Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: L3z4Bh0a6G22U8EcTTVOLnNJ9KrXUUFLVrl70V4J1Zw=
Subject key identifier: AB:98:C6:65:CC:5E:BE:74:D1:D1:AE:8E:E2:36:00:80:42:9C:14:B0
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 01A13F7042466BC8BAB3C54954E9C83869F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0BAB
Signing time: Thu 15 Oct 2026 12:01:23 +0000
Manifest this update: Thu 15 Oct 2026 12:01:23 +0000
Manifest next update: Fri 16 Oct 2026 12:01:23 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: rtqFiqUWdrRkrkOn3OAY4BtqVh1kJOeSoW1P5CpqU70=)
2: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (hash: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:42:46:6b:c8:ba:b3:c5:49:54:e9:c8:38:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Oct 15 12:01:23 2026 GMT
Not After : Oct 16 12:01:23 2026 GMT
Subject: CN=ab98c665cc5ebe74d1d1ae8ee2360080429c14b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:72:00:f6:67:69:af:b8:15:eb:0d:f8:79:
d6:53:df:23:1b:14:2f:f3:ee:bb:70:1a:60:5c:90:
f1:ac:fe:3f:0e:8d:97:bf:5e:d6:8d:ad:8c:48:9e:
5d:09:91:42:25:a6:48:09:d9:fc:f2:a3:bf:59:69:
a1:7a:ce:a9:9b:41:82:85:7f:5e:5b:0f:36:72:cd:
95:a0:0d:5e:16:07:f5:02:40:07:2b:fa:9a:da:09:
0b:f0:53:e6:2f:e8:d0:71:3d:80:e4:ed:14:00:65:
0a:f9:28:09:5c:39:a9:40:36:fc:ea:22:75:e1:de:
7f:6f:34:0a:e8:2b:a7:b0:6f:02:59:c1:57:ec:0b:
b7:13:42:ff:14:d0:e9:6f:32:f3:7b:44:c8:c6:9d:
d9:93:cf:a2:33:04:ac:40:67:9b:57:b2:9e:e0:e9:
06:b2:b8:41:c9:a3:32:e3:8b:ca:e6:58:ae:ce:3c:
d7:55:f9:02:c3:3e:33:0c:cd:64:c9:98:ef:e9:80:
58:a3:93:48:a3:52:33:b5:af:c5:12:01:04:3e:c5:
7f:0b:12:be:73:2a:4e:a9:b1:95:3a:a8:b6:8e:fb:
0b:2a:b3:77:b5:3b:a8:96:57:25:57:85:59:5c:1a:
ec:4c:bb:8c:d8:c8:8c:c1:a3:43:ca:fb:f0:aa:f0:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:C6:65:CC:5E:BE:74:D1:D1:AE:8E:E2:36:00:80:42:9C:14:B0
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:69:59:97:95:d5:99:e8:20:3c:2e:af:7a:67:06:29:cf:d9:
b3:b3:ae:17:31:92:f1:c9:ab:f7:62:08:69:02:33:c7:c0:89:
c0:a8:16:76:cf:5d:17:6c:9f:91:a3:32:9b:ab:e7:21:e4:d2:
bb:d5:78:0f:0f:15:ff:5b:87:e5:03:85:e3:5c:c0:fd:45:34:
c7:c4:9f:39:d2:ce:e1:02:7c:c3:3b:79:75:e4:aa:ce:7a:84:
e7:bc:f9:97:07:a1:94:bf:54:56:56:6c:6d:18:73:16:74:12:
49:e7:15:2f:e3:d4:45:8f:9a:2f:15:95:66:ff:c6:5a:5a:6f:
1b:36:7e:86:b0:14:5c:10:14:0c:6d:67:d9:7b:a4:22:ee:bc:
e2:ea:b0:c7:82:13:3c:9b:61:82:7f:95:8b:20:03:7c:37:a8:
25:48:36:41:5e:19:92:cb:31:76:92:dd:5d:d4:d9:2c:ea:80:
fa:9f:e2:18:6c:eb:ea:2a:4c:b6:27:3a:b7:7a:1c:ab:09:52:
94:d4:1f:52:e6:ad:67:7b:93:80:42:a6:ce:2e:2f:62:13:14:
54:0b:8d:71:ea:c7:c3:2d:28:61:9e:d9:93:93:30:83:a2:0d:
ca:4a:6d:4f:b6:f8:5f:9a:03:2c:a2:d8:8c:79:b0:0d:04:cf:
a6:74:81:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cEJGa8i6s8VJVOnIOGnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTg0MzAzMjE2NGUwYjYyZWQ2ZGE3YzY3NTU3YmY0Njg5
NWQwZjAwHhcNMjYxMDE1MTIwMTIzWhcNMjYxMDE2MTIwMTIzWjAzMTEwLwYDVQQD
EyhhYjk4YzY2NWNjNWViZTc0ZDFkMWFlOGVlMjM2MDA4MDQyOWMxNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sRyAPZnaa+4FesN+HnWU98jGxQv
8+67cBpgXJDxrP4/Do2Xv17Wja2MSJ5dCZFCJaZICdn88qO/WWmhes6pm0GChX9e
Ww82cs2VoA1eFgf1AkAHK/qa2gkL8FPmL+jQcT2A5O0UAGUK+SgJXDmpQDb86iJ1
4d5/bzQK6CunsG8CWcFX7Au3E0L/FNDpbzLze0TIxp3Zk8+iMwSsQGebV7Ke4OkG
srhByaMy44vK5liuzjzXVfkCwz4zDM1kyZjv6YBYo5NIo1Izta/FEgEEPsV/CxK+
cypOqbGVOqi2jvsLKrN3tTuollclV4VZXBrsTLuM2MiMwaNDyvvwqvDWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuYxmXMXr500dGujuI2AIBCnBSwMB8GA1UdIwQY
MBaAFNgYQwMhZOC2LtbafGdVe/RoldDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUt
NjVkMzczYWI1NzNmLzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUtNjVkMzczYWI1NzNm
LzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2lZl5XV
meggPC6vemcGKc/Zs7OuFzGS8cmr92IIaQIzx8CJwKgWds9dF2yfkaMym6vnIeTS
u9V4Dw8V/1uH5QOF41zA/UU0x8SfOdLO4QJ8wzt5deSqznqE57z5lwehlL9UVlZs
bRhzFnQSSecVL+PURY+aLxWVZv/GWlpvGzZ+hrAUXBAUDG1n2XukIu684uqwx4IT
PJthgn+ViyADfDeoJUg2QV4ZkssxdpLdXdTZLOqA+p/iGGzr6ipMtic6t3ocqwlS
lNQfUuatZ3uTgEKmzi4vYhMUVAuNcerHwy0oYZ7Zk5Mwg6INykptT7b4X5oDLKLY
jHmwDQTPpnSBlQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:59 2026 by rpki-client