Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier: ansLIRZ5WYFFjotoVoGMvraJvyaVFl/95Z1HietxcRg=
Subject key identifier: EF:75:98:8F:A1:C7:EA:D2:06:B8:35:96:9E:02:56:85:C9:7B:0D:A0
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer: /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial: 019E1D2227BAE3BE97EE9703747CCF87BC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number: 070F
Signing time: Tue 12 May 2026 17:00:38 +0000
Manifest this update: Tue 12 May 2026 17:00:38 +0000
Manifest next update: Wed 13 May 2026 17:00:38 +0000
Files and hashes: 1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: sweOhVAmKN42d2rh0nXtq0tQdk61+W7NhqGaxTwd5cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:27:ba:e3:be:97:ee:97:03:74:7c:cf:87:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Validity
Not Before: May 12 17:00:38 2026 GMT
Not After : May 13 17:00:38 2026 GMT
Subject: CN=ef75988fa1c7ead206b835969e025685c97b0da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:97:5b:6a:63:a2:41:f2:64:21:1e:13:75:
67:db:5e:ba:43:3c:20:12:e3:40:a3:34:a3:5b:8a:
4b:a3:5b:06:b0:45:5c:3f:80:52:c3:9a:5a:e6:0b:
86:f6:5d:11:e5:b1:37:a8:db:05:9b:4d:e3:f7:5f:
4b:a1:d5:c5:6d:0c:5e:c3:d1:bb:f0:33:83:b8:08:
68:67:ae:88:01:e2:a3:6e:bb:d2:9c:48:fe:5e:fd:
b9:06:d0:f2:5a:2d:b0:dc:fe:d9:50:4f:e0:cb:06:
c8:58:77:2d:ff:71:c2:43:e6:7a:e9:b6:79:87:4c:
66:cf:ff:de:63:30:d2:70:21:4c:06:77:db:1e:fe:
91:74:06:8b:c8:bd:cd:42:49:86:04:85:f1:c2:15:
35:ee:3c:bb:cc:c2:23:ec:ea:de:34:54:c7:3e:e1:
55:0a:29:83:ab:18:08:4c:e1:84:03:1c:16:90:93:
dd:c9:65:d8:d5:27:36:14:11:ad:a3:d1:d1:b3:d5:
e6:82:e2:6c:ae:a6:2b:68:f4:c6:96:6f:c9:09:2d:
58:2a:2f:43:5a:8a:92:e9:cb:2a:cd:68:ef:2c:6c:
9f:09:7c:10:1e:b2:b5:fc:bd:64:cc:55:0f:33:85:
89:56:d1:c1:1d:5d:89:8a:c7:84:c3:ea:a8:ff:e8:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:98:8F:A1:C7:EA:D2:06:B8:35:96:9E:02:56:85:C9:7B:0D:A0
X509v3 Authority Key Identifier:
keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:22:8c:95:a6:2e:f2:ca:2a:b3:4e:fd:8a:86:6d:5a:fe:0a:
44:95:d5:cc:74:47:f1:40:36:9e:07:26:5c:4a:b5:bf:12:26:
ee:8b:92:de:28:47:3c:f2:9d:7b:80:3b:4a:32:50:9a:7d:2f:
a6:ac:3c:7c:7a:76:5a:e3:95:8f:8c:b2:bb:a5:3f:e4:e6:12:
62:27:28:e3:7d:19:ef:67:d2:9d:c1:c5:6d:f7:e4:d8:3b:7f:
aa:28:d1:d2:70:db:80:e3:e4:62:3d:8e:18:9d:0b:89:ae:a0:
cd:45:d8:64:30:b1:9f:e1:36:a6:9d:c7:1b:9a:d8:74:a2:02:
d2:e1:8f:d9:9c:39:c1:1e:6f:cb:d5:5c:72:08:7e:2f:8d:cf:
8f:73:35:90:98:f2:6f:73:db:84:44:61:67:9c:b8:ad:a9:fe:
cd:89:0c:5a:51:75:12:f7:ae:b7:ce:49:f9:f4:32:f4:1d:f7:
ee:c2:8a:e0:b4:e7:56:d8:b6:8c:54:7f:3c:0b:15:ac:6b:35:
08:44:88:7c:21:bb:f6:29:70:83:98:32:72:f6:f4:f8:2f:c2:
4c:d7:a5:54:68:51:d3:a9:ab:e5:fe:72:7b:ed:64:ed:45:c1:
16:68:65:19:a1:e3:7e:a2:09:cc:be:6e:fb:b5:00:92:e5:49:
19:20:30:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIie6476X7pcDdHzPh7w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTFkZDIyZjdlYWYyNzJiYzRiZjNlYmIxNTJkMzY0YmI0
ZDk3NTMwHhcNMjYwNTEyMTcwMDM4WhcNMjYwNTEzMTcwMDM4WjAzMTEwLwYDVQQD
EyhlZjc1OTg4ZmExYzdlYWQyMDZiODM1OTY5ZTAyNTY4NWM5N2IwZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz++XW2pjokHyZCEeE3Vn2166Qzwg
EuNAozSjW4pLo1sGsEVcP4BSw5pa5guG9l0R5bE3qNsFm03j919LodXFbQxew9G7
8DODuAhoZ66IAeKjbrvSnEj+Xv25BtDyWi2w3P7ZUE/gywbIWHct/3HCQ+Z66bZ5
h0xmz//eYzDScCFMBnfbHv6RdAaLyL3NQkmGBIXxwhU17jy7zMIj7OreNFTHPuFV
CimDqxgITOGEAxwWkJPdyWXY1Sc2FBGto9HRs9XmguJsrqYraPTGlm/JCS1YKi9D
WoqS6csqzWjvLGyfCXwQHrK1/L1kzFUPM4WJVtHBHV2JiseEw+qo/+g8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO91mI+hx+rSBrg1lp4CVoXJew2gMB8GA1UdIwQY
MBaAFNgR3SL36vJyvEvz67FS02S7TZdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80NzYyYzYtNWVhZi00ZTdjLWE4MjQt
ZjcwYWRmMWRjMGZlLzEvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80NzYyYzYtNWVhZi00ZTdjLWE4MjQtZjcwYWRmMWRjMGZl
LzEvMkJIZEl2ZnE4bks4U19QcnNWTFRaTHRObDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyKMlaYu
8soqs079ioZtWv4KRJXVzHRH8UA2ngcmXEq1vxIm7ouS3ihHPPKde4A7SjJQmn0v
pqw8fHp2WuOVj4yyu6U/5OYSYico430Z72fSncHFbffk2Dt/qijR0nDbgOPkYj2O
GJ0Lia6gzUXYZDCxn+E2pp3HG5rYdKIC0uGP2Zw5wR5vy9Vccgh+L43Pj3M1kJjy
b3PbhERhZ5y4ran+zYkMWlF1Eveut85J+fQy9B337sKK4LTnVti2jFR/PAsVrGs1
CESIfCG79ilwg5gycvb0+C/CTNelVGhR06mr5f5ye+1k7UXBFmhlGaHjfqIJzL5u
+7UAkuVJGSAwYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:53:44 2026 by rpki-client