Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: P5GeC0BhFCTbgbtSxkGczvf5Wjfpil6fiuMb44FrDsY=
Subject key identifier: 69:C8:AF:DD:36:A4:40:4B:37:95:76:A2:8D:26:04:A1:44:68:EB:7A
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01A0C5C510085D3025C0D2F369539757F423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0D47
Signing time: Mon 21 Sep 2026 21:00:21 +0000
Manifest this update: Mon 21 Sep 2026 21:00:21 +0000
Manifest next update: Tue 22 Sep 2026 21:00:21 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: Mcy5gwjyVCzjB6tLS7OKQexyTN8eq5fBu6olVL5FQSE=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:10:08:5d:30:25:c0:d2:f3:69:53:97:57:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Sep 21 21:00:21 2026 GMT
Not After : Sep 22 21:00:21 2026 GMT
Subject: CN=69c8afdd36a4404b379576a28d2604a14468eb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:35:76:a9:54:4d:4e:8f:eb:ec:a1:c9:f7:
57:93:19:d9:f2:87:a3:4a:4e:93:af:b4:46:0a:b3:
62:18:e4:45:d7:d0:bb:49:0c:7b:49:bb:64:a0:5c:
26:38:da:e1:92:ea:47:62:54:b2:74:11:34:b1:1d:
73:5c:fa:97:33:32:85:4a:2f:ac:15:3f:4c:79:d9:
a2:8b:5a:91:b0:29:c7:5d:1d:4c:98:b6:91:75:25:
d8:85:f4:26:0c:7c:2c:0f:f7:9a:c8:26:bf:d9:93:
86:f0:ee:03:9e:b1:3b:cd:33:56:76:c1:32:a5:c1:
ac:2e:62:83:59:0a:12:d7:7d:58:91:d4:4f:ac:ad:
05:5a:06:53:5c:31:52:c6:7f:02:5f:96:bb:84:2e:
64:ea:db:39:14:86:b3:48:72:2b:36:92:4f:a0:8a:
b7:75:6e:dc:02:51:1a:34:de:b6:75:a7:2a:b9:bb:
00:98:e2:a9:a9:ae:c5:d3:28:87:c9:9b:29:cb:f8:
9a:4d:49:88:75:7f:db:a9:a2:1d:83:9a:42:e4:d3:
7c:c5:50:1a:92:0f:53:c4:53:fd:0f:85:28:4c:2b:
52:16:16:d2:2c:58:d5:5c:c3:e3:97:9b:47:2c:93:
7b:0b:1e:e4:84:a0:7a:a0:0a:9f:f7:07:fc:10:e3:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:AF:DD:36:A4:40:4B:37:95:76:A2:8D:26:04:A1:44:68:EB:7A
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:0e:6c:b5:29:68:c0:3c:1d:f1:bd:ff:a3:65:2b:16:bd:
24:30:2e:44:78:09:a1:28:18:ee:17:1b:18:f6:16:78:f6:82:
bc:ea:74:25:f1:5c:ad:4d:3b:cf:ee:56:1d:a4:99:d3:92:89:
70:d1:e2:ad:5a:7f:f7:e9:df:c5:3b:d5:48:10:45:75:d7:6c:
cd:0d:b8:ed:45:06:5f:b4:5a:2f:7b:e0:11:9e:a8:8f:62:06:
f9:43:85:43:67:1b:8c:6c:f4:a7:17:3a:e7:83:a2:8c:66:20:
dc:7b:f5:32:8f:69:a7:78:6a:db:1f:4c:c2:40:87:91:dd:d9:
2d:c3:99:79:1b:86:11:ab:ee:3c:38:04:4b:0a:d3:19:f8:71:
6c:3f:14:75:99:58:9f:78:7e:5d:c2:d8:02:fa:14:0a:7b:9a:
0a:8f:cf:a1:bc:7d:3c:59:ed:f2:19:43:fd:07:8a:ad:86:3e:
be:be:39:81:e0:3a:f0:4e:94:3d:66:45:59:d7:c1:8e:17:6b:
13:4b:23:25:c3:40:1d:64:86:48:41:cf:c0:b3:d1:78:b7:29:
25:02:11:ad:ba:39:70:27:17:8d:58:06:70:58:f6:be:33:c1:
2d:f1:0f:2b:f2:c6:39:17:02:22:8d:87:c0:bd:32:b1:53:cd:
0a:5d:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:06:22 2026 by rpki-client