Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: tqwhz8b4wIN9I9U9W0GbkBZExEIi8tzTpwHoR4Q1zJM=
Subject key identifier: 89:6E:EC:D8:24:53:8F:48:36:D0:CD:4C:FA:79:E6:1F:90:E7:09:FC
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 01A0C2C3EF6B15D9990C678AE8FC545154CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 11AB
Signing time: Mon 21 Sep 2026 07:00:15 +0000
Manifest this update: Mon 21 Sep 2026 07:00:15 +0000
Manifest next update: Tue 22 Sep 2026 07:00:15 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: SoVwOv+xAYwdk5RaAcWbHMkVfTx1xca4X/WkVsk5ypk=)
2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:ef:6b:15:d9:99:0c:67:8a:e8:fc:54:51:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Sep 21 07:00:15 2026 GMT
Not After : Sep 22 07:00:15 2026 GMT
Subject: CN=896eecd824538f4836d0cd4cfa79e61f90e709fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:fe:8f:13:ed:84:ea:ff:fd:92:b0:97:db:
ef:bb:5e:5a:74:fd:57:df:f5:06:04:3c:f4:c6:c5:
cd:c4:b5:55:50:5f:21:b5:20:61:87:cd:1a:43:97:
6b:ec:af:fa:a7:81:ec:52:cf:ae:3f:1d:17:a5:f6:
f1:95:8b:f7:3e:f0:02:8f:b7:16:f8:52:a0:32:45:
60:a1:7e:7e:83:10:90:a7:f1:5d:26:fa:44:b1:46:
23:41:8a:ba:9a:57:36:e4:7a:dd:a8:2e:77:73:1d:
94:3c:2f:c8:50:8b:1c:88:fa:09:e1:2c:4c:6f:93:
9d:02:e5:f2:7d:64:3a:11:b1:a1:b6:c4:1f:92:16:
da:b4:71:2c:d9:b9:b0:2b:4b:b0:37:d7:7e:9e:54:
01:d6:94:ea:3d:d8:07:94:b0:2d:8a:27:ec:63:39:
3f:1e:2c:c8:4a:f9:72:91:9f:c6:1b:9a:18:9b:2c:
0d:51:ff:ce:f9:20:ad:b6:9b:af:88:85:ec:a8:37:
3f:74:7f:2c:45:8c:e9:99:31:6a:7a:6a:26:ff:21:
97:e4:1b:fd:06:9f:f2:8a:3e:f8:1d:ca:77:0c:bb:
6f:67:d1:5f:fd:d5:98:ce:66:77:31:0d:a2:e8:24:
35:31:0d:2a:b4:99:de:70:20:5d:44:38:f6:6f:37:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:EC:D8:24:53:8F:48:36:D0:CD:4C:FA:79:E6:1F:90:E7:09:FC
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:68:a2:e4:fa:37:1d:14:df:e0:e1:42:66:68:03:b3:36:
65:12:6e:76:65:8a:2a:06:c6:b5:ce:46:d5:ac:5d:5c:0b:d4:
3e:29:08:f6:50:3f:b7:76:df:2e:ce:25:d0:d2:db:19:74:97:
3a:b8:0b:02:fd:c9:bf:81:6a:19:c0:83:0e:27:9b:cb:a7:29:
e3:49:6a:b9:31:51:7f:32:3a:eb:8d:b9:e0:27:12:23:ee:8e:
cf:98:06:b2:ef:4a:c0:a4:d0:ee:e2:33:6b:c5:db:d6:70:a7:
17:e9:a5:ed:29:b3:77:b6:3b:9d:2d:cf:b1:9a:8d:35:b3:69:
53:1c:24:f2:44:c7:db:76:79:64:c3:fb:6f:d7:b8:88:f3:e5:
fe:f3:9f:ff:d1:5a:d7:c3:a8:99:84:1a:b7:eb:29:38:58:d5:
b2:95:44:78:a6:6a:be:bf:ab:38:f7:5f:c6:6b:65:01:97:11:
7c:32:5a:c2:e0:11:96:e6:d4:bc:69:db:86:a8:ef:3b:5f:bf:
b7:57:b8:44:d5:2f:75:85:e2:07:bf:00:83:6e:f7:6f:5d:d0:
de:fd:43:2f:f3:ca:0a:78:0f:ba:22:b2:d3:c2:c5:e4:21:53:
d2:52:5a:11:89:ed:9b:bf:9f:3a:02:02:c6:26:e1:1b:82:13:
fd:66:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:32:57 2026 by rpki-client