Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: YrSHLX8Xy1PQjVq97aXrwV6mytTdku1WwHuKKcmvU1k=
Subject key identifier: B8:26:EE:AB:FA:C5:42:91:2A:F5:19:A9:FB:7A:EE:C2:9B:88:FB:59
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 01A0CD7F1AD6F69157A79BB7BDDBD409E930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0B70
Signing time: Wed 23 Sep 2026 09:00:54 +0000
Manifest this update: Wed 23 Sep 2026 09:00:54 +0000
Manifest next update: Thu 24 Sep 2026 09:00:54 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: LJbGcKtpYvEq0wj3WcL60qNwNIuCZAm0dt9OD/AP6lI=)
2: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (hash: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:1a:d6:f6:91:57:a7:9b:b7:bd:db:d4:09:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Sep 23 09:00:54 2026 GMT
Not After : Sep 24 09:00:54 2026 GMT
Subject: CN=b826eeabfac542912af519a9fb7aeec29b88fb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:3b:e0:9d:65:f0:a9:fb:2a:0a:82:13:6e:
c8:f0:57:50:fc:ab:2e:75:fc:5c:4f:54:c8:88:d8:
08:d1:a5:b5:9f:07:03:12:23:7c:f3:90:fb:0e:4f:
1a:33:5a:ec:1f:17:bc:0f:0e:22:34:2f:40:d6:d3:
3d:89:ed:b9:a7:71:3f:ba:28:39:d9:87:e0:dd:e5:
5a:82:37:94:7b:5e:dd:3c:0a:5a:60:c2:0b:ef:d4:
e9:94:eb:7e:37:32:44:85:b9:0d:53:b0:4b:d5:2c:
f8:6a:40:fe:90:aa:97:dc:5a:f4:c6:e5:15:b4:cc:
27:d6:ef:46:18:bd:5d:ac:38:3a:17:3a:2b:79:20:
d5:e2:dc:b2:3a:ca:fb:c5:eb:e0:cb:87:43:57:6c:
18:c0:57:1d:53:e3:95:c9:23:d6:6c:bf:f5:d4:27:
fc:26:3f:b7:8a:77:f3:13:a6:05:57:b2:21:dd:9e:
b7:95:f9:2a:2a:91:9c:cd:79:b0:88:5c:8b:5c:8a:
aa:e0:42:7e:62:0e:bf:09:ac:a8:f6:9a:7e:a0:7d:
ca:95:cc:5d:3e:7d:b3:25:cf:97:f5:35:9c:9d:f9:
c1:0d:a7:44:ab:67:3b:e7:91:39:4e:11:b0:1d:f6:
7e:be:48:ac:a0:f0:a0:36:06:72:64:a3:3d:d4:96:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:26:EE:AB:FA:C5:42:91:2A:F5:19:A9:FB:7A:EE:C2:9B:88:FB:59
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:66:43:cb:08:c4:db:c3:f7:53:98:7d:c3:a3:37:cf:bd:e2:
b6:e8:07:f7:86:56:43:ae:95:78:e3:47:40:90:09:9b:82:a3:
32:4b:56:11:45:4e:08:56:58:c6:fb:4b:7f:78:20:d4:f7:21:
cc:a2:95:80:4f:99:c4:23:a2:89:3f:c1:12:d8:c3:4a:4b:1d:
77:6c:10:78:da:32:98:51:33:ac:fb:42:95:81:23:7b:f4:6f:
92:71:16:f6:f7:ca:00:35:5b:68:b4:4e:4a:a5:a9:8f:1d:2a:
2e:ac:2b:ea:f6:a9:1b:a9:e3:2f:0b:c0:02:5c:c4:9b:5a:01:
51:2c:38:1d:0b:7c:4b:6e:46:3a:0f:0a:64:3e:1c:84:71:ab:
44:ea:53:43:bc:72:9f:b7:6a:d8:4f:67:28:fe:47:96:82:23:
08:a3:b2:88:1e:0e:1e:46:89:5c:47:07:14:7a:85:54:f1:8e:
72:ab:55:8f:25:64:79:44:d1:0e:fe:be:e7:1d:f7:ae:c6:77:
cf:48:ad:a3:f6:39:73:98:0f:e2:a1:d2:d2:1c:c0:61:fb:89:
a1:bc:8f:25:8e:ab:a1:b6:fd:d0:8b:5a:12:9e:df:61:8c:0e:
c9:44:5a:1f:ca:bc:b0:fa:af:b7:89:a7:62:28:6f:77:d9:c3:
18:66:1a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfxrW9pFXp5u3vdvUCekwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTg0MzAzMjE2NGUwYjYyZWQ2ZGE3YzY3NTU3YmY0Njg5
NWQwZjAwHhcNMjYwOTIzMDkwMDU0WhcNMjYwOTI0MDkwMDU0WjAzMTEwLwYDVQQD
EyhiODI2ZWVhYmZhYzU0MjkxMmFmNTE5YTlmYjdhZWVjMjliODhmYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypc74J1l8Kn7KgqCE27I8FdQ/Ksu
dfxcT1TIiNgI0aW1nwcDEiN885D7Dk8aM1rsHxe8Dw4iNC9A1tM9ie25p3E/uig5
2Yfg3eVagjeUe17dPApaYMIL79TplOt+NzJEhbkNU7BL1Sz4akD+kKqX3Fr0xuUV
tMwn1u9GGL1drDg6FzoreSDV4tyyOsr7xevgy4dDV2wYwFcdU+OVySPWbL/11Cf8
Jj+3infzE6YFV7Ih3Z63lfkqKpGczXmwiFyLXIqq4EJ+Yg6/Cayo9pp+oH3Klcxd
Pn2zJc+X9TWcnfnBDadEq2c755E5ThGwHfZ+vkisoPCgNgZyZKM91JZAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgm7qv6xUKRKvUZqft67sKbiPtZMB8GA1UdIwQY
MBaAFNgYQwMhZOC2LtbafGdVe/RoldDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUt
NjVkMzczYWI1NzNmLzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUtNjVkMzczYWI1NzNm
LzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGZDywjE
28P3U5h9w6M3z73itugH94ZWQ66VeONHQJAJm4KjMktWEUVOCFZYxvtLf3gg1Pch
zKKVgE+ZxCOiiT/BEtjDSksdd2wQeNoymFEzrPtClYEje/RvknEW9vfKADVbaLRO
SqWpjx0qLqwr6vapG6njLwvAAlzEm1oBUSw4HQt8S25GOg8KZD4chHGrROpTQ7xy
n7dq2E9nKP5HloIjCKOyiB4OHkaJXEcHFHqFVPGOcqtVjyVkeUTRDv6+5x33rsZ3
z0ito/Y5c5gP4qHS0hzAYfuJobyPJY6robb90ItaEp7fYYwOyURaH8q8sPqvt4mn
Yihvd9nDGGYa3A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:19:17 2026 by rpki-client