Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: zfcTQNEvLQTGgMxcuJZohptTm6e0WW/ZPExVTagYdTc=
Subject key identifier: 65:0A:36:22:F1:5F:D7:25:20:49:16:16:8B:AC:BE:60:F1:0D:55:D6
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019D371B24E709A3AFB50CBA4E42F4FB70FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0FD5
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: DoAJNqUzFFPJWbJWRM9Uz5R8XD/hV3mD1DOZ0gxx+vs=)
2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:24:e7:09:a3:af:b5:0c:ba:4e:42:f4:fb:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=650a3622f15fd725204916168bacbe60f10d55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:99:32:3c:a5:63:8f:45:57:ff:17:fd:3e:
02:0a:8f:38:bb:af:5e:0f:28:08:c0:5e:bd:eb:54:
87:57:9c:82:13:0f:da:3f:3d:92:86:77:c4:c1:06:
92:6f:09:be:24:6d:62:10:d9:68:99:d2:e6:bf:0b:
e9:6d:d0:e9:00:15:52:c5:03:ff:5e:65:a1:ad:8a:
1e:19:af:2d:e8:64:87:97:61:2a:ae:f3:28:50:05:
29:2b:58:c7:8b:9f:74:49:75:49:b3:47:b0:52:d2:
0e:b9:be:d6:d3:26:57:09:c9:6a:12:1e:42:99:06:
dd:67:a5:8d:05:dc:85:97:5c:6f:28:b4:21:9e:94:
8f:6e:8d:21:a5:b5:e4:0b:98:60:40:f7:4d:c0:b8:
89:db:ca:70:9e:5e:1a:56:47:dc:d9:f7:87:28:90:
06:61:a4:50:6d:ca:22:30:c0:13:ff:12:97:69:8d:
5c:05:46:23:b1:d1:90:cb:50:72:2a:cd:a7:64:b2:
74:8f:e7:c5:39:e4:db:1d:6d:94:a0:85:f4:bc:e9:
2a:3f:2c:11:ae:7f:14:12:74:7e:21:f0:07:3d:ac:
6a:f5:a0:01:5c:a3:60:0b:91:38:30:b7:44:51:b6:
c8:e6:4e:1a:c8:a4:c4:34:8c:22:b9:44:8f:aa:c4:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:36:22:F1:5F:D7:25:20:49:16:16:8B:AC:BE:60:F1:0D:55:D6
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:82:b1:44:20:34:b4:1c:96:83:5d:54:73:b2:e5:76:54:28:
32:c3:6c:92:23:e4:f8:59:2f:f4:99:89:8d:d4:54:42:4c:e3:
34:17:17:d2:db:8e:a9:cc:d5:52:dc:5e:35:38:8c:5b:32:2e:
09:47:cc:7d:72:80:4f:cc:4c:30:f1:e0:0d:2b:db:9d:bb:30:
8d:59:b0:c2:b3:cd:13:f6:ee:cd:07:bc:d8:d2:13:42:d2:db:
0f:a1:b1:ff:04:25:e0:d5:d3:04:eb:c3:5f:a1:e9:e7:01:c4:
d7:b0:b8:51:55:d3:b1:b6:59:c3:8e:17:7b:b8:90:7f:67:11:
a9:09:5d:7c:89:30:4b:b5:47:ec:05:13:81:62:b9:4c:49:af:
1d:de:ed:06:18:9f:0b:fa:d7:c0:73:3f:60:54:5c:ce:f2:13:
d3:b6:72:23:7d:d9:c5:07:85:87:59:92:6c:58:03:08:39:d0:
84:df:fd:a1:65:0b:eb:d5:1a:b9:ab:51:95:92:ef:6f:25:d9:
b8:61:6f:7b:8f:0f:4e:9f:ce:86:64:a6:84:cf:3e:52:9d:06:
b7:b2:fd:b3:9e:85:8e:b7:b8:d6:fb:c2:4e:d4:ae:c3:12:26:
fc:65:ab:5a:42:89:c2:86:43:71:5b:39:0b:bf:b8:67:36:c3:
39:ee:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client