Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: Hr2hHqnpBicsI+mgsnfkvHl40+d8hRcnaZ5Yg3tFB+Y=
Subject key identifier: 56:1E:52:D3:48:20:06:9C:98:4F:70:A3:41:F4:36:D4:7F:FF:DD:6D
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019F9090E09D60CDC8A50F8303138E755632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 1054
Signing time: Thu 23 Jul 2026 20:00:41 +0000
Manifest this update: Thu 23 Jul 2026 20:00:41 +0000
Manifest next update: Fri 24 Jul 2026 20:00:41 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: /OK3p82kBlnGf9HP/Vl5Zuen2Zbd7aGO4D/zHbSefCQ=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e0:9d:60:cd:c8:a5:0f:83:03:13:8e:75:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jul 23 20:00:41 2026 GMT
Not After : Jul 24 20:00:41 2026 GMT
Subject: CN=561e52d34820069c984f70a341f436d47fffdd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:da:34:ef:a7:c5:43:56:7b:33:34:fe:41:
70:b4:30:60:c4:53:19:be:f2:91:11:73:10:db:e9:
d9:ca:a0:88:9e:7a:06:2f:e9:d2:83:e2:7b:c7:c1:
62:89:1d:aa:84:6e:bd:c9:17:39:53:2f:49:99:ec:
39:ab:2f:42:5e:9a:c2:8d:a5:3e:06:80:7c:10:67:
dc:1a:e3:3a:9a:80:06:6f:bd:7c:2c:85:9a:d9:98:
d9:8c:cb:69:3b:50:31:02:96:a2:11:72:5d:de:48:
0d:f6:27:2f:dc:c8:47:71:a1:55:5c:d0:b7:63:dc:
7f:f8:e8:f3:78:b9:ba:37:6a:48:6a:8c:8a:9d:c5:
7f:fe:66:0c:8d:a1:93:f2:fb:ed:80:6c:1b:98:94:
5e:6f:2c:4c:81:0a:77:09:ae:41:3b:c8:09:64:d5:
47:80:58:a4:3d:31:cf:9a:6f:46:ce:58:0b:9c:b5:
58:7b:4b:20:ed:5e:5a:ae:d0:ae:fd:b1:c5:c1:3b:
c1:f8:83:d0:25:be:6b:95:1b:48:b8:38:37:ca:cf:
07:79:9f:7a:d4:81:fc:c7:12:a8:72:9a:2f:93:80:
f1:c1:4b:17:94:a4:0b:cf:e8:d8:28:19:30:df:ba:
93:0a:c9:da:2a:df:c8:35:f2:b4:5e:d6:a6:42:7e:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1E:52:D3:48:20:06:9C:98:4F:70:A3:41:F4:36:D4:7F:FF:DD:6D
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:1b:86:d7:f6:73:fb:3a:62:e2:09:9a:43:bc:e8:34:e9:
17:a4:d4:a1:e8:02:85:77:e8:7c:f6:00:ed:de:5e:a7:6f:33:
c1:9d:0e:ba:b5:a1:6b:3a:8d:d4:f3:27:fa:a4:36:52:b1:4e:
e9:12:c5:e3:c5:1e:cc:50:cd:75:19:6e:39:a3:bf:14:df:c0:
c4:ba:46:e8:46:31:58:00:b8:0e:70:98:64:d2:ec:cf:77:51:
32:73:77:ab:07:5c:f6:4c:56:42:91:c4:c4:05:0a:6c:85:14:
80:58:5a:99:ca:75:b5:f8:11:c8:2a:71:f5:b4:d1:9a:dc:df:
3d:89:2a:f9:78:a3:e6:d0:7a:b9:83:ae:20:a7:40:43:c8:e0:
47:2e:e5:4c:d7:1b:20:23:0b:87:72:e6:4d:08:ef:05:b4:31:
f8:5c:ed:85:b4:47:35:30:5f:0a:9d:7c:65:ec:bb:43:bd:ac:
99:22:a0:fe:1a:86:70:93:c1:5d:6b:90:e1:04:cf:2a:b8:28:
c2:2b:69:98:b9:1e:cd:5f:4a:a2:4c:e3:19:4d:2f:dd:45:dc:
d2:76:83:3f:a9:04:3c:c8:8c:8e:27:e8:d2:e6:80:fb:97:7f:
3a:42:3a:f5:d8:d8:8d:7d:46:a3:88:68:79:35:e0:ea:59:6a:
09:8a:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:31 2026 by rpki-client