Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: pJ6iH5iiBAyHyuzD13rDvqSsLfLRlles+YndZRnH2n0=
Subject key identifier: 17:E6:F3:C9:FA:28:1F:E4:E9:5F:5B:75:97:66:B6:17:97:63:9A:92
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 019FAA50CFAA394873B40E04350513F78033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 0216
Signing time: Tue 28 Jul 2026 20:00:50 +0000
Manifest this update: Tue 28 Jul 2026 20:00:50 +0000
Manifest next update: Wed 29 Jul 2026 20:00:50 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: B9QFI4gimtXELvcau5bxnxodQ63IRp9z003uY5aQsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:cf:aa:39:48:73:b4:0e:04:35:05:13:f7:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Jul 28 20:00:50 2026 GMT
Not After : Jul 29 20:00:50 2026 GMT
Subject: CN=17e6f3c9fa281fe4e95f5b759766b61797639a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:67:bf:45:6e:d4:b8:92:ea:26:2e:9c:c1:
d6:a9:14:dd:ef:53:10:7c:dd:61:ce:20:f0:ce:d8:
09:ad:ae:be:9c:2e:8e:46:1a:bc:61:18:02:6d:74:
28:ff:73:d4:76:be:01:63:65:85:c7:6e:1b:67:50:
1b:aa:49:b9:54:8e:36:05:fb:68:1b:88:7e:55:b0:
8c:a5:e9:d6:a4:f8:55:b4:65:48:98:00:4e:c2:ba:
dc:a5:a9:01:11:ac:25:fe:c9:09:cb:3d:2d:f3:d9:
36:08:f7:18:f3:59:0d:dd:01:84:65:66:74:3b:f9:
17:78:1f:e9:cd:32:7b:ac:6b:aa:0b:78:ab:8b:71:
7c:a0:ef:18:63:8b:d5:65:88:98:f9:c1:a8:70:76:
45:c2:13:3f:42:14:22:d8:4b:07:80:b9:f3:58:15:
d7:ef:fd:f3:98:b4:cc:6a:f6:cf:1a:1b:60:23:f9:
f3:87:ec:40:52:23:54:3b:de:41:62:92:e5:d0:15:
10:75:2a:f3:3e:7d:6f:95:45:c2:dd:f7:3f:35:c8:
5c:57:84:cc:27:ae:38:82:0b:b8:bd:b5:3e:e4:cf:
06:04:54:b7:99:cb:c6:de:0a:df:e4:b5:ae:09:22:
d3:25:ff:c1:d1:a8:dc:4d:13:dd:4e:2b:60:01:c0:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:F3:C9:FA:28:1F:E4:E9:5F:5B:75:97:66:B6:17:97:63:9A:92
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:2a:89:c1:b8:b9:32:ce:a3:70:63:c5:97:4b:c3:35:c8:
e4:ef:9c:d6:11:3a:87:be:63:34:d6:82:68:ee:44:51:c6:80:
8c:82:9e:c4:c1:97:f7:31:d1:12:7e:39:1e:7a:e0:85:c4:b2:
62:92:4a:c0:4a:70:41:b3:bd:f2:dc:38:84:7d:1f:29:e8:5d:
dd:26:4e:b6:4b:26:9d:8b:76:2d:8b:01:b5:d6:79:01:7a:96:
34:50:8b:c4:55:35:a8:ac:62:5e:79:55:aa:87:78:1b:2c:0b:
99:01:54:df:e9:f9:e3:bf:19:64:5b:34:b8:a6:7b:bc:59:98:
6a:9e:3a:c1:3a:1d:c2:85:05:92:da:8b:98:a8:70:5d:91:63:
e6:b8:64:bb:58:cb:52:8c:44:6f:6e:02:a4:0e:cd:8c:56:e5:
69:96:df:35:8e:62:da:7b:3a:71:07:e2:90:04:a0:06:73:3d:
aa:83:ca:2f:3e:a7:7c:4b:37:95:c8:63:8c:ba:c3:aa:de:76:
86:a7:5a:68:d5:33:3e:1b:dc:8a:53:05:de:b1:cc:09:0e:8e:
64:8f:45:36:a0:9e:54:18:4a:4b:e8:97:5a:aa:29:f6:6a:c1:
e6:71:62:48:04:05:9f:04:bd:aa:b8:b2:10:bf:51:fa:19:4b:
16:2c:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:36 2026 by rpki-client