Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: pqMzKFXYEaFK8YTFFvjtf3hmUs2TUYoLX2ddGgf2ZGo=
Subject key identifier: D3:3E:FC:10:FC:3D:31:7A:5A:35:80:96:8B:C4:9E:14:D5:B8:42:3A
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019D27E01A8E0C6EB3D26B39B1FDF8C21F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 174D
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: gAx1dSt/3WCq97b/t/w2hXQ6P/hSGqKVqszbhEJM6TQ=)
2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=)
3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1a:8e:0c:6e:b3:d2:6b:39:b1:fd:f8:c2:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=d33efc10fc3d317a5a3580968bc49e14d5b8423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:2f:fb:45:94:ce:31:1f:7a:51:0b:01:c7:
d7:87:d3:5c:3b:b5:e6:3e:c8:0f:d9:f0:37:15:af:
2a:fa:ca:8a:b1:ec:72:ef:79:d0:be:f3:b2:e0:e7:
15:f6:23:cc:72:27:a1:4a:29:97:e5:cf:a7:a7:c0:
2a:8a:45:5f:93:d9:fb:5c:2f:ea:18:5e:8c:95:19:
ab:24:87:e1:74:54:6f:00:76:9b:ff:ea:53:07:16:
0a:da:c9:72:ce:9c:cd:95:d7:47:95:fb:19:24:ef:
17:cc:32:bd:48:1b:5c:10:bb:cb:62:d2:32:6e:d5:
11:86:7b:1c:9a:18:61:3f:63:3f:1d:cf:6a:35:fc:
3a:c7:78:24:b9:a4:c6:18:87:84:28:80:b0:d8:77:
1e:08:6a:16:0e:60:59:50:b3:e9:c4:91:f1:48:9a:
de:39:d3:5b:94:1e:79:87:d9:87:0a:ea:15:7e:9e:
0d:02:f9:cc:b5:75:a3:f7:c3:e0:65:51:7a:2b:ef:
ad:e8:31:eb:dc:19:a4:15:ed:36:84:00:6f:0e:74:
3e:dc:2b:7f:8a:82:80:44:91:fa:31:40:f8:2e:92:
90:ba:80:5f:de:bf:e0:4d:22:0c:4e:0b:85:b1:78:
c0:cb:ae:ae:8e:00:6e:dd:9e:0e:5c:3d:77:94:f5:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:FC:10:FC:3D:31:7A:5A:35:80:96:8B:C4:9E:14:D5:B8:42:3A
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:db:6a:d4:6b:02:cb:de:da:16:65:29:e3:26:03:11:b4:0f:
5a:1a:95:62:3c:0b:4c:2d:50:69:a1:3b:39:de:05:e1:8b:c4:
02:39:b5:cd:24:57:18:8a:56:28:b6:5a:af:d5:7b:a8:a2:6d:
2f:36:82:50:e2:d4:86:24:92:39:77:b6:ca:b6:16:4e:51:4f:
11:61:2c:ec:9e:07:eb:ca:c9:6b:74:93:62:58:da:ef:fe:54:
b2:e6:1d:6c:aa:20:d5:59:77:6d:86:f5:f4:f9:a2:4a:da:fb:
a7:1c:3c:0d:8c:d2:f0:cf:28:78:d4:7d:82:1d:76:3d:fc:e1:
d2:64:7b:30:01:09:c8:1c:6b:9f:03:30:4e:0a:51:cc:2b:c8:
3d:e7:7c:d1:50:78:e1:18:6c:f4:85:53:5e:42:e6:11:97:7f:
c3:f8:38:e5:b5:72:85:c3:58:24:32:84:8e:ce:4e:46:44:c3:
34:4f:35:b1:50:d3:72:c2:1b:3d:f6:ed:fd:a5:e1:40:e3:1c:
9c:57:7b:82:f3:23:2b:ff:1f:04:bf:46:0b:6b:3a:59:f4:3e:
51:eb:a7:c7:49:f7:7a:f2:31:c3:75:a3:fd:42:73:0e:c7:bd:
e9:a9:03:e8:78:0d:41:c5:1b:ed:8e:f4:63:85:ab:5c:84:f1:
c1:af:9f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BqODG6z0ms5sf34wh+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl
NTI2ZGIwHhcNMjYwMzI2MDIwMTMxWhcNMjYwMzI3MDIwMTMxWjAzMTEwLwYDVQQD
EyhkMzNlZmMxMGZjM2QzMTdhNWEzNTgwOTY4YmM0OWUxNGQ1Yjg0MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy4v+0WUzjEfelELAcfXh9NcO7Xm
PsgP2fA3Fa8q+sqKsexy73nQvvOy4OcV9iPMciehSimX5c+np8AqikVfk9n7XC/q
GF6MlRmrJIfhdFRvAHab/+pTBxYK2slyzpzNlddHlfsZJO8XzDK9SBtcELvLYtIy
btURhnscmhhhP2M/Hc9qNfw6x3gkuaTGGIeEKICw2HceCGoWDmBZULPpxJHxSJre
OdNblB55h9mHCuoVfp4NAvnMtXWj98PgZVF6K++t6DHr3BmkFe02hABvDnQ+3Ct/
ioKARJH6MUD4LpKQuoBf3r/gTSIMTguFsXjAy66ujgBu3Z4OXD13lPUQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM+/BD8PTF6WjWAlovEnhTVuEI6MB8GA1UdIwQY
MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt
OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4
LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9tq1GsC
y97aFmUp4yYDEbQPWhqVYjwLTC1QaaE7Od4F4YvEAjm1zSRXGIpWKLZar9V7qKJt
LzaCUOLUhiSSOXe2yrYWTlFPEWEs7J4H68rJa3STYlja7/5UsuYdbKog1Vl3bYb1
9PmiStr7pxw8DYzS8M8oeNR9gh12Pfzh0mR7MAEJyBxrnwMwTgpRzCvIPed80VB4
4Rhs9IVTXkLmEZd/w/g45bVyhcNYJDKEjs5ORkTDNE81sVDTcsIbPfbt/aXhQOMc
nFd7gvMjK/8fBL9GC2s6WfQ+Ueunx0n3evIxw3Wj/UJzDse96akD6HgNQcUb7Y70
Y4WrXITxwa+fgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:37 2026 by rpki-client