Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: mU176e86o1BPX4oY/yvCKon9VNE0SkDeIAaw6Wmm+k4=
Subject key identifier: FB:E8:58:22:F0:04:D1:0F:4E:81:1B:F6:C6:6D:1D:F2:D6:EE:11:05
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019D99998A2A2ED821005D50D0B8316DAF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 1008
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: XZHdEZKokdXx3zWMGgMQzi5TeQJhLcvOq4XDu7y0ph0=)
2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8a:2a:2e:d8:21:00:5d:50:d0:b8:31:6d:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=fbe85822f004d10f4e811bf6c66d1df2d6ee1105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:7f:d0:c0:e1:20:79:cf:22:44:dd:e7:3e:
5f:7e:a1:68:e0:64:6c:61:f9:95:7d:fd:f0:85:ee:
bb:0b:d4:64:49:db:bc:79:1c:7b:c9:43:d0:73:c3:
53:7f:71:34:84:40:61:a3:37:3e:8a:5a:ef:68:ac:
55:fc:64:13:85:6b:ec:3b:92:ab:d3:06:14:3d:7c:
c0:25:cf:3f:1f:23:31:d1:5e:ac:46:b2:28:fe:d3:
b3:b9:df:28:cb:f3:b3:de:4e:1e:fb:d9:c4:ed:31:
df:19:b1:86:8b:48:e4:5d:34:f1:dc:69:50:27:7f:
ec:d1:81:e0:f3:ea:2f:56:1a:76:63:d2:b0:d5:8d:
a3:54:7d:3b:a1:8f:79:43:b9:bb:ea:97:4c:2e:63:
e7:03:98:52:06:58:79:a4:ce:a1:cc:7e:31:3a:8f:
83:fe:75:0a:65:d0:ef:86:f3:e4:19:ab:80:6d:66:
7f:07:02:0c:9b:74:4f:8d:6c:f9:8b:47:9a:38:f7:
38:73:20:67:96:dd:f5:88:b3:20:73:90:83:38:d5:
8d:91:05:c6:2f:40:cd:97:bb:2b:5c:38:e6:a1:7c:
af:b6:cd:0e:66:17:6b:68:7e:57:df:4b:eb:8f:f2:
b8:96:a5:86:06:c0:b5:6f:b1:6c:15:2e:4f:bc:35:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:58:22:F0:04:D1:0F:4E:81:1B:F6:C6:6D:1D:F2:D6:EE:11:05
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a9:bd:eb:0d:a6:2f:d5:1c:f1:58:19:ca:9d:a4:dd:6e:cc:
72:19:2a:81:79:5d:f3:c4:b5:ce:a5:f7:3e:91:6e:c0:4b:fb:
49:04:c9:4d:70:00:7c:78:bc:d4:38:28:ce:a5:50:5c:91:4a:
51:54:52:5f:56:c2:a6:d7:77:1b:f3:46:dd:0a:88:e3:ea:9a:
4e:1e:f3:38:59:4f:23:22:54:dd:a2:bf:7e:76:4c:ab:a2:57:
79:46:9a:23:41:da:fc:17:d4:23:7c:db:b5:d5:77:d0:40:48:
7d:30:a8:b1:94:8b:e9:7a:91:4e:a7:09:d2:6b:32:ce:68:e5:
7b:aa:75:e0:4b:f2:e8:02:fe:4f:58:d7:0d:86:b3:99:22:44:
eb:97:5e:58:9f:0a:f0:8d:a1:b5:52:c9:33:01:06:5f:0d:8b:
a4:9f:31:c7:0d:86:fb:2a:38:80:b1:59:0c:8b:92:a9:55:1b:
71:9c:c2:12:6d:56:5e:2d:0e:d0:84:3c:9a:81:3a:35:cd:b1:
cd:46:a9:36:cf:73:cc:4e:58:a3:0f:02:33:e3:be:ef:79:66:
a7:ac:5f:06:f4:d9:cb:63:d6:36:9a:79:e5:df:0d:0e:52:2b:
0c:c3:32:c1:b7:d8:eb:98:d3:fd:78:58:29:90:98:eb:13:f8:
6e:1e:e8:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYoqLtghAF1Q0Lgxba8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0
MmIxNGMwHhcNMjYwNDE3MDQwMTA5WhcNMjYwNDE4MDQwMTA5WjAzMTEwLwYDVQQD
EyhmYmU4NTgyMmYwMDRkMTBmNGU4MTFiZjZjNjZkMWRmMmQ2ZWUxMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua5/0MDhIHnPIkTd5z5ffqFo4GRs
YfmVff3whe67C9RkSdu8eRx7yUPQc8NTf3E0hEBhozc+ilrvaKxV/GQThWvsO5Kr
0wYUPXzAJc8/HyMx0V6sRrIo/tOzud8oy/Oz3k4e+9nE7THfGbGGi0jkXTTx3GlQ
J3/s0YHg8+ovVhp2Y9Kw1Y2jVH07oY95Q7m76pdMLmPnA5hSBlh5pM6hzH4xOo+D
/nUKZdDvhvPkGauAbWZ/BwIMm3RPjWz5i0eaOPc4cyBnlt31iLMgc5CDONWNkQXG
L0DNl7srXDjmoXyvts0OZhdraH5X30vrj/K4lqWGBsC1b7FsFS5PvDWTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvoWCLwBNEPToEb9sZtHfLW7hEFMB8GA1UdIwQY
MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et
M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2
LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqm96w2m
L9Uc8VgZyp2k3W7MchkqgXld88S1zqX3PpFuwEv7SQTJTXAAfHi81DgozqVQXJFK
UVRSX1bCptd3G/NG3QqI4+qaTh7zOFlPIyJU3aK/fnZMq6JXeUaaI0Ha/BfUI3zb
tdV30EBIfTCosZSL6XqRTqcJ0msyzmjle6p14Evy6AL+T1jXDYazmSJE65deWJ8K
8I2htVLJMwEGXw2LpJ8xxw2G+yo4gLFZDIuSqVUbcZzCEm1WXi0O0IQ8moE6Nc2x
zUapNs9zzE5Yow8CM+O+73lmp6xfBvTZy2PWNpp55d8NDlIrDMMywbfY65jT/XhY
KZCY6xP4bh7oPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:46 2026 by rpki-client