Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: x0W4ty1hhlrSocu4fPggUsENUwuIGdfgB7FRN8WiWgU=
Subject key identifier: AC:06:B6:41:49:AE:3A:D6:E9:0A:D9:8C:A0:E1:D8:47:B0:04:9D:90
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01A0E2BDEB68610E4C15775CCB3F55609587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0D56
Signing time: Sun 27 Sep 2026 12:01:32 +0000
Manifest this update: Sun 27 Sep 2026 12:01:32 +0000
Manifest next update: Mon 28 Sep 2026 12:01:32 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: GEuNQNnMKh5U5ZDqxkwAwVN4Ps6TX3P5UnySvZycAlk=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:eb:68:61:0e:4c:15:77:5c:cb:3f:55:60:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Sep 27 12:01:32 2026 GMT
Not After : Sep 28 12:01:32 2026 GMT
Subject: CN=ac06b64149ae3ad6e90ad98ca0e1d847b0049d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:33:6e:b5:77:5e:ab:40:b2:9a:22:bb:f2:
f5:11:86:51:10:01:5f:25:d0:08:8c:19:81:15:a0:
ae:6b:05:e1:2f:ad:2d:d9:a2:7f:12:41:9f:7c:65:
52:61:29:3a:4b:8f:3a:65:b4:62:e4:ae:0a:db:29:
37:ac:56:37:40:cb:15:68:5a:70:3e:24:7d:e8:e7:
f9:97:f3:45:4d:9e:b1:cc:cc:1c:6e:13:e8:16:54:
33:d3:e2:38:81:7a:c8:28:8e:5d:9a:18:6e:40:b3:
06:f3:54:12:38:79:c7:a2:04:2b:1f:dc:5f:ff:80:
32:0e:fc:ca:f8:c0:e7:28:71:74:43:b0:a1:46:96:
fc:f5:a3:6f:bf:b0:7a:1c:76:8e:e9:ce:e3:64:a8:
3f:23:d4:87:45:25:38:39:bb:f1:3c:4b:b2:a0:a3:
8e:22:b9:77:0b:fb:20:74:59:1f:2b:0e:73:0a:84:
50:92:4d:4e:6e:5d:03:81:f5:96:17:79:d3:22:1a:
86:96:f0:16:2b:ad:6d:3e:fb:a4:94:88:6c:c6:2c:
33:57:9d:db:a9:44:f9:2e:87:f1:a5:f3:13:fa:70:
8d:7e:c5:ce:e4:d2:ba:62:df:9e:d9:2b:0b:8d:7c:
d1:a0:d8:0c:03:57:32:9c:cb:f1:75:e6:e6:da:f5:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:B6:41:49:AE:3A:D6:E9:0A:D9:8C:A0:E1:D8:47:B0:04:9D:90
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:1f:cd:e8:aa:0a:9e:0d:b1:a2:1f:43:c3:2e:4c:a9:22:
97:df:c3:7c:17:87:5e:39:2b:83:c3:c5:01:d2:0d:72:8c:78:
79:fb:05:b2:d6:fc:a3:64:fa:24:c3:7b:cb:4a:db:2e:06:66:
8f:91:75:92:3e:d8:4d:69:e8:cd:3c:74:c5:26:ce:db:5f:52:
cc:1b:36:c5:12:6a:a8:56:64:fa:b8:77:1a:a6:09:84:55:0f:
36:ff:e6:ec:a7:e6:6d:7e:06:3a:3c:ed:1f:3d:4b:dd:9a:1d:
9d:d2:05:43:5e:c2:98:2a:f1:2f:82:3d:f4:d5:c1:48:e5:7e:
b6:e4:52:fe:ea:dd:15:f3:3a:34:c8:d0:fa:b2:53:d5:75:a9:
e4:ce:85:55:93:05:23:e6:68:75:64:57:50:55:7e:03:14:03:
19:d8:e8:fe:b6:7a:48:f1:6b:14:cc:f0:b4:3b:11:89:1c:3f:
61:41:72:0b:70:db:b4:ee:a5:5c:c8:4d:cf:79:92:6e:b8:44:
4f:b7:45:84:53:54:6c:86:4b:6b:2a:68:c8:02:92:f1:2e:c5:
d9:92:63:ba:e3:4c:4b:30:1d:29:d3:2c:94:ea:38:c9:02:11:
ab:0b:f7:69:74:c1:7b:08:23:32:00:b9:e5:c2:89:39:4e:b0:
07:12:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:34:00 2026 by rpki-client