Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: d1qh84Yuc9aS56CH/k/eZIvr02ksRWYr/8vhzml0h38=
Subject key identifier: 3B:BF:04:BC:A8:F5:49:0D:1C:7A:B7:6E:30:9C:91:7D:7C:73:06:8F
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019CABD92AFEF223C86353930CF302C42807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0AB0
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: Fqfi6FWDDwSRgItQqRo33E7KGepUsik0N6cEI2xTfGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:fe:f2:23:c8:63:53:93:0c:f3:02:c4:28:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=3bbf04bca8f5490d1c7ab76e309c917d7c73068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:c2:3b:af:ad:72:a9:bc:6b:a4:93:9f:c5:
c3:fa:0e:4d:7f:d0:5a:90:d9:2b:59:14:fa:0d:4d:
07:6b:94:95:27:18:98:ad:99:fe:c1:95:8d:2d:2a:
71:a3:6b:a5:93:94:09:a0:19:55:f5:18:72:7b:3a:
d4:04:d3:26:fe:fe:bc:1b:05:82:b7:12:55:07:a4:
06:bb:69:79:2d:d7:4c:74:08:1c:61:1b:8b:42:2b:
54:1e:4d:dd:97:e7:6b:b1:9f:3a:8e:f3:df:a4:84:
39:30:4a:6b:54:2b:3e:51:c0:44:b9:29:ac:45:9c:
54:2a:52:fb:17:2f:dc:a1:0b:fe:3b:ce:df:7f:f7:
a0:4d:1a:eb:4c:86:fa:ab:aa:19:d1:ae:ed:a3:91:
ff:02:72:70:77:4f:71:a8:b7:b4:ec:f9:52:e9:4f:
81:2a:2b:51:8f:0c:bd:ee:01:5e:34:50:ed:87:56:
63:ae:5b:85:c6:21:91:07:78:07:ff:b2:51:cb:c0:
c7:8d:68:f3:cf:7e:38:71:71:48:f3:e2:c3:c3:8f:
7b:8a:0f:e4:ac:05:41:f9:c3:4f:0e:4f:24:b8:dc:
f8:0c:91:98:87:36:39:5d:64:ec:b4:55:36:c4:2e:
8d:51:01:d9:69:df:26:48:ec:08:10:88:87:c8:2d:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:04:BC:A8:F5:49:0D:1C:7A:B7:6E:30:9C:91:7D:7C:73:06:8F
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:a5:a1:9d:fc:1c:85:8a:bb:99:3c:8b:fc:65:4f:d2:93:
f6:52:37:13:d2:ae:8a:f0:b7:6c:ac:84:8d:03:11:b5:0b:5e:
b0:77:14:83:45:d5:5b:8c:5f:88:f2:dc:8f:4a:bc:fe:69:8f:
c8:ba:35:69:bc:3e:40:f4:03:44:8a:e0:54:a9:e2:55:55:0a:
e7:a5:21:33:e0:53:11:a8:00:cb:39:fd:ff:ea:3e:7b:66:91:
5d:f9:fa:91:1f:82:d0:cf:d7:f7:84:ad:5a:8d:48:f0:a3:e2:
ee:eb:f6:60:db:70:fe:8d:e1:40:06:f4:35:0d:73:ae:40:77:
cf:d6:10:8f:d8:12:8e:be:3e:40:66:38:a7:89:e9:ee:79:cb:
dd:b6:fe:3e:d0:75:26:55:61:7e:78:5f:92:b2:27:9a:7f:3f:
91:76:f3:65:ae:8c:f7:37:00:98:c3:2d:2a:77:21:69:01:4a:
8d:bb:ce:0e:f3:4e:ce:cc:d5:85:c8:2b:c5:f7:49:66:e4:f1:
6a:7b:7d:8c:54:9f:de:f0:93:a7:15:e7:75:1a:c0:9f:32:8a:
ba:17:b3:3a:0d:cb:7d:1e:3c:1e:3a:37:b4:4d:7c:99:06:bc:
63:52:25:d2:41:38:7a:25:e1:df:e7:15:69:73:37:5d:79:41:
8e:07:f0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Sr+8iPIY1OTDPMCxCgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNhZDdhOWYwYTA5YjNkNTRkYTZjZGNkZTc0MzEyZmFj
YzZkNzcwHhcNMjYwMzAyMDAwMTAyWhcNMjYwMzAzMDAwMTAyWjAzMTEwLwYDVQQD
EygzYmJmMDRiY2E4ZjU0OTBkMWM3YWI3NmUzMDljOTE3ZDdjNzMwNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN3CO6+tcqm8a6STn8XD+g5Nf9Ba
kNkrWRT6DU0Ha5SVJxiYrZn+wZWNLSpxo2ulk5QJoBlV9RhyezrUBNMm/v68GwWC
txJVB6QGu2l5LddMdAgcYRuLQitUHk3dl+drsZ86jvPfpIQ5MEprVCs+UcBEuSms
RZxUKlL7Fy/coQv+O87ff/egTRrrTIb6q6oZ0a7to5H/AnJwd09xqLe07PlS6U+B
KitRjwy97gFeNFDth1ZjrluFxiGRB3gH/7JRy8DHjWjzz344cXFI8+LDw497ig/k
rAVB+cNPDk8kuNz4DJGYhzY5XWTstFU2xC6NUQHZad8mSOwIEIiHyC06uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu/BLyo9UkNHHq3bjCckX18cwaPMB8GA1UdIwQY
MBaAFNgcrXqfCgmz1U2mzc3nQxL6zG13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAt
ZDNlYTcwN2M4ZjE4LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAtZDNlYTcwN2M4ZjE4
LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg2loZ38
HIWKu5k8i/xlT9KT9lI3E9KuivC3bKyEjQMRtQtesHcUg0XVW4xfiPLcj0q8/mmP
yLo1abw+QPQDRIrgVKniVVUK56UhM+BTEagAyzn9/+o+e2aRXfn6kR+C0M/X94St
Wo1I8KPi7uv2YNtw/o3hQAb0NQ1zrkB3z9YQj9gSjr4+QGY4p4np7nnL3bb+PtB1
JlVhfnhfkrInmn8/kXbzZa6M9zcAmMMtKnchaQFKjbvODvNOzszVhcgrxfdJZuTx
ant9jFSf3vCTpxXndRrAnzKKuhezOg3LfR48Hjo3tE18mQa8Y1Il0kE4eiXh3+cV
aXM3XXlBjgfw+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:49 2026 by rpki-client