Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: y2WQxI7XjBU2kt9AS/7sZPozBePArNcw96972t+vGfE=
Subject key identifier: 11:76:3B:38:C8:65:15:6B:39:97:D6:0E:9D:DC:23:B4:05:ED:AD:EC
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019D394159D829D66AB3D6B67643C43427E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1756
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: kFzwMOALD1/L96EpZi//5ZCJT21+C5yhYcfK0bxwOQY=)
2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=)
3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:59:d8:29:d6:6a:b3:d6:b6:76:43:c4:34:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=11763b38c865156b3997d60e9ddc23b405edadec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:5a:ec:b1:42:e3:be:2b:91:bb:08:0b:85:
43:3c:ae:80:66:ab:b8:1f:83:63:49:07:03:f2:f7:
9b:74:57:c8:e0:78:1d:73:25:b1:50:80:fe:16:82:
29:5c:04:82:51:6c:24:c3:63:d9:f7:2c:ad:ba:7a:
28:ac:30:a9:35:da:3f:aa:d4:c8:a8:f4:70:12:d9:
1a:49:0a:fe:f5:d1:a8:bd:2e:5b:ea:5f:c5:f7:72:
33:f2:5e:36:1e:c7:a4:bd:fd:5f:32:90:63:63:75:
eb:f7:fe:17:2e:22:ee:fd:f2:5c:58:d8:34:28:c0:
64:31:e6:f4:91:58:80:2a:b9:b5:72:c0:6d:a5:17:
88:92:c2:14:c6:9f:63:ee:28:9a:ee:9d:0d:01:b2:
77:9e:fc:b2:96:9d:fa:0c:d2:87:d5:5f:0c:ea:d1:
e0:65:10:9d:99:28:9c:4e:1c:dc:b9:e4:47:80:86:
ad:3d:25:3f:5d:e1:b7:bc:3d:44:1a:61:4f:b4:3b:
e3:6f:31:1a:8d:46:36:5a:a6:b7:50:40:90:4f:ee:
cd:76:ad:c2:74:e4:74:75:fc:c4:cd:8a:90:b9:ef:
ee:26:53:12:2e:ba:78:9c:fb:84:10:e6:54:cd:ce:
6b:5c:ed:7c:17:0b:91:aa:55:f2:9f:a2:e2:3c:d8:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:3B:38:C8:65:15:6B:39:97:D6:0E:9D:DC:23:B4:05:ED:AD:EC
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:ab:1d:21:a4:e7:e8:dc:3c:e7:cc:a8:85:02:88:bf:a4:
98:fe:7a:aa:b3:95:9f:ee:08:04:20:29:c8:cc:3b:3f:c0:9d:
cd:85:13:3d:6b:cf:ec:72:72:0a:49:1c:cf:9e:0a:c4:5b:ff:
6d:2d:3f:42:df:02:07:78:cd:25:27:1d:9a:e0:9c:a1:fd:69:
72:a1:8d:18:c7:96:e6:a2:9b:ac:ec:72:4b:b6:cb:93:7f:56:
65:40:c4:28:79:bc:78:ea:fb:2e:b8:f2:e2:89:2b:37:4e:a4:
f9:08:2c:a2:c4:69:89:13:e1:d6:d0:95:86:6d:d4:71:fd:3f:
3f:f1:0a:55:0e:26:f3:3c:cf:26:72:68:e6:a7:84:31:ef:00:
78:d0:69:3b:5f:a1:82:b6:ba:9d:54:84:ab:f2:21:fd:e1:4a:
4c:ef:0b:29:37:69:d1:fb:17:19:4c:50:dc:bc:a6:6d:14:bd:
6f:b2:be:2a:a9:65:1a:28:d9:27:ef:32:9d:69:57:0c:4c:ba:
87:31:35:e8:06:d2:c6:a1:64:88:a7:9a:19:45:0c:c4:cc:fb:
19:71:8e:13:87:5a:4a:53:0e:b5:64:fe:c0:35:90:1f:f2:09:
00:7b:86:90:3b:2e:fc:f9:fd:93:bf:db:5f:8d:8d:cd:42:a0:
05:bf:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client