Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: Hkcz6UDJNrnQ0siC+/My9d+c1HKSTPPjeW8ycB3vbK8=
Subject key identifier: A8:55:B9:AD:F9:CD:30:21:17:3E:13:A7:95:12:49:D2:C8:C5:A7:EB
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019E1DC731C5505BD35BF3F2F9F0EFAA5C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0F94
Signing time: Tue 12 May 2026 20:00:53 +0000
Manifest this update: Tue 12 May 2026 20:00:53 +0000
Manifest next update: Wed 13 May 2026 20:00:53 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: Fjzq0fC98r2R2sR/tM1xpUAhWdaWIzhjuPi+yCJIiEk=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:31:c5:50:5b:d3:5b:f3:f2:f9:f0:ef:aa:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: May 12 20:00:53 2026 GMT
Not After : May 13 20:00:53 2026 GMT
Subject: CN=a855b9adf9cd3021173e13a7951249d2c8c5a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:b5:a7:19:03:e2:fc:27:f4:66:d0:66:e1:
95:ec:c5:16:23:36:28:fd:66:92:20:9e:0f:6e:43:
fe:68:68:b8:1a:64:c9:ba:a2:f2:0c:4f:13:34:76:
7e:f5:b9:c8:28:0a:b8:bc:fc:b3:fd:08:aa:6c:6c:
95:a1:44:6f:46:b8:29:b7:c5:e2:9d:ae:50:bb:a1:
86:92:7f:68:89:0b:bf:72:2c:52:f8:d0:6d:31:2d:
d9:d1:cf:9f:fc:cd:48:59:86:8e:a0:2e:7e:5f:88:
2e:88:76:b1:e7:09:3f:a8:1e:35:5f:80:88:ab:70:
97:b8:17:58:08:f4:d2:2e:60:40:a2:fe:c7:3f:a7:
65:94:3f:5b:2e:dd:39:f5:c5:86:9b:4f:9e:cd:5c:
4e:b7:51:6e:c1:0a:cb:b5:55:2c:52:0b:b3:01:79:
43:68:61:72:4c:db:de:40:ef:43:4d:28:d1:59:fd:
62:c0:b5:ad:54:7d:ee:f3:cc:0d:01:97:f9:31:b4:
f9:cc:94:bf:56:e7:9a:16:4b:bf:b1:cd:3a:85:a5:
aa:5f:7a:51:89:63:3c:9d:08:c1:93:af:18:54:3b:
14:c5:2d:c0:9b:fb:9d:59:d9:94:eb:dc:e0:33:c5:
f0:0b:7c:22:53:72:12:3a:83:a0:e0:43:a5:f2:63:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:B9:AD:F9:CD:30:21:17:3E:13:A7:95:12:49:D2:C8:C5:A7:EB
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f3:f4:bf:6e:8f:b3:19:56:ea:a7:e8:63:73:4a:6c:35:4f:
b6:73:31:79:7a:a4:e6:fe:10:c4:b5:2d:6f:0e:06:d9:9c:77:
ee:f4:b8:24:e1:73:12:33:a4:aa:39:a0:0f:b1:f3:bb:1e:1e:
86:8f:50:63:42:b8:cb:f6:ec:8a:a2:79:dc:1b:80:5f:d4:86:
e9:b6:52:e3:13:52:bf:f8:7b:4e:ae:a9:fe:42:37:89:cf:c6:
9c:5c:2d:d9:85:a4:39:6f:d9:65:ce:07:09:60:29:bd:3d:b1:
00:17:a3:28:77:6b:f4:6c:07:7f:3e:40:b0:8a:34:a7:b1:56:
80:ae:f0:3b:3b:da:ba:0b:7f:68:fa:d0:01:fc:57:1e:d7:c2:
31:b6:08:6e:52:a3:72:69:e4:25:75:cc:58:65:c4:10:ef:bd:
9c:38:14:8f:14:48:ba:f4:3f:05:59:a0:26:b5:d5:2f:fa:e8:
83:8c:4c:5c:ba:b0:04:f2:91:e3:a1:ab:b3:4d:2b:94:c3:6f:
14:49:49:ca:3e:13:dc:ad:12:dc:7a:4b:ac:a8:8a:ab:d5:e6:
d0:70:e7:0e:7c:92:34:26:db:62:ec:88:27:da:e1:a7:1d:8e:
e6:9d:1c:9d:be:7e:5b:72:77:f7:75:50:22:c2:b2:0b:17:f6:
91:11:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:36 2026 by rpki-client