Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: 1UtlDR6RsXliOxKKgfhMyEgvYtlgBigcwYyMwQ2Y2nc=
Subject key identifier: F7:8F:19:90:E0:6E:6F:5D:03:8C:13:AB:09:46:A6:B7:68:C7:B4:FE
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 019D39AEAD2AE8B0A990AB6A010DA2A4D377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 1308
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: Np2+gpx8JYYqgUed3bRnGptenDCwQprZ6cXiEKtREvg=)
2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ad:2a:e8:b0:a9:90:ab:6a:01:0d:a2:a4:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=f78f1990e06e6f5d038c13ab0946a6b768c7b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:55:16:aa:77:85:63:cb:9e:dd:65:ee:f9:
8b:05:d4:b5:d1:12:6f:ea:20:8b:a2:fd:1a:51:ba:
95:d5:56:b9:65:3e:06:76:dc:96:de:7d:ac:46:81:
91:29:08:e8:ec:f3:db:bb:83:af:0c:0c:d6:e0:f6:
65:b9:fd:cb:2b:34:d1:d8:a5:f6:93:ff:1d:f0:1d:
ca:39:fe:96:5e:03:da:de:c0:6e:cd:ec:44:ac:b4:
74:24:87:f1:7b:69:78:94:5c:a2:2a:1a:6e:e9:dd:
73:04:8b:1f:9a:14:3c:0d:30:cc:53:98:dd:a1:b2:
67:62:c5:9f:6a:82:ed:9d:13:0b:5a:aa:16:f6:d6:
8d:26:f0:a1:c3:21:35:a1:68:f7:ce:45:38:6a:51:
d6:09:c0:5b:6b:eb:9d:ee:b2:fd:c5:9e:19:15:b6:
dd:e8:e6:04:4a:80:81:a1:de:38:a3:11:fa:1a:0a:
af:81:57:9d:2a:2e:1f:58:51:49:7b:a8:a7:71:87:
9d:ab:0f:e9:cc:1a:7b:b7:7e:e4:ab:17:50:3a:0f:
de:3f:a1:4c:15:75:1e:ce:a4:3e:98:e5:12:fc:75:
78:6c:b9:cd:c4:03:d0:71:1c:3b:10:43:b7:1c:19:
d9:e5:0f:93:6c:cd:45:aa:d5:70:41:d7:f6:44:c0:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:19:90:E0:6E:6F:5D:03:8C:13:AB:09:46:A6:B7:68:C7:B4:FE
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:b8:00:1b:04:d7:92:d0:7b:f5:a1:70:20:24:0f:0c:2b:
00:e4:3a:0d:0f:1f:47:10:c8:3f:14:0f:8c:98:dc:3b:90:f9:
c8:10:85:01:87:8f:c7:00:6a:3d:21:a3:5f:cf:83:38:22:e9:
49:17:9d:d3:90:29:b2:6d:7b:00:31:2a:a3:76:bf:80:cd:c3:
2f:f4:50:f0:94:b6:32:77:aa:a5:02:52:ce:ac:bb:57:c2:37:
66:85:6f:ca:c5:6c:53:53:d4:3b:01:51:31:f8:d3:98:7e:4c:
82:a0:68:e3:d2:c5:72:69:39:4d:69:d9:53:0d:e9:74:e3:14:
16:12:80:f9:a8:a4:cd:fa:de:4a:a7:f3:59:47:f1:c8:d1:f5:
44:a4:3e:7c:76:06:4f:bb:fc:49:24:7e:00:7a:7b:9b:08:be:
4e:48:f5:fc:51:ca:49:c9:f7:90:7b:f6:86:3e:de:a4:3d:52:
97:ec:a0:83:0a:ff:c8:56:c7:d7:aa:8f:e0:38:28:e2:ef:80:
7c:b3:fa:4a:84:57:9c:3c:b4:46:60:46:f0:77:3d:d6:00:da:
12:6d:7f:b4:b7:c5:e7:1c:bf:b9:be:1b:f6:5f:30:b3:91:36:
83:25:a4:12:3d:ea:52:b7:cb:10:57:a7:ce:b6:54:96:58:4c:
ec:1c:ab:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rq0q6LCpkKtqAQ2ipNN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw
NDAwN2UwHhcNMjYwMzI5MTMwMDQxWhcNMjYwMzMwMTMwMDQxWjAzMTEwLwYDVQQD
EyhmNzhmMTk5MGUwNmU2ZjVkMDM4YzEzYWIwOTQ2YTZiNzY4YzdiNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4lVFqp3hWPLnt1l7vmLBdS10RJv
6iCLov0aUbqV1Va5ZT4GdtyW3n2sRoGRKQjo7PPbu4OvDAzW4PZluf3LKzTR2KX2
k/8d8B3KOf6WXgPa3sBuzexErLR0JIfxe2l4lFyiKhpu6d1zBIsfmhQ8DTDMU5jd
obJnYsWfaoLtnRMLWqoW9taNJvChwyE1oWj3zkU4alHWCcBba+ud7rL9xZ4ZFbbd
6OYESoCBod44oxH6GgqvgVedKi4fWFFJe6incYedqw/pzBp7t37kqxdQOg/eP6FM
FXUezqQ+mOUS/HV4bLnNxAPQcRw7EEO3HBnZ5Q+TbM1FqtVwQdf2RMCDOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPePGZDgbm9dA4wTqwlGprdox7T+MB8GA1UdIwQY
MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt
OWNlZWJhOGJhMjRjLzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj
LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAC4ABsE
15LQe/WhcCAkDwwrAOQ6DQ8fRxDIPxQPjJjcO5D5yBCFAYePxwBqPSGjX8+DOCLp
SRed05Apsm17ADEqo3a/gM3DL/RQ8JS2MneqpQJSzqy7V8I3ZoVvysVsU1PUOwFR
MfjTmH5MgqBo49LFcmk5TWnZUw3pdOMUFhKA+aikzfreSqfzWUfxyNH1RKQ+fHYG
T7v8SSR+AHp7mwi+Tkj1/FHKScn3kHv2hj7epD1Sl+yggwr/yFbH16qP4Dgo4u+A
fLP6SoRXnDy0RmBG8Hc91gDaEm1/tLfF5xy/ub4b9l8ws5E2gyWkEj3qUrfLEFen
zrZUllhM7Byr7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:33 2026 by rpki-client