Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: GGBKAWjsfAoiAMPRTmaPNVj6vXHzFaWhYvT99cLlhlU=
Subject key identifier: 93:2E:31:3D:CB:D9:26:63:CD:42:CE:0D:1F:3F:36:67:36:06:58:B4
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 01A0CEFEF093D05D498762F1C040DAC50F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 14E3
Signing time: Wed 23 Sep 2026 16:00:09 +0000
Manifest this update: Wed 23 Sep 2026 16:00:09 +0000
Manifest next update: Thu 24 Sep 2026 16:00:09 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: rJHVPm6LlW1CtRN4onBV+6y/L+fQwwImShGXQ1quBYs=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:f0:93:d0:5d:49:87:62:f1:c0:40:da:c5:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Sep 23 16:00:09 2026 GMT
Not After : Sep 24 16:00:09 2026 GMT
Subject: CN=932e313dcbd92663cd42ce0d1f3f3667360658b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:b5:b3:1b:3e:ea:72:0a:59:72:8c:dd:7f:
ef:9e:93:22:4f:54:ee:08:b7:d6:40:73:5d:cd:6b:
0c:02:13:24:b4:2f:a8:67:a5:36:02:0e:33:a3:e9:
9a:d2:a8:57:71:a9:bc:3a:af:4b:27:13:6c:07:5d:
bd:e0:15:6c:b6:1b:0f:91:31:dc:af:7d:3c:43:14:
c2:90:20:d5:26:6a:d1:d0:4c:06:6b:5f:20:5b:27:
0d:82:66:9a:13:73:07:45:f3:37:79:37:ea:dd:4d:
4e:d3:a5:5f:11:e2:f5:cf:e5:24:61:98:3f:b0:7c:
e4:31:20:d1:c1:5e:50:68:80:e0:07:1b:c5:c8:f0:
4c:da:5e:2b:98:1c:71:76:0f:83:f6:55:c7:ba:c6:
b4:aa:ba:3a:d8:29:44:a1:6e:3a:58:96:50:bf:d4:
ac:7f:ce:6a:7c:4a:7c:d6:f3:82:1d:fd:81:87:8e:
b8:3d:03:a2:79:22:08:71:a8:68:08:0d:4d:37:df:
69:48:3b:07:32:a6:d0:83:b0:17:fc:90:b2:69:b3:
0e:20:9c:c0:4a:46:27:74:4e:7a:f2:71:fd:e8:11:
81:9d:aa:84:66:16:de:b0:a0:7b:82:5d:18:8c:d8:
19:ee:27:5f:d8:d8:c0:86:3c:4a:b4:6b:44:07:6f:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:31:3D:CB:D9:26:63:CD:42:CE:0D:1F:3F:36:67:36:06:58:B4
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:c5:68:2d:e9:0d:dc:d8:52:a9:c6:40:4a:8d:2d:a4:d1:
84:2a:16:21:77:4f:db:88:8f:60:c0:5a:d5:a4:dd:4b:9e:9a:
ff:62:ce:39:fb:1f:13:25:16:e7:1b:11:fe:ec:08:28:5f:43:
aa:5f:40:40:46:1c:b8:5d:d3:26:f9:a3:cb:ef:2d:15:b3:60:
20:7c:a7:c0:25:fc:d2:d9:f0:fb:be:0c:61:e2:fb:2c:86:ea:
91:22:70:a8:43:5c:65:b3:5b:f0:fb:05:56:69:35:56:94:73:
e1:29:ef:cd:c9:d9:4e:59:b0:78:0c:0e:4a:a7:85:88:ca:e7:
e3:14:27:8e:a4:0d:56:a0:e2:14:34:7c:6f:03:e4:4c:45:1b:
5c:29:d2:3d:9b:7a:de:d3:40:dc:55:28:5b:f0:fb:00:d9:41:
46:38:f0:ae:08:bc:ad:57:cb:9e:86:00:8c:c4:ae:07:b6:6e:
a1:3d:8c:07:f0:5e:15:f8:9e:c8:8a:e3:ba:c7:6c:2e:7a:c9:
75:73:16:5b:fc:7b:37:1b:f1:c1:27:50:6c:b5:c7:2c:8d:6b:
1e:2c:1d:41:7b:0f:00:3a:bd:c1:be:fd:e1:a1:a6:8c:4e:67:
bc:8d:20:05:74:b2:eb:96:9a:47:cb:b6:72:ab:09:ce:6e:fe:
2b:e1:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:13 2026 by rpki-client