Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: ethfA6H4OzHawgEgKgZisYVsWQfzmGCwdPvOndiqSuM=
Subject key identifier: F7:64:E9:0F:7C:6F:79:65:13:9F:F1:50:ED:20:02:86:24:C1:01:20
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 019D28BB9BB56F24EE8EFCA3D9F32317CB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 098D
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: Y7H4ufdh7HrmmJz1g4vf9EtqnZ/j/0TOQRZ7FyTCsKU=)
2: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (hash: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9b:b5:6f:24:ee:8e:fc:a3:d9:f3:23:17:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=f764e90f7c6f7965139ff150ed20028624c10120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:33:4f:e5:98:68:9b:52:c4:d1:db:e0:e2:
fe:56:7b:c1:b6:88:c9:33:61:e8:69:85:c4:35:00:
b0:6b:a3:64:78:6c:1e:14:fd:c2:9e:1b:bb:81:0a:
68:e2:ea:9c:58:25:b0:47:23:6b:a1:93:f5:ad:c5:
53:86:a8:f6:8a:b3:28:1e:e8:d7:68:de:98:bb:a8:
30:ec:70:2c:9b:ca:4b:b2:41:a2:e0:95:47:c6:75:
d2:28:b4:39:a9:1f:ff:86:75:6e:f1:d3:ae:db:03:
2a:6a:ed:ff:57:a5:a4:9b:ae:4a:63:97:17:07:1a:
f7:1b:4f:19:44:b0:3c:43:69:e7:9a:81:ef:ab:e1:
8c:28:23:10:41:b1:09:88:75:c7:c1:ac:e3:55:3d:
68:1d:74:d7:7d:25:48:72:42:e1:e4:6f:76:54:c1:
29:5a:d6:a3:6a:86:5f:74:ea:77:be:bc:09:ca:de:
56:48:7c:14:ed:69:69:d2:4c:08:7c:8d:97:e2:61:
6e:97:6e:6b:e9:b0:97:1f:a0:f0:05:0f:fa:49:e6:
4c:bb:e4:9c:13:b5:4d:24:b1:c8:2c:52:4d:ed:05:
cd:2f:7f:02:9c:62:ed:b7:2d:e8:25:c2:12:95:ab:
a3:45:e4:cb:71:7e:39:11:6a:40:5c:de:b3:a9:e5:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:E9:0F:7C:6F:79:65:13:9F:F1:50:ED:20:02:86:24:C1:01:20
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:3c:67:63:74:23:14:04:e4:90:a7:40:d7:93:b0:99:6c:
7d:a1:20:da:f8:e1:ee:de:56:e5:26:ab:a6:c8:81:e6:a4:43:
7f:eb:22:0f:dc:b0:7a:bd:5b:21:52:b9:97:10:75:e3:6d:3b:
e9:2d:ef:0b:b5:22:46:24:94:68:6a:03:34:5c:11:40:0e:8a:
3a:6a:c4:04:09:5e:c0:05:25:48:9e:3e:63:94:21:1d:e3:d0:
d4:62:5f:5b:11:40:ea:2e:4d:ce:b7:e8:51:a0:70:ba:65:02:
ce:08:16:3b:78:06:08:5b:8e:c3:cb:44:52:12:81:42:5e:bc:
97:73:6f:4d:61:93:5a:4d:94:11:aa:05:c5:c1:40:fe:53:59:
af:74:48:89:fa:5c:5a:cb:ac:90:5f:c2:68:71:c4:7f:04:a2:
34:c8:92:d4:23:34:02:fb:0f:3c:00:ca:b8:67:c8:e8:65:dd:
00:bb:0a:bc:e2:07:90:03:9c:6b:d5:2b:d2:78:e3:5e:8a:f0:
7e:0b:d9:84:bc:e7:bc:a6:f9:80:8e:d9:39:ab:cc:9c:59:66:
eb:7d:04:b2:b9:d4:1b:8f:a7:ea:3d:22:65:bf:eb:a1:89:71:
4c:5e:7b:3c:5d:6b:e9:c1:76:8a:6c:e3:2b:df:4f:f1:87:35:
02:15:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:44 2026 by rpki-client