Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: l4ymUb6eRENACXEoGyP9IwGzknCCphWq33PhC0HpX48=
Subject key identifier: 2F:2E:79:87:11:1A:06:97:79:DD:89:DC:EC:CF:3E:A4:0F:B8:AA:DA
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019D28846AEE4B5D6162A26490405C2D1BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0F15
Signing time: Thu 26 Mar 2026 05:00:59 +0000
Manifest this update: Thu 26 Mar 2026 05:00:59 +0000
Manifest next update: Fri 27 Mar 2026 05:00:59 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: u0+zj5E6BWZ3ihE7YIbc/X/6LtY6lTtn5T+NhlRIWJc=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6a:ee:4b:5d:61:62:a2:64:90:40:5c:2d:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Mar 26 05:00:59 2026 GMT
Not After : Mar 27 05:00:59 2026 GMT
Subject: CN=2f2e7987111a069779dd89dceccf3ea40fb8aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:97:ad:37:04:1e:e0:f8:0b:6f:91:59:9d:
f6:d5:97:35:45:ad:56:18:81:a0:85:f1:e9:32:01:
ce:f6:bc:18:86:34:17:aa:2a:66:f5:d4:21:16:0b:
1a:cb:05:b7:02:b3:5a:ce:78:1b:25:cd:70:c7:d2:
fe:35:6e:32:ae:14:7f:19:ab:43:56:42:81:a6:16:
7d:78:3f:3d:52:f7:5d:91:5d:ed:ca:cb:e9:91:9c:
9e:58:36:58:d5:0a:5f:05:4e:fe:c8:20:97:82:0b:
60:5e:e3:5c:84:67:46:69:ce:05:9a:e2:80:9e:f6:
42:9b:ef:3c:9c:c3:09:7c:4b:52:0c:91:c0:fb:2f:
07:19:33:5c:d1:f7:ef:6a:8e:20:24:94:c6:9d:90:
5e:7e:9b:f1:86:b9:5d:57:52:64:02:ea:e3:c1:cd:
86:46:6b:17:58:49:ef:29:1f:cc:72:55:b4:97:65:
6e:db:7e:fa:06:2f:92:f4:58:63:b6:dc:c4:f1:f5:
d4:d2:bc:c3:41:e3:54:10:88:5d:fc:fc:4b:a4:49:
3d:88:aa:5f:95:8b:fb:20:56:bc:73:ba:d7:bb:1d:
b5:46:d4:f9:7c:97:cd:fd:ae:d9:bc:ee:40:46:b4:
08:b6:ea:4b:c8:4e:24:ba:1b:10:04:b7:20:8e:f7:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:79:87:11:1A:06:97:79:DD:89:DC:EC:CF:3E:A4:0F:B8:AA:DA
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:30:94:be:85:c8:0d:b7:6a:6c:69:5b:2c:ee:6c:a6:12:fa:
c9:e0:a9:15:f6:34:75:8b:6a:de:e8:28:12:bc:7b:3c:36:8a:
a0:8b:74:c7:12:4b:fa:17:42:8a:b3:7e:62:f5:db:fe:22:19:
24:17:c1:35:f3:a3:b6:42:31:1d:df:95:b0:12:4d:2b:98:0c:
9f:25:ef:35:95:5f:33:ba:58:3e:8b:7e:97:74:94:50:ed:e3:
78:b0:8f:4f:d3:a0:a0:63:50:ec:1e:5f:f3:60:b3:3a:2d:30:
e1:ab:34:4c:d0:9d:24:62:ba:73:14:12:50:ec:3f:18:d3:8b:
f7:98:11:ca:48:fb:27:7d:42:3a:09:66:c8:c9:01:56:56:d0:
b9:90:76:30:10:8c:1e:c1:cf:73:61:8a:27:f4:65:81:f3:cb:
c8:e9:e3:64:78:e5:2e:16:ff:a6:6d:6c:d8:07:89:50:fb:31:
ea:78:93:c2:a9:35:08:59:7e:54:af:8c:75:14:e9:af:f4:9b:
b2:63:ed:87:9a:00:cb:ad:36:80:dd:a9:46:25:77:f9:29:74:
c7:e3:ec:63:80:ac:e5:09:b2:09:02:f3:ba:90:62:c6:6d:8a:
98:df:7c:80:60:ae:37:01:7a:c5:7e:7d:e4:c8:88:90:9d:7c:
ec:5a:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:56 2026 by rpki-client