Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: OTMvefJ4lDD0x3qXQd2L7OTowk/G1/29mWdezPz3MKA=
Subject key identifier: 71:1C:0F:E9:9A:C2:87:37:E4:09:EC:3A:0F:FC:A7:93:E2:FB:9D:38
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019EBEECA393A83B7BD17C7BE443D27D8F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0BC3
Signing time: Sat 13 Jun 2026 03:00:39 +0000
Manifest this update: Sat 13 Jun 2026 03:00:39 +0000
Manifest next update: Sun 14 Jun 2026 03:00:39 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: fcmZNZ5p/v2gLpuSz32ZRcwoWkUDoT8Jl1vqcUwt4i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:a3:93:a8:3b:7b:d1:7c:7b:e4:43:d2:7d:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jun 13 03:00:39 2026 GMT
Not After : Jun 14 03:00:39 2026 GMT
Subject: CN=711c0fe99ac28737e409ec3a0ffca793e2fb9d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:a8:43:76:a6:b7:cc:86:c1:f4:e9:2d:35:
fb:d3:84:fe:da:27:b4:56:d9:38:7d:2b:2d:5c:5a:
46:43:cc:f3:73:18:05:32:ee:e9:fc:c3:8a:ef:41:
59:34:60:f8:f8:5d:9e:4f:5f:91:e7:1c:9e:ed:82:
e2:e8:ca:a1:93:c8:61:e3:4c:95:95:9b:ba:44:9f:
3e:04:a5:9f:8f:d0:38:bd:e0:5a:83:29:39:26:82:
2f:52:6a:f8:11:49:82:7d:10:0a:ac:79:ac:65:0f:
e1:58:04:fd:65:d0:29:c6:a4:a1:c1:70:07:ab:75:
f9:40:68:c1:88:67:f2:f2:77:07:21:20:81:05:d2:
08:a5:b2:82:59:49:fe:68:41:c7:09:90:11:6f:4b:
84:de:27:36:6b:40:46:fc:fa:09:0e:12:b3:84:9a:
93:25:63:2c:5e:e7:48:b3:19:b3:fe:ab:d8:2f:0e:
a6:95:a1:a6:95:e5:69:a1:d7:f6:70:e4:7c:0d:9d:
3b:58:48:83:9b:f9:60:fa:c7:d1:11:34:a2:b2:72:
22:ea:7b:49:33:35:83:a8:b1:3f:d6:d5:95:ae:25:
20:e3:7e:f1:4b:0a:e1:6f:13:72:56:3d:55:2a:6e:
8c:ab:26:0f:0b:43:e6:cb:47:cb:80:a5:43:0d:d2:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:0F:E9:9A:C2:87:37:E4:09:EC:3A:0F:FC:A7:93:E2:FB:9D:38
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:db:14:9a:80:f1:cd:41:3a:a5:4f:75:2f:70:b1:c4:53:
fa:88:83:e6:0a:3d:15:fc:39:97:db:3b:f7:8d:f0:69:93:7f:
3c:d3:56:5c:02:ac:ae:8e:ce:74:17:46:23:45:ba:00:40:a5:
87:b8:26:93:34:3f:3d:17:9f:ae:54:be:18:6e:95:c8:b6:f2:
b9:9d:95:42:4a:dd:bf:c5:5b:ea:3f:4e:ac:1f:8f:8a:f4:f3:
14:23:25:03:14:47:39:d7:79:69:51:c7:98:d1:8c:6e:e9:ef:
47:b1:20:58:4f:7a:49:d5:50:d7:2b:32:be:15:d8:41:f2:dc:
72:b7:b6:8a:47:c6:96:36:e1:37:40:2d:53:2e:5d:75:f2:3d:
35:9f:56:ac:25:2c:93:08:39:b6:9f:22:15:40:8c:69:c9:60:
88:d9:70:da:11:5d:93:e0:ba:49:1e:b4:bc:a8:f9:de:8b:4b:
bc:1f:05:e8:8e:27:b5:4d:c2:53:79:21:3f:15:e5:a9:a1:62:
ab:a1:d6:1a:23:dd:b9:cf:af:2a:5e:6f:f0:cc:fb:be:a4:d5:
25:83:83:6e:b7:dd:15:ad:94:1c:37:7f:b2:1c:19:e5:f2:8d:
93:fd:33:05:b9:d6:83:55:7b:ca:fc:ce:7d:23:c5:a0:fb:2d:
2a:29:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:14 2026 by rpki-client