Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: J3SAEVbIR9Qa8/iHm7kSWl5BMZpncnT40A24L92D3zI=
Subject key identifier: 5B:6F:D5:4A:73:F3:14:6A:5D:F3:A7:BB:F3:2F:39:EE:F2:14:A5:9C
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 01A11861AD3B0E010AC0646F515E669BF1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 1509
Signing time: Wed 07 Oct 2026 22:00:16 +0000
Manifest this update: Wed 07 Oct 2026 22:00:16 +0000
Manifest next update: Thu 08 Oct 2026 22:00:16 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: xjLWNJAR0f7a9Vg8QbctyL8nvt8Rrk+UnwSifr+zOUI=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:ad:3b:0e:01:0a:c0:64:6f:51:5e:66:9b:f1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Oct 7 22:00:16 2026 GMT
Not After : Oct 8 22:00:16 2026 GMT
Subject: CN=5b6fd54a73f3146a5df3a7bbf32f39eef214a59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:e2:66:10:99:7f:a7:10:6f:ca:1c:be:a8:
8c:20:13:0d:83:69:16:65:0a:42:c5:c7:72:4e:c1:
62:f4:04:aa:5e:04:d6:06:e0:ca:5e:e4:aa:01:0b:
71:46:58:ca:07:ba:f5:60:4b:4d:9a:db:0a:44:35:
dd:68:0b:bf:30:4f:44:ab:dc:02:5d:1b:fd:af:27:
47:e7:f6:99:93:09:ee:98:5c:6e:61:5c:39:58:bb:
ec:e0:21:01:a2:9d:73:8e:b7:58:10:26:3a:92:f9:
61:b6:2b:c6:c0:2d:67:74:ef:1b:8f:0b:f7:24:8e:
8c:d2:1a:9f:8e:41:ae:56:58:31:50:93:82:cd:a5:
99:92:2e:de:54:73:4f:9f:45:fa:11:0b:32:30:bd:
c8:3a:35:fb:3e:f7:67:b8:ca:42:2a:66:97:a8:9d:
09:99:5d:b6:12:f2:c4:c0:8e:22:ca:88:c8:7a:57:
14:c4:a6:a8:9c:2f:86:ff:67:ad:46:b2:f0:ca:bc:
bd:c4:47:9b:c5:04:ee:e2:49:a5:45:d7:7c:13:06:
da:d4:b9:17:c9:94:b7:5c:e2:b3:27:66:c0:cb:aa:
9e:50:39:32:8c:e8:1c:ce:0f:9e:70:18:c8:00:96:
be:f5:bf:35:a9:ba:55:5e:f7:70:70:de:2e:d6:63:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:D5:4A:73:F3:14:6A:5D:F3:A7:BB:F3:2F:39:EE:F2:14:A5:9C
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:40:33:20:d4:91:68:e5:0a:70:14:9b:43:96:6c:55:3a:c1:
95:af:10:ff:9e:92:27:f6:90:05:cc:12:71:07:e9:44:89:5a:
35:e0:b9:45:76:3f:41:f0:c6:83:a0:a6:08:29:2a:ba:2a:13:
cb:86:42:82:03:8c:a0:8b:96:95:d7:58:bc:f4:36:bd:a7:f1:
2a:0c:2f:c9:68:b5:08:35:7f:d8:8c:66:c3:f6:06:11:3e:f4:
16:44:5d:fa:6b:41:57:82:63:b9:01:1d:a4:00:f9:87:2d:3f:
fd:62:e5:83:61:df:52:47:75:a8:62:8e:51:32:24:fc:96:09:
ae:28:24:95:eb:ef:21:d7:0f:f3:cd:42:d7:68:86:9f:3e:d9:
42:72:ac:67:1b:33:8b:b6:7d:59:a6:59:e1:e6:57:b0:85:fd:
d7:9f:5a:43:34:ff:e1:c4:33:2a:43:fa:dc:9c:1d:1a:bf:11:
51:9f:45:1d:8f:b1:57:0c:70:9f:b5:0c:ca:80:81:ea:37:50:
e5:29:77:e5:72:7f:89:40:ef:76:59:24:fd:a2:9d:48:c7:ba:
91:33:09:d7:5c:f5:7c:ff:93:2e:21:35:12:94:c0:cb:e7:5a:
1b:d7:9f:de:29:57:6b:f0:05:88:c3:ea:91:66:20:d7:d9:f2:
df:10:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:46 2026 by rpki-client