Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: o+k4j3EErvx16X8H5ugSlk1ZNJs5uMSkD41CQLodJrw=
Subject key identifier: 52:09:36:C9:D3:29:47:C5:16:B3:EB:3B:A7:3E:50:DE:6D:2C:84:15
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019EBE48188841B9C1E31200A6213127DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0C3A
Signing time: Sat 13 Jun 2026 00:00:56 +0000
Manifest this update: Sat 13 Jun 2026 00:00:56 +0000
Manifest next update: Sun 14 Jun 2026 00:00:56 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: 7jbnzu9eOR4Gn3tXyHpYbDG4C+uqwAvqx/EHxygV0PE=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:18:88:41:b9:c1:e3:12:00:a6:21:31:27:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Jun 13 00:00:56 2026 GMT
Not After : Jun 14 00:00:56 2026 GMT
Subject: CN=520936c9d32947c516b3eb3ba73e50de6d2c8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:82:e6:f7:3b:32:d6:9c:2b:7f:ba:43:76:
80:49:f7:62:eb:79:35:87:ab:3b:e8:bc:96:c4:b7:
b2:07:a6:a2:71:cb:c4:cc:68:da:0f:2b:11:3c:8c:
37:84:2e:9e:77:5f:68:d6:29:8c:ff:3f:88:01:6d:
05:dc:f4:b8:0f:89:f0:74:8d:cb:d6:d9:17:22:11:
e0:e9:05:89:c3:f9:dd:25:10:6b:8f:47:80:aa:30:
81:6f:44:f6:d8:b3:63:2f:db:de:0c:d9:b5:5f:8d:
08:2b:8e:14:c2:ce:e3:a7:9c:b3:8c:9d:f3:f6:49:
cc:60:a6:b8:7d:14:f4:57:21:9e:02:db:1f:9c:05:
83:2f:b4:cf:95:96:86:54:c4:b4:4c:27:ec:26:0d:
ff:9a:7d:0b:b0:22:72:16:20:f6:b2:c1:39:7c:5c:
05:f2:a8:d7:8c:9b:72:e2:dc:43:34:8c:9f:54:8f:
26:af:c0:b4:9e:b9:99:c4:e3:61:d8:b3:ef:89:35:
93:50:ea:cd:70:d8:0b:54:28:5e:6e:13:02:33:07:
4f:1c:5a:aa:a1:36:3d:54:7a:f8:aa:f4:d9:38:b4:
05:ea:1d:b9:c5:b3:72:0c:d6:dd:24:42:3f:db:4e:
a6:33:f8:ea:f1:64:49:ee:25:9b:31:33:dc:58:4e:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:36:C9:D3:29:47:C5:16:B3:EB:3B:A7:3E:50:DE:6D:2C:84:15
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:a1:fa:be:34:58:44:d3:b9:eb:75:61:ef:f2:e1:d5:45:
6f:67:5f:79:d7:bf:4b:fe:a8:80:ee:9f:0a:c6:c3:e1:f8:26:
e4:71:05:81:54:07:b2:6c:ac:20:54:ee:55:82:de:7a:f5:95:
cb:30:40:eb:c1:09:39:de:ac:dd:35:cf:62:9a:8a:2c:a6:57:
b1:c9:6c:d2:5f:c3:47:fb:4d:a2:c8:96:78:d3:7f:6f:69:61:
4d:21:89:05:a8:3c:87:6c:78:ca:39:8f:d5:a9:af:45:af:1f:
06:cc:57:b4:7d:aa:10:92:ad:55:81:d7:86:4e:08:ae:13:6a:
76:44:de:50:1e:32:2a:b6:c8:5c:ea:3c:fe:ba:a0:40:ed:39:
ff:84:35:e4:4c:2c:e5:b1:9f:8a:64:08:3c:16:a6:a4:df:4c:
47:fc:8a:b7:b7:23:d9:f3:f2:4d:fd:14:34:07:98:28:12:55:
ba:31:1b:c2:98:96:3d:55:27:81:00:7b:cc:3c:e3:54:e7:25:
c7:02:6e:cf:6a:7b:a3:09:c8:9b:17:10:3a:d4:03:70:cc:a8:
96:71:2e:c6:ef:6a:f2:24:24:9a:52:e9:88:42:f7:e5:f9:0c:
41:9b:ee:6d:c4:9c:8e:f1:74:c4:59:2b:db:0e:49:f4:64:c7:
b9:36:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:59 2026 by rpki-client