Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: VBwecGGi9XsdyP43XqPLCjDyqKyBsJklRGj1Nde1anY=
Subject key identifier: 8B:3B:AB:00:93:CE:9C:AC:40:FE:B9:B4:9A:63:FD:A2:AF:17:33:3C
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019CAB3426DB12BBDBF1484311CEE9BA8E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0B27
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: /jkymQv0tbRZY+0OUTnM6yMcg7fe7/RtBc0xrvaK+lU=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:26:db:12:bb:db:f1:48:43:11:ce:e9:ba:8e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=8b3bab0093ce9cac40feb9b49a63fda2af17333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:64:ae:6f:36:60:56:20:ae:47:62:4f:75:
ab:68:52:50:0a:ae:04:35:e8:ad:a7:70:0b:50:39:
78:ea:87:30:b4:1d:fc:32:bb:cc:a1:c7:c6:2c:b3:
4f:bd:7f:c5:bc:02:08:94:13:fe:65:2f:db:11:01:
2e:d4:4e:df:b0:9f:3c:61:cc:df:a6:db:2d:7f:33:
a3:26:e3:6a:61:d7:a0:07:be:58:98:21:46:94:66:
b6:9d:5f:89:b9:4a:6d:e3:a8:b4:c0:3f:8b:a9:df:
a7:f6:13:2d:e4:e6:ac:3d:7b:e3:97:81:8f:59:5e:
b4:12:26:69:bf:cd:eb:47:15:ed:2c:b4:4a:9e:5c:
4f:e7:2f:39:4d:e8:dd:50:14:f4:34:ca:43:f2:ee:
1c:12:3b:aa:86:29:34:76:07:69:9f:07:94:f2:33:
9e:78:38:62:5a:ad:83:e3:84:64:7a:e9:8d:86:9d:
15:e9:3c:e8:56:d4:8b:2b:eb:3a:1c:11:84:0e:36:
4c:94:72:45:77:a9:a7:d5:f2:a7:f3:a5:7c:f4:6c:
32:7b:8b:70:59:83:d9:1c:16:35:e3:98:2e:95:60:
4e:04:73:ad:4f:cf:3c:9f:c0:23:89:d1:ff:68:e0:
2a:5d:a3:d6:3f:b1:b9:91:bc:69:c5:a2:37:d7:ac:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:AB:00:93:CE:9C:AC:40:FE:B9:B4:9A:63:FD:A2:AF:17:33:3C
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d3:eb:13:cc:06:39:5e:c2:14:a5:4a:7d:85:24:52:41:a0:
e4:c9:8f:46:9b:f6:8f:6b:07:f3:9e:eb:d0:77:ef:18:49:53:
b0:65:25:8f:05:a3:fe:4a:71:a7:1b:41:28:25:d0:79:82:46:
fe:74:d0:32:ec:d8:f3:8c:b5:28:ef:61:58:b9:c6:f3:88:40:
48:77:9d:ac:02:1d:f0:0a:8e:d6:2e:10:7c:8d:f8:e3:18:a7:
16:8f:83:b6:7f:c8:6c:25:25:6a:4b:f3:d9:5f:42:4e:8d:fc:
3d:01:c1:cb:4a:0a:68:59:c6:4e:b2:28:da:5e:a7:01:62:8f:
43:be:4a:42:82:41:9f:49:2c:0f:b4:87:51:97:1c:37:08:45:
0d:38:79:5f:a4:39:4e:93:44:0e:fc:1b:1a:28:53:dd:75:89:
f1:24:ed:4c:15:f6:16:2a:ec:83:03:c5:c9:7e:1e:93:a5:10:
23:76:68:9c:c5:c2:f8:cc:31:05:aa:6b:1e:73:01:9a:37:73:
07:f8:53:8e:a7:05:aa:a1:79:85:76:16:94:09:bc:3e:67:62:
25:72:1f:66:98:ca:6d:d0:fe:e4:e7:2e:0d:ed:c1:94:bb:63:
89:c6:7d:f2:12:70:65:47:5f:94:be:04:84:d8:ec:ba:f3:93:
8c:9a:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:02 2026 by rpki-client