Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: gHmyyhNWsIJ48gH4xZ+xmYZEQroMFY5yzY/RIoqRkG4=
Subject key identifier: 8B:4A:CD:E5:B7:03:74:99:4A:DD:7B:75:2F:35:F9:B2:4E:B1:B9:18
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019F18D6EF82B89ECA9F550DC40C9BEC091C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 1016
Signing time: Tue 30 Jun 2026 14:02:46 +0000
Manifest this update: Tue 30 Jun 2026 14:02:46 +0000
Manifest next update: Wed 01 Jul 2026 14:02:46 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: WRuil029nD4nt7LcMApK67WU1CzyOAIkMotesyx2XN4=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:ef:82:b8:9e:ca:9f:55:0d:c4:0c:9b:ec:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jun 30 14:02:46 2026 GMT
Not After : Jul 1 14:02:46 2026 GMT
Subject: CN=8b4acde5b70374994add7b752f35f9b24eb1b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:fb:48:e5:66:19:41:b4:68:e4:19:11:a5:
0d:bd:60:53:88:2e:80:79:41:ec:dd:29:0e:01:53:
16:89:d3:29:8f:10:c6:ab:a1:8a:a6:ff:d2:41:a3:
bd:2c:4b:30:aa:01:73:61:f8:66:8a:e1:24:03:88:
a7:47:4d:eb:79:01:a1:7f:d7:a7:c0:54:0f:77:76:
2c:dc:9c:f8:2b:c2:ad:da:cd:d9:d5:4a:8f:51:8a:
43:c9:01:71:86:76:f3:62:b3:fa:5b:ea:68:ad:5c:
c6:f1:8c:4f:17:b8:6e:e5:34:3a:80:5c:fe:20:30:
a3:a9:e9:04:21:5e:88:0b:3b:92:22:1d:0f:71:ca:
4a:51:78:be:b1:cd:6b:ed:ef:58:4b:ae:ec:50:18:
e4:65:60:7c:98:88:e7:3e:98:54:90:2e:00:d1:d5:
77:d9:dd:56:cc:0c:ca:cd:b5:88:29:58:c1:a2:e0:
a1:57:86:39:be:d1:55:da:6f:63:7b:22:a0:92:d4:
3c:bb:e1:b8:f0:a9:b0:eb:49:b2:76:0f:9b:e9:26:
f4:d0:35:4b:7a:d5:be:3d:d2:75:26:79:e8:b3:91:
cf:a5:ae:d2:fd:bb:b8:01:02:c3:e7:f8:60:c1:78:
59:53:62:99:9e:c4:77:f2:47:99:65:e4:a5:69:97:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:CD:E5:B7:03:74:99:4A:DD:7B:75:2F:35:F9:B2:4E:B1:B9:18
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:58:5a:e3:f1:e1:82:75:2c:51:a6:46:6f:47:14:27:6a:0d:
ba:6b:7c:7d:0d:fa:8f:15:ad:cf:40:06:bc:df:17:4e:8b:bd:
3a:2d:4b:9d:03:2d:17:22:6b:f8:05:a1:93:29:76:43:1c:08:
36:78:35:0f:0c:5b:22:36:af:ea:9e:f9:89:6c:1d:7b:91:2e:
93:79:39:18:c0:0d:e8:a2:37:a4:a5:eb:67:41:c7:49:73:67:
3c:a5:6d:40:f1:93:23:04:bf:b5:8b:ab:cd:2e:89:52:d3:ce:
95:31:a4:86:59:11:98:b4:98:83:7b:38:cd:d5:28:c0:db:27:
c7:59:7d:82:e2:81:e9:e5:fe:f6:31:41:a1:46:be:1e:6d:bd:
f0:f7:69:51:65:61:8e:da:d6:68:25:9c:98:3d:42:ba:e6:52:
77:f1:5a:e5:8b:97:d4:56:fe:4c:53:ce:48:97:75:3a:e9:54:
28:17:10:05:e8:d6:0a:27:fb:41:2d:c6:5a:33:c0:84:ba:ef:
ea:28:bf:6c:fb:4f:08:84:22:ee:09:e3:80:a9:15:19:bc:6f:
d1:b5:e6:38:fc:02:07:03:e0:d7:54:b8:a2:9f:37:9b:f7:65:
47:e3:59:b4:be:9c:ba:71:f0:e9:93:58:64:07:cd:94:ac:b2:
4d:43:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:41 2026 by rpki-client