Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: t4kwOZSJnQp6miQM2OKTtsN4sXkRyGz++YufiYUnRlM=
Subject key identifier: D7:6F:EA:F6:A3:F2:07:83:76:0E:D2:4E:B9:06:18:9F:4E:E4:45:B9
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019D9962735395F28ED3C6AFFABF7081B43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0B2B
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: 6e+KSmmZAIEjH90q+al98hqAGI2nCW07+Z7sDEAmoJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:73:53:95:f2:8e:d3:c6:af:fa:bf:70:81:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=d76feaf6a3f20783760ed24eb906189f4ee445b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:d3:3f:9b:7d:b1:40:6e:01:32:88:ce:27:
6e:c8:d8:75:98:75:d4:e2:07:93:53:1e:df:cc:0c:
e4:5d:f0:45:f9:a0:97:95:b6:f2:3a:d0:4b:98:3e:
e2:cc:55:b9:22:59:3f:22:2f:e6:b3:88:23:c4:55:
42:1d:cd:94:1b:da:84:f9:95:26:7c:d2:cc:00:e4:
a2:9c:7c:e9:2e:11:fd:27:45:69:88:c2:68:6d:8e:
05:3b:a1:24:c2:ea:04:26:ac:d7:b7:3e:be:16:08:
f8:7d:cd:a2:17:7f:91:a9:d7:6c:49:ba:e7:be:01:
66:cb:11:69:30:c3:e2:45:8d:88:72:f9:15:71:47:
68:15:c2:a4:4b:6c:48:d7:74:66:5e:87:9a:c7:01:
85:eb:f4:40:ee:b2:5c:1f:4c:87:b9:ae:ea:a2:bc:
84:9f:b5:f0:d3:ce:57:ba:08:33:76:da:66:11:df:
9e:e5:35:0f:6c:02:67:b7:3c:43:d5:58:a9:c9:9b:
02:53:92:f9:02:ab:fd:61:a6:42:75:91:6e:0b:fb:
b2:6e:a9:93:95:06:fe:5a:b6:a3:c5:af:81:98:44:
34:21:58:62:5a:e1:fe:bd:ac:c8:9c:48:a7:b1:52:
cd:95:c8:fa:3d:01:ed:fc:37:2a:5c:41:8c:ee:3b:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:EA:F6:A3:F2:07:83:76:0E:D2:4E:B9:06:18:9F:4E:E4:45:B9
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:58:30:43:5a:96:1e:40:61:e8:13:cf:5e:9d:29:e2:8a:f9:
ca:02:b6:69:55:73:28:04:5e:c3:c0:21:b1:aa:12:b2:5a:fe:
2c:e5:9b:a8:77:0a:1b:73:72:02:66:7a:66:c3:dd:88:9b:78:
13:4b:16:44:68:54:cf:99:5c:93:39:e1:95:4f:cd:dc:87:a0:
69:13:4b:5e:d5:b8:78:36:35:13:d6:84:09:cd:78:08:63:b7:
96:c7:04:5a:6b:eb:cf:6b:3b:84:f6:33:a4:b5:2b:84:a8:c0:
8f:de:51:ff:68:ed:2a:96:eb:9a:23:69:c7:f2:e7:72:b2:57:
52:b9:d1:72:3b:31:2c:8b:6a:36:4c:1c:d8:8f:69:92:4d:e9:
4f:55:88:16:b1:b0:1a:b9:7c:7c:21:0c:0e:5e:a8:b2:d3:b9:
a1:4c:be:c1:d6:bc:c2:6e:fa:8e:76:e9:df:1c:3b:6f:97:91:
42:98:84:26:28:61:55:61:39:dc:3f:fa:8f:5e:a9:65:23:61:
68:9b:cf:ae:60:3d:22:2a:a8:a4:e3:72:b0:b1:16:f6:8f:66:
b0:80:af:1b:91:5f:ce:d0:44:0e:94:bd:f2:11:cd:5b:80:e2:
e8:00:da:4d:b3:bd:71:ad:10:3f:71:7b:9b:17:5f:9c:27:d1:
1a:e4:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:43 2026 by rpki-client