Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: D+GF9qaUNwBmOiIwdsoPa2pka0e3RPTY3UPcvGxUJGA=
Subject key identifier: AD:58:77:B3:4B:FA:DA:6E:2F:31:F8:26:63:BD:C6:6E:34:C2:7B:49
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 01A13D4A11EC2239C6933A3941733F5F6936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 1132
Signing time: Thu 15 Oct 2026 02:00:26 +0000
Manifest this update: Thu 15 Oct 2026 02:00:26 +0000
Manifest next update: Fri 16 Oct 2026 02:00:26 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 18DmQK/N2qj2JJVri3ymFkGe3qhLKEvN1GGixPlV2o4=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:11:ec:22:39:c6:93:3a:39:41:73:3f:5f:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Oct 15 02:00:26 2026 GMT
Not After : Oct 16 02:00:26 2026 GMT
Subject: CN=ad5877b34bfada6e2f31f82663bdc66e34c27b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:1c:88:65:85:a3:45:34:4c:e5:c4:1e:8f:
cf:47:d1:ca:0c:4f:b0:51:af:13:81:69:91:7d:ee:
7b:e4:28:01:fb:d1:c9:ab:48:9a:cd:50:1e:5b:6c:
56:30:3d:97:f2:c3:81:50:96:3b:21:e4:83:e8:0f:
ed:ee:1a:f4:88:9d:88:29:ab:9c:3d:77:39:c8:7a:
93:f8:5d:30:46:bf:01:c4:c3:b4:1e:d3:3e:51:89:
16:05:8a:80:c6:3d:42:3d:8c:79:4e:4a:b0:29:b8:
3a:f4:44:a1:d1:a8:c5:f5:f3:b2:c7:f2:e1:2e:f7:
34:5b:73:23:8b:6f:7a:b4:75:d3:55:f5:71:ef:49:
c8:b3:51:6d:77:5f:f3:aa:d1:1d:99:d2:2c:eb:bd:
7a:25:c3:54:f8:27:19:c6:f8:9d:d8:46:8c:76:0d:
06:63:93:62:ee:09:ee:36:7f:75:35:29:ff:46:2b:
1b:ed:bf:ee:cc:e7:24:60:80:33:35:82:f8:f1:62:
2d:30:30:be:ef:5f:cf:5d:6e:f8:61:75:15:91:2e:
67:20:2e:22:7d:27:c7:71:52:00:65:e8:d9:b5:11:
76:d9:99:f6:37:42:db:73:32:18:16:3b:a2:31:6c:
ba:d3:59:33:16:45:e4:be:f3:52:c6:5e:00:c2:5d:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:77:B3:4B:FA:DA:6E:2F:31:F8:26:63:BD:C6:6E:34:C2:7B:49
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:0f:a6:df:4c:24:36:87:51:4c:bd:9b:a4:0e:f4:8b:0f:
ff:04:7e:a6:6d:d6:f4:7e:3a:5a:dd:94:40:ed:fe:a8:52:ec:
4a:74:08:0f:48:9a:48:05:7a:2a:87:10:ff:b6:41:59:52:e4:
cf:10:9c:31:6a:32:a3:3d:2a:25:31:10:d4:7d:c3:08:aa:07:
d6:a7:b8:88:32:85:e8:ee:79:79:b4:af:fc:c7:fb:38:b6:a2:
18:a4:92:76:18:68:4f:0e:fb:0c:bc:96:70:86:53:a0:09:2a:
2e:b3:5c:73:e3:5e:17:e7:54:b5:bc:18:6e:c8:96:4a:15:37:
3b:af:de:17:db:d2:e0:a6:01:2e:09:13:3d:df:71:1b:65:50:
15:54:c4:4f:2b:44:49:75:cd:16:ac:ea:61:e6:bf:30:de:f1:
76:1a:c1:f9:8b:18:99:85:5e:52:3c:95:c0:3f:cc:9c:d2:d3:
14:ba:20:3b:15:a3:1a:f0:dc:ef:83:91:bc:4a:e9:1f:6f:7d:
75:ab:fb:e6:2c:41:3f:fa:c4:a0:dc:95:a8:d2:e6:3f:43:83:
22:d5:c6:93:0f:e5:5e:85:c0:fd:a9:e6:49:9a:6f:38:7e:67:
85:f4:9d:32:5b:15:4a:89:8d:99:fb:7f:c0:3a:ad:07:6b:fd:
61:39:aa:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9ShHsIjnGkzo5QXM/X2k2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjYxMDE1MDIwMDI2WhcNMjYxMDE2MDIwMDI2WjAzMTEwLwYDVQQD
EyhhZDU4NzdiMzRiZmFkYTZlMmYzMWY4MjY2M2JkYzY2ZTM0YzI3YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp38ciGWFo0U0TOXEHo/PR9HKDE+w
Ua8TgWmRfe575CgB+9HJq0iazVAeW2xWMD2X8sOBUJY7IeSD6A/t7hr0iJ2IKauc
PXc5yHqT+F0wRr8BxMO0HtM+UYkWBYqAxj1CPYx5TkqwKbg69ESh0ajF9fOyx/Lh
Lvc0W3Mji296tHXTVfVx70nIs1Ftd1/zqtEdmdIs6716JcNU+CcZxvid2EaMdg0G
Y5Ni7gnuNn91NSn/Risb7b/uzOckYIAzNYL48WItMDC+71/PXW74YXUVkS5nIC4i
fSfHcVIAZejZtRF22Zn2N0LbczIYFjuiMWy601kzFkXkvvNSxl4Awl1leQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Yd7NL+tpuLzH4JmO9xm40wntJMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+APpt9M
JDaHUUy9m6QO9IsP/wR+pm3W9H46Wt2UQO3+qFLsSnQID0iaSAV6KocQ/7ZBWVLk
zxCcMWoyoz0qJTEQ1H3DCKoH1qe4iDKF6O55ebSv/Mf7OLaiGKSSdhhoTw77DLyW
cIZToAkqLrNcc+NeF+dUtbwYbsiWShU3O6/eF9vS4KYBLgkTPd9xG2VQFVTETytE
SXXNFqzqYea/MN7xdhrB+YsYmYVeUjyVwD/MnNLTFLogOxWjGvDc74ORvErpH299
dav75ixBP/rEoNyVqNLmP0ODItXGkw/lXoXA/anmSZpvOH5nhfSdMlsVSomNmft/
wDqtB2v9YTmqDA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:36 2026 by rpki-client