Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
File: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft (raw, json)
Hash identifier: AyaVYt+ezS7n5Fd+hbfsCNqAk3GCq55kxVexLMjHgjs=
Subject key identifier: 04:FE:FF:75:AF:D6:0D:6B:1A:98:FE:92:AD:41:C0:F7:84:0A:19:E2
Authority key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
Certificate issuer: /CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Certificate serial: 5F66973D48B79216AB3EA4999FE27AA7CC702B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
Manifest number: DE
Signing time: Fri 27 Mar 2026 19:52:09 +0000
Manifest this update: Fri 27 Mar 2026 19:47:09 +0000
Manifest next update: Sat 28 Mar 2026 22:59:09 +0000
Files and hashes: 1: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl (hash: /v4uHfhTEyi0Os7wh3jR3wlXgyZ2IvWHkUqkYftrn0o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 22:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:66:97:3d:48:b7:92:16:ab:3e:a4:99:9f:e2:7a:a7:cc:70:2b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Validity
Not Before: Mar 27 19:47:09 2026 GMT
Not After : Mar 28 22:59:09 2026 GMT
Subject: CN=04FEFF75AFD60D6B1A98FE92AD41C0F7840A19E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:f6:e2:43:f8:12:ad:c8:da:fd:7f:ae:b0:
ce:cf:65:8a:8c:60:43:85:4a:28:67:26:13:eb:0c:
99:81:af:06:8e:40:46:6f:b7:8d:d5:47:f8:16:bf:
58:db:95:b0:e6:f3:1a:e8:13:04:bd:81:de:3b:b7:
fa:2b:fe:54:a3:ab:8a:32:9a:84:b4:f6:95:03:70:
c6:b1:12:cd:67:58:f0:f7:3f:1d:e2:6e:84:c9:d9:
57:a0:07:80:56:52:d6:36:9d:c1:f0:19:8d:da:ee:
81:8c:f2:b4:da:de:9c:1e:73:64:bd:f7:f7:3c:ca:
2f:d0:8e:0b:a0:df:44:bb:4f:fe:ec:f6:07:94:04:
63:18:c3:76:31:c1:98:45:1f:b3:c8:c9:0c:4f:0e:
36:ac:27:67:10:51:34:ff:04:4f:81:b9:62:c2:c2:
8b:8f:e8:49:ec:c3:cf:29:23:2f:d1:69:49:e8:d0:
20:3c:03:53:57:d0:0d:8d:ea:92:e4:c3:da:b4:9a:
99:3a:85:eb:c2:63:c1:dc:aa:d8:20:5d:f2:86:b3:
85:d1:5d:d3:c4:46:87:4f:fb:fd:f0:a5:8c:3c:27:
16:18:c4:a2:bc:e2:0c:1f:11:26:3b:5c:b0:73:c0:
fc:46:53:8a:31:c1:b1:ab:a0:c3:3b:d7:ac:f5:d2:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:FF:75:AF:D6:0D:6B:1A:98:FE:92:AD:41:C0:F7:84:0A:19:E2
X509v3 Authority Key Identifier:
keyid:2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:c6:01:c5:15:68:5e:75:6c:a4:cd:90:12:2e:69:87:b4:
4c:39:c3:85:a1:f0:48:12:7e:ae:ea:ef:ce:f0:7d:4e:b0:f2:
7c:3b:03:41:55:6f:39:73:91:75:a0:68:0a:b1:1d:5e:b5:85:
6e:61:ad:d4:b8:d3:55:df:97:6c:91:ba:b2:69:55:05:de:a7:
52:86:ef:00:39:85:aa:b7:d7:f8:76:af:40:e7:c2:61:0e:17:
50:29:43:23:0b:42:57:a9:29:9f:00:55:04:60:ad:85:22:d7:
2d:fe:01:bc:bb:98:72:02:d9:b4:6b:d9:2d:51:c3:c6:cc:86:
ef:21:b8:48:15:7e:2a:75:4a:56:f2:b3:75:90:d0:e9:c5:11:
ce:cc:8d:e9:d2:1e:0c:d7:a1:89:72:8b:e9:08:00:bb:9f:13:
65:fb:af:7e:1b:51:73:92:99:7f:87:01:73:7f:11:2f:cf:3c:
9f:13:6f:e0:a6:97:03:2f:ab:d8:1a:33:ef:60:ee:3a:d1:8c:
24:28:ab:5e:76:d4:93:a5:e5:41:f3:b2:95:11:02:da:de:6b:
47:85:4f:f4:bd:9f:ad:3a:63:38:21:6b:2c:d1:dd:e9:ad:e5:
7d:cb:66:26:a8:ce:b8:6d:39:00:00:44:5d:e5:2f:5d:2d:48:
e2:b1:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:57 2026 by rpki-client