Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: lrEVm2tkSUomCka+RVdso8ZJxYr0MDuZKZAj0rznd8M=
Subject key identifier: 63:6E:E9:3D:7F:3B:93:CE:82:2E:C7:AA:5F:80:20:D8:81:71:D9:93
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019D37F75BDED293470F733049EDD65D8921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0F1D
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: aRKCuqeNNA3A0vLLHjI1eUbKsMSMPs3y9+Y9hvnxdgU=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5b:de:d2:93:47:0f:73:30:49:ed:d6:5d:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=636ee93d7f3b93ce822ec7aa5f8020d88171d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:03:75:c1:9c:9e:e0:ae:c2:63:79:95:d2:
e5:75:74:79:5a:ed:41:18:22:67:c8:17:9c:b1:9f:
95:20:2f:3c:65:6d:9d:35:e7:43:7b:58:37:ee:08:
61:cc:f0:f6:d0:89:79:23:be:0d:cd:19:39:0a:dd:
75:a6:ce:11:d2:96:de:1c:50:0b:a5:e5:20:61:5c:
1c:22:5c:c5:1d:3e:fd:69:27:3d:e6:17:f3:d3:60:
24:e8:82:74:ad:5c:09:07:6a:ae:ce:f0:8d:f0:40:
4d:86:92:e3:35:24:31:d6:24:79:d8:24:35:ee:05:
22:a2:d2:2b:db:65:4f:c3:2c:3d:25:60:1f:e7:5f:
84:a2:19:75:16:ab:1b:00:4c:ce:2f:cf:01:df:2b:
92:14:a2:1b:cb:3d:4f:11:69:0a:b7:76:22:92:3b:
41:da:1f:b9:03:0a:41:19:8a:fe:2e:63:04:47:93:
9b:b7:6d:a5:4e:73:38:f9:4c:1f:ca:22:88:cc:40:
ce:2c:1e:d6:33:5d:9b:a3:27:5a:dc:6b:f1:03:61:
7c:fe:74:9a:9c:80:37:55:23:19:48:43:84:2c:3a:
46:e9:75:b4:c0:24:89:a9:17:02:66:48:0c:b0:32:
7c:b4:81:36:37:f9:6e:d6:67:57:d5:69:b0:0d:9a:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:E9:3D:7F:3B:93:CE:82:2E:C7:AA:5F:80:20:D8:81:71:D9:93
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c6:cb:d0:33:fc:af:c9:09:a1:7a:c1:3d:07:f4:d4:70:b9:
0c:dc:44:4e:56:f3:22:6a:25:af:02:f6:e4:a5:e6:48:7e:1d:
a9:8f:0c:62:8c:ca:ef:b7:ec:ae:56:18:49:6b:62:c3:8a:d7:
ff:22:3d:63:99:1f:ae:67:70:99:de:54:92:cb:7a:e8:ed:d1:
08:13:2f:9a:41:8e:9f:69:a5:f8:09:0d:82:3b:eb:b0:f1:a5:
66:96:29:32:03:1f:8c:21:fd:a3:29:f9:3b:2c:50:5c:87:d3:
db:2b:7b:1f:6c:8d:bd:86:21:70:75:aa:3f:d0:87:5f:ba:df:
d8:b6:de:73:70:fa:d5:dc:74:1e:37:5c:6c:a3:48:83:9d:c4:
ea:b8:2b:6d:72:aa:79:bd:80:51:44:9e:1c:df:da:81:07:66:
b9:b2:7a:6d:b7:9c:62:91:7f:00:50:1f:65:81:f6:f9:bc:14:
a1:2b:24:9d:0e:18:af:34:62:d1:d9:e4:80:62:cc:14:0d:a6:
6c:e3:e9:39:26:0b:56:83:00:99:b3:8c:38:2a:2c:63:da:f9:
fd:59:18:a1:42:83:13:6f:82:f7:c5:df:f0:43:b6:53:06:ac:
51:9e:ec:c8:3c:88:77:a9:03:f5:31:ad:bd:8e:8e:bd:17:1d:
aa:40:d3:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391ve0pNHD3MwSe3WXYkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjYwMzI5MDUwMDUwWhcNMjYwMzMwMDUwMDUwWjAzMTEwLwYDVQQD
Eyg2MzZlZTkzZDdmM2I5M2NlODIyZWM3YWE1ZjgwMjBkODgxNzFkOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu8DdcGcnuCuwmN5ldLldXR5Wu1B
GCJnyBecsZ+VIC88ZW2dNedDe1g37ghhzPD20Il5I74NzRk5Ct11ps4R0pbeHFAL
peUgYVwcIlzFHT79aSc95hfz02Ak6IJ0rVwJB2quzvCN8EBNhpLjNSQx1iR52CQ1
7gUiotIr22VPwyw9JWAf51+Eohl1FqsbAEzOL88B3yuSFKIbyz1PEWkKt3YikjtB
2h+5AwpBGYr+LmMER5Obt22lTnM4+UwfyiKIzEDOLB7WM12boyda3GvxA2F8/nSa
nIA3VSMZSEOELDpG6XW0wCSJqRcCZkgMsDJ8tIE2N/lu1mdX1WmwDZrNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNu6T1/O5POgi7Hql+AINiBcdmTMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcbL0DP8
r8kJoXrBPQf01HC5DNxETlbzImolrwL25KXmSH4dqY8MYozK77fsrlYYSWtiw4rX
/yI9Y5kfrmdwmd5Ukst66O3RCBMvmkGOn2ml+AkNgjvrsPGlZpYpMgMfjCH9oyn5
OyxQXIfT2yt7H2yNvYYhcHWqP9CHX7rf2Lbec3D61dx0HjdcbKNIg53E6rgrbXKq
eb2AUUSeHN/agQdmubJ6bbecYpF/AFAfZYH2+bwUoSsknQ4YrzRi0dnkgGLMFA2m
bOPpOSYLVoMAmbOMOCosY9r5/VkYoUKDE2+C98Xf8EO2UwasUZ7syDyId6kD9TGt
vY6OvRcdqkDTBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:13 2026 by rpki-client