Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: /LxIp5zrchBk4Ok7Jq1TscLWvlQ/l0ViyBWqbvHFYE4=
Subject key identifier: 9A:4C:55:68:38:94:C2:B6:0A:3A:46:66:B1:88:3D:6F:21:D0:81:A6
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 019DA3E64C671D3BADF22738748998D7AECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 133F
Signing time: Sun 19 Apr 2026 04:01:12 +0000
Manifest this update: Sun 19 Apr 2026 04:01:12 +0000
Manifest next update: Mon 20 Apr 2026 04:01:12 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: HqaMApjuHkBOcWH+yNScU0pjmyAxXTBedTWoX6DAfz8=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4c:67:1d:3b:ad:f2:27:38:74:89:98:d7:ae:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Apr 19 04:01:12 2026 GMT
Not After : Apr 20 04:01:12 2026 GMT
Subject: CN=9a4c55683894c2b60a3a4666b1883d6f21d081a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:b1:2c:61:1d:1e:c5:f6:c8:37:cd:39:2b:
15:77:40:d4:70:60:ea:24:ac:4b:65:a1:12:53:d2:
d0:7c:db:6b:75:e9:d1:6c:f8:7c:f9:69:09:cb:d9:
2c:54:79:79:3e:2a:5a:bb:a7:b9:bd:95:2f:13:04:
7a:b3:3b:3c:99:70:ee:fb:10:b2:ab:8d:e4:6c:0e:
14:e5:9c:80:61:96:c8:52:ff:82:38:58:2b:cd:ad:
3f:bc:05:7e:e8:f7:75:9f:78:18:ce:30:4c:52:6a:
80:29:51:76:b8:37:2d:2a:d1:9f:a6:92:92:8f:ad:
c1:35:8a:f6:78:c5:14:dc:1e:70:8f:e9:0d:f8:43:
07:06:da:88:e7:06:df:f3:67:12:0d:31:d5:ea:db:
73:5d:21:5f:c7:02:9e:5e:ae:8f:97:3b:74:8c:0e:
33:2c:25:96:49:ec:2c:4e:47:bc:eb:ea:4a:d1:79:
08:c9:75:33:1b:a9:76:c8:49:c2:a2:5e:77:6e:34:
7d:c4:72:1e:33:1b:8c:d2:db:35:c3:cc:f2:12:6a:
2c:90:39:84:89:a2:0f:d0:1a:af:66:f7:c4:e0:97:
d1:f6:24:e8:a0:5d:6f:50:67:4f:4f:26:8a:6d:29:
ab:65:2a:42:84:f0:b3:89:fe:38:26:3c:ad:48:f5:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:55:68:38:94:C2:B6:0A:3A:46:66:B1:88:3D:6F:21:D0:81:A6
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:b9:3b:bc:21:02:05:e1:f8:e7:61:30:7f:33:1c:80:28:
25:9a:69:bf:0f:e3:31:91:61:1f:ca:0d:dd:dd:2f:60:12:59:
37:ff:6b:ba:33:c0:f6:c5:2a:b6:41:4f:c0:c9:df:8e:5f:fc:
e0:0c:e3:d8:5d:94:d9:d0:2a:6d:bf:f8:aa:25:3b:34:f7:15:
32:58:bf:46:67:51:7f:5b:e9:8d:95:6d:bb:be:ee:00:22:5f:
2d:5a:dc:b8:dd:27:c6:6a:0a:41:e2:1d:4e:19:f2:3c:d8:14:
97:9e:72:a0:3e:4c:ac:1d:7e:b3:12:43:e7:12:6b:08:c7:62:
b8:f6:9a:cf:ec:7c:73:df:6b:63:b4:3e:1b:ce:f8:94:ff:0a:
96:48:00:c4:98:65:5b:96:cf:a8:1e:3c:84:9c:1e:4e:1e:08:
2f:05:ff:88:d5:89:2b:89:35:1c:2e:a3:1a:bc:52:ae:ee:97:
92:af:be:95:80:a6:8e:8d:95:59:cf:af:c8:96:ef:ed:74:19:
f7:55:41:df:6b:d8:d3:c8:2f:04:f1:f6:d4:35:63:0a:ad:76:
b5:cf:cb:b0:05:89:91:fd:ce:ac:4d:e1:8f:07:93:36:e4:76:
73:9d:cd:3c:e7:c6:40:82:f4:a9:33:89:de:c9:03:7b:cc:81:
77:29:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:19 2026 by rpki-client