Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
File: 2f8DY0XtlWcmR-U2aB82Dy36g_8.mft (raw, json)
Hash identifier: 0Zha4kB5/cjbs2yDD+8qsKeI6YCJ3se6VyqCkWBQNEI=
Subject key identifier: BF:D0:31:D3:DD:98:0C:F2:5B:3C:AF:59:6F:C1:0F:E2:21:2C:F5:C8
Authority key identifier: D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
Certificate issuer: /CN=d9ff036345ed95672647e536681f360f2dfa83ff
Certificate serial: 019F92EDB56E95E23E1FCCF5753538C0EF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
Manifest number: 50
Signing time: Fri 24 Jul 2026 07:01:19 +0000
Manifest this update: Fri 24 Jul 2026 07:01:19 +0000
Manifest next update: Sat 25 Jul 2026 07:01:19 +0000
Files and hashes: 1: 2f8DY0XtlWcmR-U2aB82Dy36g_8.crl (hash: dyNYXlyccOvTyTYo9UfM6F1aZYqEB4gnCQa7+bQvfVY=)
2: It5cbOgz2y72fjZZnZVlVg4gUp4.roa (hash: a450t8uMkdYjk8suu61d1NDEpbQ077pWciP2jMuUUw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b5:6e:95:e2:3e:1f:cc:f5:75:35:38:c0:ef:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff036345ed95672647e536681f360f2dfa83ff
Validity
Not Before: Jul 24 07:01:19 2026 GMT
Not After : Jul 25 07:01:19 2026 GMT
Subject: CN=bfd031d3dd980cf25b3caf596fc10fe2212cf5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:d5:23:93:7d:72:b9:b3:1d:ea:10:f4:cc:
ed:fb:b8:67:e4:17:0b:0b:d7:1e:d9:7b:d9:42:b2:
0f:9e:78:57:c2:44:93:3a:ac:95:29:57:34:80:ae:
8d:44:6b:36:b1:76:c4:4f:1d:4a:1f:4c:bf:30:22:
8c:88:9b:36:70:96:28:cd:04:26:08:09:72:aa:ef:
01:02:30:d5:4f:9a:bc:d1:a2:41:3c:f5:8d:47:0c:
21:ec:da:ce:94:5b:d1:89:b5:17:72:f4:34:6d:fb:
c6:c3:9d:14:9a:af:39:ee:11:f3:b9:fa:8c:e9:76:
60:ad:29:c6:75:cd:9c:2c:93:ac:ed:12:38:20:15:
95:d5:29:c2:06:d0:e4:d9:4e:3e:c2:27:bc:8d:8c:
2e:78:43:ca:36:ac:27:df:e1:2e:6f:dd:a6:91:d7:
f5:9b:b5:0d:25:b1:ee:0e:b6:10:58:90:ee:bd:0e:
6b:7c:2f:82:42:3f:8f:0e:8a:d6:61:a5:68:bc:c6:
ef:0a:ed:80:47:3a:c4:0c:97:27:5f:5e:7d:27:e6:
d2:f7:fa:1a:8c:84:a9:a8:7f:7f:0c:ce:1b:15:78:
7f:37:be:4d:67:1a:eb:ae:d5:91:ed:05:3f:51:32:
9b:d4:01:3a:66:1a:43:0c:bd:51:77:fe:45:a3:90:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:31:D3:DD:98:0C:F2:5B:3C:AF:59:6F:C1:0F:E2:21:2C:F5:C8
X509v3 Authority Key Identifier:
keyid:D9:FF:03:63:45:ED:95:67:26:47:E5:36:68:1F:36:0F:2D:FA:83:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8DY0XtlWcmR-U2aB82Dy36g_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/420995-c608-4a6d-aab0-f88c915d32bd/1/2f8DY0XtlWcmR-U2aB82Dy36g_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d4:43:ce:4f:35:06:87:87:36:6f:00:be:e0:99:9f:73:72:
50:b0:eb:00:ad:a7:51:7a:17:b0:a3:5c:11:5d:36:97:bd:2d:
9e:49:b5:59:e5:26:18:91:d0:57:63:c9:12:13:19:46:3d:b5:
28:29:e7:b4:04:fa:fc:0f:75:48:43:3d:3a:e3:f1:9d:93:c3:
73:37:f6:c6:e3:82:fe:0a:ae:37:32:a5:34:00:f9:e3:26:1d:
88:82:9e:05:78:e7:dd:7c:8c:5f:9b:8c:17:8c:03:49:7e:91:
e3:a7:3f:8f:fc:85:4c:e9:4d:ec:12:d6:cf:3b:b9:01:85:fa:
7a:63:0b:81:f5:36:78:3e:de:85:99:06:86:fb:05:57:f5:b6:
37:95:1f:63:7e:a4:48:f9:ca:15:c0:50:ee:77:0d:6c:09:a1:
cd:b4:a4:d5:9c:6a:32:86:88:22:64:1d:4e:1e:57:d0:d0:20:
da:b6:84:cd:5b:50:90:2f:e6:21:e7:77:72:5c:16:df:91:3d:
69:f5:11:c4:e9:6c:86:60:e9:2c:09:9e:c0:76:6c:c8:12:c1:
0f:8b:f7:ea:22:a4:5e:f9:ca:fe:f9:43:60:a0:22:c9:3c:4f:
2c:57:cd:b8:e0:da:c2:cd:57:fa:a2:1f:16:95:25:80:b1:e5:
b0:8b:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:34 2026 by rpki-client