Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
File: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft (raw, json)
Hash identifier: D8xVDv2zlF9QUyvexpE/yUMfXrM6zPDZ5NhKXLdC2yU=
Subject key identifier: DE:F5:B3:7F:BC:C8:F5:26:7A:18:0A:EB:B9:39:9B:36:B7:A9:5D:C5
Authority key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
Certificate issuer: /CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Certificate serial: 471A37A2BC0A777E01C45DAEEB0B6F8A6284A199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
Manifest number: E0
Signing time: Sun 29 Mar 2026 08:12:09 +0000
Manifest this update: Sun 29 Mar 2026 08:07:09 +0000
Manifest next update: Mon 30 Mar 2026 09:57:09 +0000
Files and hashes: 1: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl (hash: EfxMK/HerC5QxekZIxAFiMJS/pgQxTfndPoybb+2eGY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1a:37:a2:bc:0a:77:7e:01:c4:5d:ae:eb:0b:6f:8a:62:84:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Validity
Not Before: Mar 29 08:07:09 2026 GMT
Not After : Mar 30 09:57:09 2026 GMT
Subject: CN=DEF5B37FBCC8F5267A180AEBB9399B36B7A95DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:da:35:18:bd:63:b0:ec:c1:73:3a:23:4a:
11:8b:22:4e:5e:c1:4b:05:c1:af:2f:29:00:bf:14:
cb:c0:9f:ab:7f:ad:3d:3f:51:3a:93:8b:84:7b:39:
3a:86:1b:4d:b9:87:0f:bb:6f:bc:d3:67:c2:fd:c3:
aa:bc:ba:60:a0:e6:33:57:c8:09:39:a4:84:c8:5c:
42:51:67:76:65:fd:9d:75:52:76:9a:a5:83:9a:10:
ca:26:d7:0b:36:fe:65:ad:c5:c2:dd:ac:c7:ed:34:
81:53:7e:da:95:9f:85:9d:a1:14:5a:ee:59:b9:37:
91:fc:04:ab:7d:48:54:57:50:db:a6:8b:8a:d1:c1:
11:0f:22:8c:06:29:c2:80:c9:ee:c5:a1:e8:af:95:
d2:49:e3:ed:7a:c1:97:77:37:6e:19:22:87:7d:7f:
4a:d7:1d:0a:b7:1d:f8:f4:a2:af:5b:77:21:3c:f2:
6b:3a:1e:a4:93:c4:cb:6f:97:78:95:3d:e6:26:a3:
39:52:8f:b2:6a:f6:0a:c3:e6:ea:f1:6c:06:5c:b6:
a8:09:08:87:21:bb:20:d6:de:b3:2b:28:11:a2:9a:
25:ab:cf:e9:e1:36:05:f3:ce:3f:b3:b6:4a:b3:64:
99:aa:d4:e6:77:6f:68:86:db:1e:e2:54:a8:bd:6b:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:B3:7F:BC:C8:F5:26:7A:18:0A:EB:B9:39:9B:36:B7:A9:5D:C5
X509v3 Authority Key Identifier:
keyid:2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bd:c9:45:82:3c:a0:df:d0:5b:b0:93:34:a4:1d:cd:05:a1:
9f:b2:af:15:14:1c:df:26:cb:43:f2:82:08:0d:22:46:2a:f4:
04:6f:99:f5:c9:fe:73:37:10:bb:21:98:ae:0a:a0:dc:33:d1:
ec:7f:9b:a7:f1:e1:95:9d:a8:56:1f:f1:19:3b:ae:b0:6d:4c:
57:a1:ba:2a:0b:f0:c5:b2:bd:da:07:0e:26:b5:87:db:55:a4:
8f:8f:86:e7:29:c5:fc:b1:d5:41:39:c0:23:f9:5d:64:ba:6b:
57:ca:04:57:4d:7b:fc:bc:f6:f1:d3:88:ea:5d:34:9d:27:4d:
7b:cf:b0:13:28:ec:25:9f:33:93:27:df:17:89:d6:67:30:8f:
93:08:6b:8e:6b:c3:75:8e:d2:55:ad:81:86:bb:31:42:f1:21:
0f:c7:08:db:24:33:b6:88:97:bf:db:39:d5:14:f2:63:08:1b:
7a:3e:36:6b:74:0f:17:ae:f8:f0:02:66:ef:27:2f:70:d2:9e:
60:a8:3f:f8:1a:1f:62:d7:fc:98:e3:ee:47:60:6b:ee:27:dd:
9c:5e:d3:23:a2:76:0b:0f:ae:4b:a1:b9:fc:58:0f:2d:ea:b5:
5e:bf:c7:f9:e0:50:76:90:e1:6f:8f:e7:f9:87:64:41:d6:a9:
a5:f0:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:23 2026 by rpki-client