Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: oZ1e8LEQFvv0zi+K5VvXBgAMnMr4MRJWU/gZV1gsP/U=
Subject key identifier: 15:80:EB:8D:AA:BD:A2:EF:DD:36:B1:DC:F4:0A:04:B1:1C:DE:5E:F8
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019D375233B186357F9B4D8079CD5E4A261C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 04B4
Signing time: Sun 29 Mar 2026 02:00:26 +0000
Manifest this update: Sun 29 Mar 2026 02:00:26 +0000
Manifest next update: Mon 30 Mar 2026 02:00:26 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: zico5xUJaOvTnStKAKsrxJRGdKF/cYC/V3i3X5VJy44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:33:b1:86:35:7f:9b:4d:80:79:cd:5e:4a:26:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Mar 29 02:00:26 2026 GMT
Not After : Mar 30 02:00:26 2026 GMT
Subject: CN=1580eb8daabda2efdd36b1dcf40a04b11cde5ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:3c:e0:58:fb:41:79:83:35:62:36:09:67:
1c:fa:15:e7:68:71:7e:c4:96:7b:01:d5:a9:fd:a5:
f0:ec:db:34:57:cf:e2:c3:71:4e:fe:6f:42:a0:50:
73:f2:b3:5f:eb:8b:36:58:39:69:5d:5c:58:e7:e9:
6f:3e:d8:44:44:d3:0f:58:0f:c3:e7:d0:8b:13:74:
f2:6a:bc:71:d2:5e:b7:17:8d:e9:99:96:fb:e6:58:
fc:84:c5:12:5f:45:71:3f:3a:31:88:cd:44:03:4c:
91:7b:08:46:85:24:6e:02:89:72:ea:74:2c:dc:85:
dc:bd:d0:d5:e8:ba:14:29:24:26:3b:f0:a4:92:d1:
c2:10:a6:6e:73:a9:40:94:b2:00:7d:4f:9e:ff:d5:
93:a4:c5:8c:59:08:73:5f:d6:bf:4b:df:d3:14:21:
fd:a1:af:23:5a:d6:b0:c5:c8:98:3b:f8:b8:9e:6c:
61:68:ad:7a:65:8d:54:66:02:b6:c8:49:a1:da:26:
e6:b2:7c:88:8e:4b:62:06:93:79:b1:42:4b:26:92:
8b:94:6e:30:76:9b:ef:ba:54:ee:34:e2:92:5c:29:
f9:93:ad:d5:b6:50:9b:d4:7b:54:1d:c7:39:c9:bd:
02:d7:38:ad:08:10:1e:6c:b5:c3:d5:92:54:10:4c:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:EB:8D:AA:BD:A2:EF:DD:36:B1:DC:F4:0A:04:B1:1C:DE:5E:F8
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:98:07:b9:76:61:08:55:42:41:29:20:32:5e:5c:43:bd:86:
5c:59:a7:e4:b1:ba:af:5d:ed:34:80:fb:eb:1a:35:b4:89:5e:
83:50:a3:0b:11:e5:c8:e6:7c:92:52:74:24:7b:42:67:f1:12:
76:81:ea:4c:80:64:fc:00:ab:fe:41:a0:05:38:be:20:dd:8d:
36:42:e4:f2:eb:24:ed:1f:3d:ca:41:16:df:da:7b:2a:ec:64:
61:3b:63:fc:43:2c:c8:e0:fc:db:82:95:d8:e7:cc:e9:d3:fc:
cd:d3:c9:1b:35:92:9b:60:89:99:70:8f:bd:6d:56:bb:e6:a9:
49:5d:fc:be:54:81:69:55:c1:41:22:7c:05:74:cf:7f:48:03:
cb:3a:60:dc:0b:1d:32:c1:af:f9:65:5c:b7:9c:fe:56:cd:e0:
86:b5:bc:12:11:25:a3:d8:21:da:3d:58:9f:cf:70:7e:f1:d3:
eb:1e:ac:df:0b:06:a2:81:8f:b5:7a:d0:04:cf:84:8d:5a:7f:
7a:c2:05:66:47:37:59:af:24:82:4b:30:a3:f8:e8:05:1d:46:
70:e3:f4:38:4b:d3:ab:2d:c0:2d:b3:4c:1b:e9:45:34:70:d2:
5f:bb:71:c6:a8:d4:20:25:e0:ca:3a:34:17:d5:d5:d7:4f:04:
22:26:92:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UjOxhjV/m02Aec1eSiYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmY2MWQ1YzU4ZTZlYTZlYzVjZjdlZTZjZjM1M2E2NjNi
MWIzYTgwHhcNMjYwMzI5MDIwMDI2WhcNMjYwMzMwMDIwMDI2WjAzMTEwLwYDVQQD
EygxNTgwZWI4ZGFhYmRhMmVmZGQzNmIxZGNmNDBhMDRiMTFjZGU1ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5M84Fj7QXmDNWI2CWcc+hXnaHF+
xJZ7AdWp/aXw7Ns0V8/iw3FO/m9CoFBz8rNf64s2WDlpXVxY5+lvPthERNMPWA/D
59CLE3Tyarxx0l63F43pmZb75lj8hMUSX0VxPzoxiM1EA0yRewhGhSRuAoly6nQs
3IXcvdDV6LoUKSQmO/CkktHCEKZuc6lAlLIAfU+e/9WTpMWMWQhzX9a/S9/TFCH9
oa8jWtawxciYO/i4nmxhaK16ZY1UZgK2yEmh2ibmsnyIjktiBpN5sUJLJpKLlG4w
dpvvulTuNOKSXCn5k63VtlCb1HtUHcc5yb0C1zitCBAebLXD1ZJUEExriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWA642qvaLv3Tax3PQKBLEc3l74MB8GA1UdIwQY
MBaAFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMt
YjhiMzZmODk1NmI3LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMtYjhiMzZmODk1NmI3
LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5gHuXZh
CFVCQSkgMl5cQ72GXFmn5LG6r13tNID76xo1tIleg1CjCxHlyOZ8klJ0JHtCZ/ES
doHqTIBk/ACr/kGgBTi+IN2NNkLk8usk7R89ykEW39p7KuxkYTtj/EMsyOD824KV
2OfM6dP8zdPJGzWSm2CJmXCPvW1Wu+apSV38vlSBaVXBQSJ8BXTPf0gDyzpg3Asd
MsGv+WVct5z+Vs3ghrW8EhElo9gh2j1Yn89wfvHT6x6s3wsGooGPtXrQBM+EjVp/
esIFZkc3Wa8kgkswo/joBR1GcOP0OEvTqy3ALbNMG+lFNHDSX7txxqjUICXgyjo0
F9XV108EIiaSMw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:22 2026 by rpki-client