Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: IQXKTXYXyROT0FLxg53rX2/BbuisUlZdsNMvGhz4Hqo=
Subject key identifier: 37:64:05:AC:0F:71:1D:94:F8:F6:49:FB:AC:CD:63:82:95:E3:1B:20
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019D26CCF93BD53234BE8FF8C60125690CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0B67
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: v0d2HbzrOMJc40FrFNEf2ro1rt3cpdglWwYmDKQFU1g=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f9:3b:d5:32:34:be:8f:f8:c6:01:25:69:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=376405ac0f711d94f8f649fbaccd638295e31b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:f2:dc:6b:23:b0:77:e6:dd:3d:0c:44:74:
8c:c7:fd:e1:74:d7:55:9b:6a:7a:b4:79:60:09:a6:
1a:2d:a8:69:86:98:b7:04:36:e2:07:4a:38:12:e7:
3f:7f:71:79:ba:b7:3e:5f:0b:2d:4d:ac:e3:3e:ae:
1e:9e:1c:33:37:21:13:bf:f9:9d:a1:2d:68:66:06:
e6:66:8e:8e:51:a7:d8:90:36:a5:ff:62:c9:6e:6c:
8a:b9:1b:6f:a5:59:69:fd:8e:bf:87:e3:06:0b:10:
83:1c:0e:27:c8:82:9a:dc:01:35:c6:db:11:56:b1:
2c:c5:05:36:88:96:7c:51:26:2a:04:b8:5b:8f:98:
93:03:33:3b:d4:0d:77:cd:28:0f:29:63:9e:3c:52:
f8:33:f9:39:c6:dd:0b:a3:b6:2e:9e:0c:3d:ee:16:
11:cc:c5:7d:76:49:0b:b9:22:05:de:90:88:c1:59:
e9:87:9a:5d:aa:7a:c6:f8:1e:3a:7c:22:1d:af:72:
0a:34:4a:01:f4:ea:c0:66:72:a4:92:ae:b8:2b:02:
81:a6:35:92:a0:b9:e3:65:0f:01:66:0e:ad:6f:92:
6e:f6:fc:3b:84:31:4e:f7:96:e2:8c:de:3e:b2:bd:
23:6a:dd:c8:94:0c:c9:14:56:37:2e:8f:09:7f:e8:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:05:AC:0F:71:1D:94:F8:F6:49:FB:AC:CD:63:82:95:E3:1B:20
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:a0:bc:69:14:46:ca:2b:21:2b:8d:92:ab:32:04:c7:5a:
d3:70:98:34:63:f6:b0:60:bf:b6:3e:48:48:e8:3f:2a:70:8c:
cb:ab:96:23:ee:43:e6:cc:ce:25:00:bb:98:28:ce:e3:e6:c2:
54:1b:f7:55:67:67:10:7d:75:92:69:67:53:21:e8:c7:a3:5b:
84:da:cd:09:a7:7a:8d:ac:f1:14:cd:ea:3a:0c:e9:e0:8a:c7:
38:be:98:dc:00:92:5e:1f:a0:76:2f:a2:65:e6:c2:50:6d:76:
6e:e7:32:65:35:98:ea:e7:2a:62:b3:0b:e8:d9:01:fa:67:d8:
2a:24:e1:15:32:c7:36:9d:13:af:d7:f5:ae:f3:74:11:77:37:
d3:cc:73:b8:20:bf:22:44:e2:fc:50:e1:da:db:49:56:99:54:
26:d3:8d:fd:36:50:09:1e:3a:35:99:31:8a:4b:54:41:ec:b2:
87:f7:a7:ad:cb:96:6b:d0:8c:ac:68:88:2a:e6:4f:6c:04:9e:
6b:28:04:12:da:55:3b:45:17:0d:2d:59:fe:1f:6d:44:4d:03:
cb:de:b8:4a:f2:b1:64:55:2a:94:49:38:43:3e:32:20:54:67:
9f:3d:98:39:92:89:80:3c:6e:99:ef:a6:be:b6:b6:55:52:81:
39:84:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:17 2026 by rpki-client