Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: nuGrH+ai+gSMSsdpPc8l7SfdF6UcwNnUdAG4DwED3us=
Subject key identifier: 9B:EB:78:7E:E5:1D:95:D1:22:BF:F4:8B:A8:F5:04:8C:48:9F:C6:E2
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019D98BD4FEF51497D12E5AA1032C27F4188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0BA2
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: WPyMHyPMYURiNEovNvvN8xYDR178Sm2Vt0qO0Eg8//U=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4f:ef:51:49:7d:12:e5:aa:10:32:c2:7f:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=9beb787ee51d95d122bff48ba8f5048c489fc6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:45:18:b0:25:64:5b:2e:11:2e:aa:fd:4f:
b5:bd:e0:52:54:b0:e9:b8:97:65:45:8d:e1:fa:c4:
1a:0d:a8:3a:ac:fb:7b:88:a0:e5:59:88:1f:c4:17:
b8:c4:ad:09:c0:a1:96:91:98:84:b4:25:06:72:4b:
32:35:00:d4:8a:eb:29:dd:30:c3:45:e4:bd:bd:a6:
7a:f1:a1:7d:35:3a:fa:2c:a7:74:41:08:6e:08:ed:
85:9c:87:fb:ec:cd:c2:24:7e:43:80:3e:fb:15:19:
b2:9a:c5:ca:0b:ef:45:c7:be:e2:b4:c8:f9:da:2d:
0a:0e:96:2b:b6:b8:6c:a5:ff:8c:49:a1:e2:84:7a:
88:25:97:1f:a2:44:5a:aa:95:d4:c8:a1:3a:fd:bd:
67:07:db:a8:62:3a:64:9c:42:ce:b5:af:5f:ee:73:
8d:1a:d7:fe:b6:0c:07:3f:d3:09:20:e2:24:34:fb:
ab:78:28:45:5c:ed:8c:5c:b6:3c:55:70:cf:b5:b9:
37:22:da:93:a7:e3:61:2b:cd:33:74:38:8e:d1:28:
b9:2b:13:2d:f6:e0:6c:13:98:eb:f2:ed:23:68:a7:
7a:c7:0f:11:e7:9a:b3:89:75:89:24:31:e7:b1:b7:
c2:16:61:ec:51:69:b7:f3:88:29:5d:cf:b8:75:2c:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:78:7E:E5:1D:95:D1:22:BF:F4:8B:A8:F5:04:8C:48:9F:C6:E2
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:06:ea:fe:2a:e1:31:06:b1:6f:34:6a:63:c8:e7:ea:c0:c4:
d9:1b:34:1f:34:93:56:a7:86:3d:66:42:26:d9:2a:41:81:6f:
a5:d1:08:26:54:43:06:7d:b3:f2:80:19:9d:65:23:dc:18:80:
b5:d4:00:f9:d8:9d:a6:15:3c:92:66:48:f3:82:02:e3:7a:23:
0c:65:c3:50:49:93:7d:5b:22:fa:6e:aa:2a:c3:cf:5c:3e:62:
18:b6:a9:9a:54:79:64:71:4b:a5:90:dc:04:92:d3:64:bc:55:
e9:b7:11:1b:d4:52:d9:90:8f:f7:14:39:f7:42:d6:c4:eb:eb:
51:16:06:3d:ff:9d:00:b4:99:96:ca:f0:a0:ba:fa:93:0b:49:
50:85:6b:ba:51:90:d5:88:ed:ec:bd:80:76:79:a8:59:eb:b7:
e2:62:95:98:d8:b2:8a:d5:94:66:c3:39:f4:c0:ea:9d:21:b6:
54:35:4b:31:76:b2:6e:15:e9:16:2c:81:1d:77:05:21:60:aa:
39:2a:4d:a4:62:85:da:31:ad:32:6f:fb:4d:7f:44:aa:8d:fa:
2e:5a:5f:b0:65:5e:3b:9a:b2:70:f5:57:ed:4e:e7:1e:68:cf:
74:ae:f0:a4:c9:da:4c:fa:1b:bc:6a:9e:69:97:d3:be:8c:56:
df:df:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:24 2026 by rpki-client