Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: t4MhpXxx7MXjBC9ouIdMGKaPI5X1YHHz9kfv7AhwQRk=
Subject key identifier: A3:05:61:41:15:DC:D1:82:7B:94:09:3E:D9:16:88:66:02:C2:CD:6A
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 01A0D6F0EC857B89BC981E3BB50AF37DA7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 10FD
Signing time: Fri 25 Sep 2026 05:01:48 +0000
Manifest this update: Fri 25 Sep 2026 05:01:48 +0000
Manifest next update: Sat 26 Sep 2026 05:01:48 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: jJBJ/0hz7307gdh4dY+UqNd253r/U0vs5mhxIEbyj70=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:ec:85:7b:89:bc:98:1e:3b:b5:0a:f3:7d:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Sep 25 05:01:48 2026 GMT
Not After : Sep 26 05:01:48 2026 GMT
Subject: CN=a305614115dcd1827b94093ed916886602c2cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:8c:b6:8e:c7:42:a8:c7:e3:7e:8a:40:95:
1d:c2:d6:d0:b0:01:a5:88:e4:2f:2f:72:af:a9:82:
a2:31:96:f7:d4:ed:78:65:64:71:2e:f5:ed:99:9f:
0b:62:42:b7:f8:5b:98:f0:de:b5:9c:87:25:7d:21:
7c:59:b1:f0:4f:a1:5c:11:2d:55:5c:67:58:ec:7d:
55:67:0d:89:7f:13:eb:43:73:fb:4a:49:aa:d3:a6:
40:4a:26:fc:65:66:96:d1:bf:07:cd:fa:8b:17:92:
04:a4:2d:1c:4b:a6:30:0c:61:af:83:9d:7e:54:0b:
8e:a3:6d:e6:0b:01:50:74:ca:73:11:51:6d:a8:ea:
6a:6e:ef:d7:22:03:02:98:0e:6a:64:34:71:73:1a:
c8:24:eb:36:5c:87:36:51:a8:98:72:2a:b9:64:b1:
47:02:8f:6c:f1:ae:bf:df:f9:d3:42:4b:d5:4e:17:
bb:52:62:5e:18:83:8e:8e:15:5f:c8:b9:f0:93:ca:
51:b6:c5:96:98:36:da:ea:43:8d:19:06:95:9b:01:
16:ae:ac:56:12:d2:93:28:07:79:50:13:f7:e5:1c:
93:7a:c4:51:a6:58:69:29:3e:85:b5:31:7b:2f:62:
7b:f7:2c:7e:25:6f:56:86:48:12:06:ec:fb:3a:0a:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:61:41:15:DC:D1:82:7B:94:09:3E:D9:16:88:66:02:C2:CD:6A
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:00:e1:45:8c:d2:28:99:b3:ed:ef:c7:1c:f5:5a:96:5b:
d1:9c:b2:36:7e:63:e2:e9:e5:fe:95:ea:5c:f7:14:07:14:ce:
96:0c:27:53:32:55:34:97:4d:1d:cf:04:c8:cd:e8:37:c4:75:
4c:80:ef:2b:f2:eb:47:e4:ee:b7:b3:bd:f0:39:29:cc:4b:65:
dd:1f:4d:60:9c:9c:67:05:66:60:f3:cd:08:31:8f:43:8c:32:
7f:00:65:1a:3a:0e:87:c0:97:f8:92:ce:46:fb:9c:61:93:b7:
62:c3:a8:a1:1c:0c:e1:39:3b:6c:91:d9:32:da:5c:c9:93:6e:
19:81:6e:0f:c1:41:a0:3b:e1:a3:1f:4f:b1:5c:7d:e2:a5:75:
30:48:d6:72:ee:2f:59:26:63:5d:66:ed:3b:a0:e2:0c:9c:d2:
0d:0c:8a:03:3a:fb:9b:9e:70:09:4d:89:cd:39:99:74:6b:a6:
c5:73:a9:38:ba:db:4e:9c:fb:48:9f:45:96:e1:bd:f3:6e:19:
1e:88:63:bb:88:59:a0:3a:f1:1d:25:d6:9e:c3:81:8f:a7:74:
16:e4:cb:a5:22:e5:eb:ae:87:e7:75:42:7b:06:2f:09:44:a4:
54:29:e1:b6:b0:6d:0a:b8:e7:12:4b:b5:a2:fc:79:d3:53:eb:
66:4c:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:21:20 2026 by rpki-client