Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: eyQaPG85tHpEqk8tyUjBp2NIYIaO2yeK20xNgKksVpY=
Subject key identifier: 7A:E3:B1:60:2E:FC:E9:46:0A:3C:F0:8D:77:BE:87:A8:93:61:BF:3C
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 019D265EEB26C55E6839987AC6CFE8AAC360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 12FE
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: Mxiw2E7Lrrn9JhZcj1kTPcS1nmVCnEvF3gmT2lpSLtg=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:eb:26:c5:5e:68:39:98:7a:c6:cf:e8:aa:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=7ae3b1602efce9460a3cf08d77be87a89361bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:8d:7e:46:12:b0:a0:1e:49:58:86:0f:f3:
41:81:73:71:49:e8:14:33:1e:25:5c:7e:50:64:84:
1e:6f:e9:08:fa:dd:e2:d6:98:09:87:93:b3:8c:87:
3a:28:48:a6:74:4a:81:89:ac:48:e0:94:16:7e:ab:
98:e1:0c:27:76:f3:c4:8e:27:e8:12:40:9e:11:b0:
b2:76:80:b2:5b:24:0f:f8:8e:4f:27:c2:d8:a8:51:
08:9d:7f:94:89:1b:1a:bf:f5:1f:27:e2:cd:da:0d:
fe:46:1b:9c:92:e1:75:97:c2:c0:e2:60:ed:f4:32:
57:f7:bb:d8:e3:12:a8:3a:61:32:00:3c:62:19:f5:
d5:2b:e8:5e:c8:37:a4:8f:8e:6b:da:15:75:70:10:
aa:77:db:e2:e5:c7:3b:07:ab:99:03:0f:f0:b9:e6:
e5:16:79:47:15:9a:da:35:57:35:d2:fe:85:3b:9f:
91:40:d9:a4:02:6c:81:05:03:75:7c:fa:5f:94:41:
8f:2d:d0:77:48:49:3c:f9:97:76:89:3b:4d:17:25:
ff:90:b7:3f:b7:24:0b:4b:ea:d6:5b:b7:98:1d:ea:
f1:22:9c:13:4b:4c:eb:cf:27:85:30:95:46:b1:cf:
1f:34:be:66:e7:f6:c3:22:c8:5e:7a:87:21:b3:c2:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:B1:60:2E:FC:E9:46:0A:3C:F0:8D:77:BE:87:A8:93:61:BF:3C
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7d:ab:23:ec:f0:0a:9d:94:5e:ee:84:ad:25:ec:f2:dd:9c:
e1:98:71:60:7f:f0:2a:24:de:d2:a1:c9:36:bf:8a:7f:2b:c9:
0b:6b:d9:ae:dc:a8:2b:8b:84:4e:43:df:bf:ad:b9:3b:a5:54:
a7:40:d8:f8:b7:8c:11:29:78:2e:55:50:d5:f4:53:ed:40:ae:
ad:07:fa:2c:64:68:85:48:e4:d5:57:9b:58:b5:e1:10:f5:f1:
63:bb:5a:3d:96:8d:de:63:42:41:c5:33:76:fd:d3:14:00:f8:
9d:9a:3f:a5:4a:d7:56:ce:46:02:6f:09:e3:b0:c3:3f:7b:d0:
f4:64:b8:4a:3d:50:82:4f:58:df:4d:78:90:9b:da:7e:f2:6f:
83:60:5a:4e:bf:da:ac:fe:63:48:06:c4:18:46:31:d3:6e:68:
46:3a:11:23:81:ee:e9:81:99:33:4e:be:d9:21:c7:7e:89:28:
b0:30:a0:ae:b3:f8:40:a8:45:fc:5a:82:93:5b:42:31:7f:e3:
b7:10:b6:d8:85:5f:be:4b:5e:d2:8b:81:d4:26:50:a5:e3:60:
5a:f9:09:8b:9c:78:a6:1e:4e:20:19:19:59:9f:58:a0:07:a4:
a1:32:5b:4c:10:02:80:16:69:57:ca:46:d7:c5:f5:25:74:51:
4f:3e:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:40 2026 by rpki-client