWiQycSgaOup3ZUglaG+wcl4HV
jWqIng4v9G8sU//qXebRw6I6StN6sMu1Sd4DsWnhCSWhKQ4J4yzWt92uwRbO5sRE
yMqL559Gl9PMlm6ZsQhyIGOqwfHmqqZ4IWNu3U+pJX0F5HubX3jMYdHhkJmX6+vR
tDUHB/TYq96oZA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:10 2026 by rpki-client