Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: aWdKOf+EF/BcGHFZ9++6cMrmIF0KyunHJnJHUnIXZgo=
Subject key identifier: CB:31:50:62:78:50:8F:E5:BF:2B:9E:CA:61:5E:83:D6:3D:9E:80:7A
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 01A0CD7F074A33A5C0AAB38CC3E5322808E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: 0255
Signing time: Wed 23 Sep 2026 09:00:49 +0000
Manifest this update: Wed 23 Sep 2026 09:00:49 +0000
Manifest next update: Thu 24 Sep 2026 09:00:49 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: 9p8TBvr72YDoRb+wZprgC1JbzgnI0jLfF7U/VuXfqIU=)
2: gymKXorNDDp8x3PYy2044v75QFA.roa (hash: 0rzdf9ANtdDtf/hP67m2732x5lm9z0lPUGsmoQ5Cu10=)
3: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
4: wlE-n-v4vhVQ0V8BrCRy7vygKkk.roa (hash: GtlwHi8+nqqIfT+DJBH/zU6X+J1M23P7PC88GLuf8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:07:4a:33:a5:c0:aa:b3:8c:c3:e5:32:28:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Sep 23 09:00:49 2026 GMT
Not After : Sep 24 09:00:49 2026 GMT
Subject: CN=cb31506278508fe5bf2b9eca615e83d63d9e807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:af:49:96:b7:b8:d6:eb:ab:38:2e:91:6e:
f4:63:8f:3b:b2:65:72:d5:53:94:07:34:d0:a2:53:
32:92:08:dc:4e:45:33:3c:99:68:b5:42:b5:c3:47:
93:ec:4b:34:c9:50:bc:d8:7b:bc:16:d1:f3:45:12:
94:c1:a8:2f:40:bd:3c:b7:5c:e2:5f:8d:a5:72:ab:
06:7e:26:15:85:42:93:fd:43:40:ab:8d:2f:2a:54:
44:3b:19:f0:0a:2f:85:9a:76:54:e3:65:7f:0b:b1:
09:f7:7a:d7:7b:a5:5c:6b:78:39:81:76:59:77:df:
aa:21:4f:f3:0f:d7:d4:0b:07:de:b3:44:75:5f:27:
a6:a6:f5:0d:e9:fd:21:b4:2e:5e:4c:fc:0a:9c:d4:
5b:0f:fd:b9:62:f1:bf:7e:02:bb:3d:32:94:a5:29:
3a:9b:fc:25:76:17:ac:7e:a9:7b:25:1d:29:f0:08:
45:6b:4e:c8:74:dd:51:35:10:d3:27:a6:3a:a1:9d:
13:16:e9:a5:39:83:6c:7f:61:fa:c6:15:a7:08:6c:
be:c3:8a:19:e1:d1:d5:a2:fb:0a:30:87:85:82:9a:
ed:00:92:b2:5e:f7:3b:23:a8:79:2a:08:6a:e7:9e:
13:e8:e3:04:d4:e7:8f:bd:27:0d:8d:cf:0f:7a:e0:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:50:62:78:50:8F:E5:BF:2B:9E:CA:61:5E:83:D6:3D:9E:80:7A
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:76:c5:26:b1:90:03:69:63:ee:b3:03:0f:db:cd:48:07:1a:
78:ab:5e:41:eb:92:67:c5:55:62:79:a0:c2:a9:02:e6:94:f8:
f3:96:e4:06:2d:b2:29:85:a2:ec:26:8e:80:fa:84:18:2d:90:
d8:2b:85:a4:9b:eb:94:b0:70:e9:93:58:16:35:ed:66:05:58:
19:18:ea:e8:aa:dd:18:c2:43:d0:67:2e:06:11:fa:a1:52:03:
52:2a:d4:9a:29:5a:17:d3:22:36:fb:bf:45:f4:e6:5b:c1:df:
81:5d:4d:28:18:42:c8:6c:ad:e1:00:4b:56:6d:66:95:5a:d1:
c2:b2:bc:44:ec:55:7d:e8:18:9d:81:27:37:5f:a2:d0:11:22:
41:a3:c7:f9:01:f7:3d:0e:9d:25:80:35:59:01:2b:55:93:4e:
e5:6c:74:20:79:ec:46:6e:53:1e:dc:03:83:4e:fb:b3:9e:5a:
fa:ff:6f:e9:fc:9f:a2:c9:66:62:57:c3:27:0b:ad:12:af:48:
a9:10:13:3e:46:8b:92:b9:0c:8c:eb:53:f5:c5:fa:94:83:c9:
da:dd:e3:d1:23:82:4e:c9:d0:1b:71:c6:56:ec:51:db:7b:31:
77:7e:ff:0d:7d:15:2e:c1:29:81:7f:73:c5:2b:6a:a5:45:3e:
09:59:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:10 2026 by rpki-client