Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: HrblCUKTWBycvmVnYbclR5goi6F4IVUtVq+Ie5N72/A=
Subject key identifier: 9E:7B:DE:AC:84:B2:AD:C4:BA:A0:89:94:BD:3C:35:C1:3B:44:12:56
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 019CACB551BE7E00879EF8E64C693BF4671E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 12BF
Signing time: Mon 02 Mar 2026 04:01:29 +0000
Manifest this update: Mon 02 Mar 2026 04:01:29 +0000
Manifest next update: Tue 03 Mar 2026 04:01:29 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: g476/9eKW+gKvvum6/CXtUMYBjGx25LVxxj9FjtC59w=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:51:be:7e:00:87:9e:f8:e6:4c:69:3b:f4:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Mar 2 04:01:29 2026 GMT
Not After : Mar 3 04:01:29 2026 GMT
Subject: CN=9e7bdeac84b2adc4baa08994bd3c35c13b441256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:9f:6d:84:4c:90:ac:0b:b6:ed:8e:9b:fb:
31:5f:58:0b:00:ca:ff:59:cf:1f:4e:09:e5:ba:b7:
39:59:5e:24:c3:65:74:ec:c8:12:d0:86:4c:cf:fb:
0b:63:94:b4:68:5e:3a:30:0d:3a:9e:49:b0:07:6a:
9d:66:1a:52:59:47:df:db:3c:44:a1:66:72:26:be:
72:81:21:a3:d4:97:6f:dc:73:53:33:cd:d0:19:35:
df:37:67:67:fb:6d:c8:ae:5e:72:37:3a:f0:f3:d8:
58:48:ec:9f:af:e6:5b:63:7a:49:53:50:cf:3e:57:
3a:6a:46:05:4f:c9:2a:21:2a:05:d1:10:64:fb:f8:
89:09:21:95:ab:b6:a3:57:e9:da:21:79:58:6e:f6:
40:ca:ad:4d:2e:c9:8e:23:fd:e1:b0:19:ed:4a:06:
60:33:b9:38:0e:43:86:b8:cc:d5:76:65:e3:fa:b9:
f9:c2:fe:ed:a1:67:90:7c:6f:4b:c6:d3:e2:4b:f8:
ba:99:d3:d7:ab:9c:4b:1f:22:1f:5b:6d:14:0f:3a:
a1:d2:31:29:23:c9:5f:c2:62:06:90:e1:24:ea:40:
a9:51:f8:77:ff:5e:e3:fc:4c:e7:96:8c:c9:1b:7b:
e2:f3:e8:82:27:4c:8a:94:b6:03:9f:ec:04:d9:be:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:DE:AC:84:B2:AD:C4:BA:A0:89:94:BD:3C:35:C1:3B:44:12:56
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:eb:dd:e2:85:26:6b:d0:f7:43:dd:e9:49:de:4e:90:63:be:
51:59:d9:9d:e3:18:48:d9:7c:1e:da:81:f8:92:4a:6f:a8:87:
75:20:fa:e9:7b:89:03:3d:19:25:04:b2:c4:16:9c:7c:48:12:
d3:14:c1:84:2b:ef:a2:02:52:64:fc:12:77:2d:9d:cb:20:d7:
97:49:39:e5:a9:5d:58:bb:1e:f9:be:92:d3:c1:45:93:6a:49:
69:05:d3:86:26:4d:8f:a7:1a:37:4e:38:3f:22:0f:32:74:8c:
01:d0:65:14:9d:8e:cc:2d:28:4d:ed:0b:6d:40:4a:6c:07:f0:
99:54:82:42:09:81:74:bf:b8:dc:46:5a:5b:46:67:b1:7e:4b:
e6:25:76:a7:3f:bc:8b:78:59:19:bd:9f:af:af:01:b1:96:54:
d8:f3:14:5b:48:fd:a5:e8:f9:7f:d4:c8:90:34:e9:29:fa:3b:
e9:58:8f:a7:3a:e7:18:be:48:50:5b:91:c6:06:37:d4:84:cb:
1a:f5:10:67:a3:f5:10:c2:9d:0e:d8:b8:2d:e7:68:dc:da:08:
c8:5f:64:03:af:3f:0b:a1:55:88:d1:a2:e7:6f:c6:05:30:32:
41:f8:ae:fc:d2:40:f2:81:d0:2a:d6:80:fc:78:a5:7b:b5:0a:
a4:fe:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:11 2026 by rpki-client