
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: 3ZVx8IN68l3Cf4yESjYTYgPnpYob1tHfMA4h5Yjjp2A=
Subject key identifier: 56:D8:06:D2:D1:3F:00:24:D8:A1:42:AF:50:62:67:E1:76:B2:F0:EE
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 01A0C557D0F51C061F52EC1ABA5B9E1F4F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 14DE
Signing time: Mon 21 Sep 2026 19:01:01 +0000
Manifest this update: Mon 21 Sep 2026 19:01:01 +0000
Manifest next update: Tue 22 Sep 2026 19:01:01 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: Lb4GXFwOfuzZ3orAQsedGrvx5I4TPw/RoLzyg5ZkgJs=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:d0:f5:1c:06:1f:52:ec:1a:ba:5b:9e:1f:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Sep 21 19:01:01 2026 GMT
Not After : Sep 22 19:01:01 2026 GMT
Subject: CN=56d806d2d13f0024d8a142af506267e176b2f0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:15:44:50:75:e4:e3:82:c6:9e:ce:25:26:
5e:e0:50:9d:c2:bb:49:d1:71:70:9b:5b:f7:57:95:
ee:cc:ac:73:cd:cb:59:4f:13:a3:be:11:5b:22:df:
27:5d:31:45:a1:b5:39:18:b8:00:aa:ea:62:57:2f:
93:89:d5:e6:f2:1c:86:fd:5f:2e:83:1f:93:74:4c:
cb:7f:63:9b:45:10:6e:14:4d:1a:5a:28:d5:48:60:
21:39:83:c8:ab:0d:3a:a8:75:dc:54:13:8b:0b:25:
c5:a8:f5:b2:49:f2:6f:ff:4d:13:86:0f:99:81:1b:
32:ab:a1:8d:9c:8d:b0:7a:1c:26:2c:71:1f:e2:aa:
fc:a5:27:d8:e9:44:9b:58:9a:3f:ef:85:d1:10:03:
f1:5f:26:ee:ca:db:c0:3b:49:0e:df:e3:8a:79:ae:
ae:0f:b4:a4:a4:ce:0a:37:05:73:86:5d:a6:15:95:
eb:32:c4:56:76:40:73:48:3c:d5:01:2f:5a:67:b7:
97:2a:db:92:68:9f:53:ff:9a:e7:01:7f:a4:c5:a6:
a9:e1:4b:fa:04:5c:64:5f:96:49:1a:d3:c0:e8:88:
4c:89:20:1c:99:11:99:78:63:c4:fc:3a:5d:54:ee:
7a:61:e4:da:29:e6:f3:67:97:cc:cb:a0:b0:a2:34:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:06:D2:D1:3F:00:24:D8:A1:42:AF:50:62:67:E1:76:B2:F0:EE
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:72:71:0d:9a:8f:f3:a0:d7:a8:cb:05:d3:e7:c8:23:f7:
1a:60:08:a1:2e:a4:cd:48:bb:bb:8a:70:e6:48:87:3f:13:af:
32:02:d9:a4:bf:ec:de:50:f3:c2:46:61:6c:ba:2e:86:02:9e:
98:26:82:65:8b:9e:87:66:08:b9:0f:01:ea:a5:7b:e8:21:ed:
ce:a5:35:7a:f0:7c:05:1e:d0:95:b0:93:93:f2:88:67:70:f4:
0e:89:c4:dc:03:0f:92:43:54:3c:b5:42:ca:27:2c:e4:7c:14:
bc:86:85:91:44:6d:dd:69:e0:dd:0f:cd:e5:7a:59:ed:74:a2:
0c:39:fe:f7:3a:04:79:32:45:e2:94:7b:4f:78:94:f0:21:0f:
a4:8b:a2:7f:c4:e3:e2:e4:dc:9d:2a:26:28:80:c1:e5:ae:9f:
72:7f:f2:73:ab:0c:9f:92:c6:84:50:ba:83:c6:49:a6:a2:14:
9f:38:2e:b1:5b:9f:e1:84:a0:c4:85:e4:f1:39:32:bc:3c:9c:
38:b5:6f:e2:5a:d2:b1:cb:98:2a:ec:66:ce:df:30:15:9c:00:
78:f5:f1:0f:92:ba:f1:05:cc:11:88:41:dd:42:8f:2c:fa:b0:
51:1c:ee:88:59:c4:36:60:f7:ac:75:34:c9:42:7c:52:f3:1e:
ac:66:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:51:11 2026 by rpki-client