Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: jHnj689BHo50ij/VWYjhvEDWxK+bXYweOitE9b9SDa4=
Subject key identifier: 3D:51:96:08:02:F5:94:0D:E3:62:AB:1C:5D:81:91:70:78:72:72:06
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 019E1DFE8F5323CF4E0EE74797A052361ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0A0C
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: OS99WYD/hH/HRQlIXfLESJKDPVwOv4plDS+/8rZFXWQ=)
2: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (hash: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8f:53:23:cf:4e:0e:e7:47:97:a0:52:36:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=3d51960802f5940de362ab1c5d81917078727206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:a5:6a:23:b4:d2:af:be:2e:d9:fa:bb:35:
4e:f8:24:11:e2:43:0b:cf:82:12:1b:ce:ca:e0:de:
9c:51:15:e3:d0:4d:c4:8e:81:01:eb:a7:6c:79:54:
ed:0b:66:53:bd:f2:2f:1a:20:fc:2a:24:4e:9c:11:
5b:5a:82:42:97:9f:68:f4:2e:35:70:ed:45:b0:9e:
9a:f4:c6:08:a0:a5:50:66:c4:a8:ec:ab:4a:54:31:
5a:77:51:e8:04:eb:d2:1b:00:07:91:89:f8:73:78:
87:b2:85:fd:e8:4d:57:7c:b5:8d:b9:d0:cc:ca:9e:
49:c8:4f:21:b8:7d:6e:8d:65:48:e1:69:82:b3:8b:
6d:7c:a3:dd:56:b1:3e:19:9d:34:c4:dd:72:5f:bb:
a7:9e:fb:e2:36:c6:84:89:99:c6:4e:a3:ef:d1:3b:
53:10:cc:ef:9f:8d:63:48:de:c0:94:24:76:eb:80:
c7:75:94:9a:fc:f0:27:33:1b:d4:71:b5:77:70:e9:
c4:52:32:ff:11:f3:47:c8:ab:71:c2:73:84:5a:a0:
d0:4b:55:22:a1:f2:12:68:0b:3b:c6:5d:b6:63:00:
68:bf:50:84:af:2b:93:a5:06:38:04:79:da:a7:93:
c2:2c:a8:53:e2:75:ed:c5:0f:d5:ef:ff:4f:0e:40:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:96:08:02:F5:94:0D:E3:62:AB:1C:5D:81:91:70:78:72:72:06
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:8a:72:7b:71:cd:47:2f:0d:cc:ac:25:05:a9:7a:da:08:
66:1b:f6:db:42:03:b4:5f:40:15:83:b1:75:b4:7c:43:d6:ea:
aa:f8:a8:ae:ed:ea:74:32:77:eb:9b:23:9e:63:3f:b4:fe:2c:
d2:ef:3a:78:b1:ae:0e:01:6d:b8:dd:08:8e:eb:ec:d7:f1:5a:
e5:10:2b:2e:50:3e:1b:67:0a:c3:49:af:5c:07:19:9f:53:ec:
82:bf:94:f1:cb:31:62:38:16:7f:f5:22:d2:ea:5d:9a:0d:29:
87:8e:d0:04:bc:9f:6b:2b:54:65:72:93:e7:d7:3a:26:34:2e:
4f:6f:35:2d:24:aa:ff:30:d5:df:51:c5:30:b1:1a:b0:87:3c:
38:b7:dc:7b:8c:93:37:3e:9e:db:3c:f2:b6:7c:e5:ba:2e:24:
1e:c3:2d:f7:24:89:35:44:00:8b:6a:1f:d5:81:b7:08:c2:93:
c6:33:17:6b:6b:c6:6f:17:2b:f4:c9:9e:6f:62:5b:27:3b:3c:
ff:9a:fd:5f:df:6e:bb:1f:8c:87:ff:37:34:ed:5d:03:eb:d7:
ab:84:15:ad:31:45:d7:39:73:f2:76:44:89:70:f7:02:8b:3d:
5d:8d:95:10:53:79:2d:0c:fc:30:e6:27:06:3c:53:fa:dc:6c:
7f:64:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:32 2026 by rpki-client