Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: NLLOuI7pj0pD4Vl5zbLHa6e2gtE/zhQpZ/NkPvFngHw=
Subject key identifier: 17:D6:EF:84:A8:AC:20:F5:14:85:18:34:AA:2C:84:D5:BE:C6:38:FD
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019E31173503AE09E9FBA40523AE9140EBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0F9E
Signing time: Sat 16 May 2026 14:01:04 +0000
Manifest this update: Sat 16 May 2026 14:01:04 +0000
Manifest next update: Sun 17 May 2026 14:01:04 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: zVrlESoBui/UOt7Sv4IOgLCm7mhvuUURSBPrIWNo8yY=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:35:03:ae:09:e9:fb:a4:05:23:ae:91:40:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: May 16 14:01:04 2026 GMT
Not After : May 17 14:01:04 2026 GMT
Subject: CN=17d6ef84a8ac20f514851834aa2c84d5bec638fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:15:5d:c8:5e:12:8e:dc:d3:c9:12:3c:3f:
3d:14:3c:59:c3:d5:00:d6:e0:85:62:20:9b:5f:93:
98:8a:1e:e1:ee:50:6f:a2:f4:99:d7:c8:b1:5c:a5:
49:4f:de:93:cd:0c:8c:f9:e9:fa:ec:ff:6c:6c:16:
4f:97:ac:a1:9d:a8:de:77:c6:fa:54:f3:bb:ed:95:
d9:5e:89:14:2f:c3:11:f0:cd:4b:8a:f5:16:aa:1f:
b6:e1:7a:de:98:f7:d2:b2:79:62:a4:26:5e:4b:13:
71:83:94:b3:1f:84:55:5e:8c:b9:cb:a4:cc:40:d2:
45:d6:04:0f:73:15:97:42:1b:9d:fe:8d:07:7c:af:
b8:10:1e:47:2f:b8:65:9c:29:d4:ee:68:91:c6:d2:
bf:35:9e:bd:b5:15:c3:10:c1:10:f9:9f:33:77:a2:
c2:53:10:cf:1b:e1:b6:12:a3:8f:1c:b6:8e:1f:d0:
7c:1e:4e:1c:4b:d3:37:ab:1b:fb:cf:15:6d:c0:6a:
01:eb:a2:ae:f2:37:d7:ac:cd:1b:7d:4a:c3:73:7b:
71:7e:db:f5:9f:bc:3c:39:e5:a0:bc:63:e5:45:5e:
3a:ab:d4:8e:28:53:ab:90:2f:b3:dc:66:ba:83:7c:
04:d1:9c:2b:63:b4:d1:51:ec:5e:31:ec:2a:8a:e4:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:EF:84:A8:AC:20:F5:14:85:18:34:AA:2C:84:D5:BE:C6:38:FD
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e0:66:d2:85:87:86:33:7e:98:54:48:fd:b1:48:a2:0d:d1:
5d:74:84:27:71:50:49:cc:c1:a0:16:04:67:8c:54:64:63:20:
14:98:7a:a1:a8:56:a5:b1:63:6f:85:5d:16:30:6c:33:68:e7:
c4:ed:6f:5b:b6:09:f2:9c:8a:e9:1e:8f:91:43:bb:9a:07:2c:
74:98:ec:ed:d0:3d:66:b5:a1:93:97:cc:f0:a7:3b:91:70:b0:
d1:5d:58:b1:cc:57:68:f9:48:f8:71:2e:57:6c:a3:5b:b7:c4:
a3:2e:94:08:d3:8b:d2:2b:8d:08:cf:56:35:c0:53:72:0d:49:
84:f2:e8:6e:7a:7f:73:82:ef:e1:cb:34:e1:4e:de:52:04:bf:
df:89:4f:6c:d2:ce:5e:2d:7a:d2:08:78:1e:ac:8a:d9:32:a1:
f5:71:6f:03:9a:5b:ba:28:45:e1:e3:94:25:98:f7:b2:8d:85:
20:d2:97:8a:1b:5f:38:72:3b:6c:c8:33:57:02:1e:fe:d1:ef:
20:b6:f9:8e:31:23:ff:d4:39:9b:52:59:81:aa:4a:be:46:d8:
2c:26:3c:2c:b9:df:78:ec:97:65:9c:32:d2:bf:e6:62:b1:7b:
0c:34:1f:bf:47:e6:1b:83:85:cf:2a:dc:87:0c:1b:bd:42:c2:
42:0e:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:51 2026 by rpki-client