Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: czPc/AH0Ywt7jdaNZhc9Ej8p84Oars4iUV/nqzZa9us=
Subject key identifier: EA:7E:B4:24:BC:A0:1B:A0:E2:91:7F:6B:C1:70:02:0E:D5:41:45:44
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019D25BA030F288D2B1E4C3AF41C7F3A8F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0FCC
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: ELNx19NUoz4hL0M3cRBfhmX5u25hVbQ+KA4TocffalY=)
2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:03:0f:28:8d:2b:1e:4c:3a:f4:1c:7f:3a:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=ea7eb424bca01ba0e2917f6bc170020ed5414544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:0e:6e:3a:2a:00:44:56:8b:9e:dc:68:1f:
0c:34:16:bf:ed:f2:42:94:84:10:e4:c7:f5:f8:52:
60:69:34:5c:80:1e:47:d2:40:5e:9c:3f:69:e3:e9:
9f:14:88:b6:3a:0d:05:f9:b8:1e:40:c8:73:39:2f:
b3:03:11:4c:66:d0:20:a6:78:3f:87:20:42:0c:55:
2b:1a:e6:f6:bf:83:d9:70:88:99:e7:2e:2b:f8:a1:
9b:87:6a:37:fa:e4:e1:58:ca:c2:3a:5e:2e:07:43:
19:20:60:6a:cc:16:0c:e7:02:44:d1:51:0d:c3:c4:
67:06:79:3e:67:95:3e:b0:61:e5:00:e9:7f:e1:84:
84:9f:44:dd:ba:05:a2:94:36:b7:ef:8f:16:87:c7:
5c:d2:fe:8f:3e:4c:4d:79:2d:52:51:a2:52:9d:84:
eb:9c:0d:75:63:d3:08:12:5b:77:88:c6:90:ba:49:
3d:c7:4e:ec:8d:88:88:4d:14:cc:db:51:55:d4:54:
78:df:b2:e6:f8:9a:32:ef:e2:93:ee:9d:70:d7:b6:
0b:c0:4f:fb:18:95:65:ef:90:bb:47:0a:a1:54:76:
34:94:b0:01:66:91:79:7d:cb:de:55:0d:73:4b:11:
2e:b5:c7:d6:31:42:f4:44:2b:c0:ab:e8:93:e7:85:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:B4:24:BC:A0:1B:A0:E2:91:7F:6B:C1:70:02:0E:D5:41:45:44
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:7b:d3:82:d9:92:df:a0:d8:4e:bc:05:85:39:a6:38:54:
ce:4d:c2:68:9e:b1:e6:a6:16:f3:c6:d7:6f:19:d9:11:f7:92:
b5:40:d5:b5:dc:d4:56:0a:f9:3b:72:2e:a4:15:53:ba:1d:44:
a9:ff:84:c7:70:57:8c:84:23:3d:c7:16:ce:a5:9b:0f:47:ab:
91:8a:36:9b:ba:3b:62:ad:3b:a1:87:59:cf:4a:75:9d:d8:66:
58:21:d9:9c:bb:04:89:c0:ab:fd:fc:5e:a9:7b:48:e9:c2:c4:
e4:77:da:52:48:d2:73:13:9d:90:bd:1f:0a:0e:a6:38:6f:df:
b1:8d:e7:47:f4:a4:be:9e:cf:ee:df:c7:17:96:4a:95:3e:f1:
a7:c7:77:9c:3a:30:ef:18:ac:0e:77:28:15:4d:11:ca:e1:ac:
03:9b:01:a9:85:9b:1d:21:6f:f9:b9:62:70:bf:a3:eb:8b:72:
d0:fb:ca:4c:07:4c:d2:1e:bd:d1:ca:94:c2:99:78:1f:2f:12:
a8:ff:60:f6:ab:20:1e:03:35:70:e4:8f:25:27:3a:e3:0b:9b:
86:4f:43:a7:51:4e:a8:c3:0f:2f:37:2f:80:df:5e:c9:7f:f5:
21:ac:2a:4b:5b:ed:eb:b1:15:32:d6:21:10:6b:82:24:1e:6c:
64:1b:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:33 2026 by rpki-client