Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: ytqDuV2snsGmrnW8xQUB6czdYKOlfzo8Im3yCdtE0hE=
Subject key identifier: C4:71:62:0A:5E:7C:38:B8:26:1A:DD:61:8E:B2:85:35:B3:DA:75:45
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019F90C7DF6C2C05A99DF9B148F89D8DF6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0CA7
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: 2Zfv2JwMc6fwX+Q9yL+Y6GjovRVAPV7Xt4MKIXye5MA=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:df:6c:2c:05:a9:9d:f9:b1:48:f8:9d:8d:f6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=c471620a5e7c38b8261add618eb28535b3da7545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:84:15:17:fe:a0:a3:a8:aa:23:b9:89:36:
1b:7e:b2:c6:2e:3f:69:83:9c:dd:48:48:0a:07:5e:
ec:fb:5f:dd:e3:5d:cb:3c:7e:bc:9f:2c:5b:c0:bd:
0d:fa:5a:ad:56:72:17:97:62:13:a1:3a:8f:29:6a:
87:af:67:d9:a7:7e:b5:6c:44:1f:31:bb:f0:2f:4e:
2a:7b:97:cb:68:ba:d8:5b:04:97:7e:60:72:3c:85:
31:df:25:73:fe:f8:16:93:7d:60:dd:ac:84:d1:bd:
8b:d9:df:1a:e2:95:2a:e5:d3:60:26:d7:e6:f6:b1:
80:d5:b5:8f:f6:85:f4:5c:a1:b5:c4:68:ef:8b:0e:
da:c1:1a:4a:68:1c:e4:29:e4:f2:e7:b7:b6:dd:a4:
db:f7:56:ab:15:72:e0:b3:e5:3f:5b:30:f4:3f:0b:
77:0d:58:b7:8d:77:a4:f5:9f:33:06:42:63:ec:7e:
30:7b:dc:eb:8f:75:74:bd:f9:33:40:60:2b:15:d6:
0c:12:8f:7c:ec:39:e3:63:0e:b7:75:df:fc:01:0e:
a0:77:bb:08:36:7d:24:b3:58:4b:69:f8:cf:31:e4:
76:b3:d9:2c:ec:ef:d3:d9:b0:60:92:87:51:89:c9:
01:0b:76:5d:2b:1b:02:b3:f7:95:a6:e5:c2:f2:da:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:62:0A:5E:7C:38:B8:26:1A:DD:61:8E:B2:85:35:B3:DA:75:45
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:51:68:2e:d9:0d:6f:bd:20:e4:02:72:1f:f5:f4:aa:93:
2d:90:85:5c:c2:1a:09:8c:f5:e4:07:da:fa:54:fd:df:f2:57:
09:77:c7:a1:ef:0c:dc:1c:b0:07:95:79:94:d9:38:66:ac:de:
44:7a:f8:f8:e7:76:75:28:8d:d0:44:66:07:93:42:a4:46:fa:
24:ee:79:50:aa:c5:8a:47:63:55:f9:b9:cf:1a:71:d3:51:3e:
90:cd:18:ec:bb:3a:46:d2:d3:ad:33:03:89:69:69:a8:70:0a:
74:e4:21:67:58:10:67:f9:c5:c3:71:2b:71:47:ee:dc:13:47:
7a:bb:23:db:b1:d4:c2:7f:8b:a8:59:af:c4:99:1b:63:ce:80:
73:1d:14:77:ce:f9:f3:3a:1e:1b:cf:f1:0f:87:98:5a:20:df:
9d:20:3c:81:9a:de:c2:4f:b2:98:69:bb:05:41:21:5d:04:1e:
29:cd:cd:6a:7a:af:b5:c0:3f:f7:64:9a:48:7d:e9:b7:e3:36:
26:94:71:6a:02:9f:7d:53:de:ca:f9:d9:16:ee:32:02:98:4c:
d0:b1:ad:cf:e9:4a:ea:98:69:1c:03:03:d7:3b:03:ea:29:89:
94:fc:2e:4c:21:86:d8:e6:53:50:37:34:43:19:7a:33:9d:07:
25:ff:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:50 2026 by rpki-client