Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: Jm5iOfsTMIrf8uDEL+XUvz+6WH4mcywOwOJymAhhZU8=
Subject key identifier: 2A:FF:26:FD:DC:EE:BC:3A:F8:0F:67:0E:44:9C:4F:34:7E:09:9A:3E
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 01A0201E15066F51CF36CE2E3B8E4EC79EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: D2
Signing time: Thu 20 Aug 2026 17:00:37 +0000
Manifest this update: Thu 20 Aug 2026 17:00:37 +0000
Manifest next update: Fri 21 Aug 2026 17:00:37 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: FVFZMeYUgiszi/CaAkRsFbmKLE/xFwKg1DUeaJ0Vdgw=)
2: hR2Y21D7bGLkXBKfLZ5CaTvZjkk.roa (hash: YlH5pSNmOHP/rxbn9aW9AqtUI/I4F8K3HIAacFaEpNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:15:06:6f:51:cf:36:ce:2e:3b:8e:4e:c7:9e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Aug 20 17:00:37 2026 GMT
Not After : Aug 21 17:00:37 2026 GMT
Subject: CN=2aff26fddceebc3af80f670e449c4f347e099a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:21:59:6c:ca:66:48:a8:a4:5d:05:02:0b:
41:f2:4f:2f:f9:0e:aa:00:ba:71:6a:ec:32:00:f8:
62:fe:a8:9d:33:d6:c6:62:02:9a:0e:67:03:4e:8f:
69:8e:e2:c3:fd:a1:cc:b4:ee:40:7d:b6:18:06:62:
bd:fe:7b:65:ca:0d:da:22:89:c2:77:ed:ba:35:9f:
92:16:21:47:50:c2:c2:09:1a:a8:a8:bd:30:d3:fc:
20:7a:6d:70:95:3f:6c:6c:78:bd:59:c3:33:a8:f6:
3b:5d:e7:5c:a0:a9:3f:c7:c5:b7:0c:03:43:7c:d7:
f7:bd:c4:b5:24:ee:16:81:a8:16:33:ee:09:93:f7:
32:ba:36:c8:d5:5a:3e:74:86:13:2a:4b:26:91:8b:
37:f6:ca:51:7d:41:a9:23:71:3d:0a:89:80:93:86:
6f:23:89:4b:89:50:23:81:92:8f:47:42:50:a8:f0:
de:0d:fb:59:39:1d:15:67:3b:99:c4:df:96:fc:82:
c6:4f:4f:37:e4:16:61:ba:9a:54:10:99:80:ec:b3:
0d:03:7c:17:26:5b:5d:7b:51:93:62:97:53:88:35:
25:e0:08:d3:40:ee:b4:d3:86:10:91:06:af:71:03:
22:33:5d:db:09:3c:1a:c1:5d:96:33:0e:45:8e:1d:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:26:FD:DC:EE:BC:3A:F8:0F:67:0E:44:9C:4F:34:7E:09:9A:3E
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:a9:bb:b8:61:85:9c:80:94:25:12:b8:bf:47:ac:6e:31:
9f:f1:9e:6c:14:85:11:00:7f:0d:2b:65:8a:ad:a9:ea:29:d3:
48:1f:46:3a:26:0c:33:ba:04:75:7b:2c:d9:9f:8d:c5:12:2d:
41:73:77:42:93:a0:0f:a2:17:60:a2:de:8d:73:b8:36:ff:b2:
71:72:ce:fb:b2:7e:c6:93:6a:cb:7c:4b:48:fe:43:ac:0a:2c:
2b:9a:24:ca:52:3b:b4:aa:04:c3:f1:de:8d:00:4f:f8:4f:d1:
23:9e:d9:2e:bc:86:48:b3:dd:c3:7a:97:23:a5:52:70:cd:9b:
5f:4f:09:2c:15:45:e1:28:7e:82:d9:c3:ea:8e:a0:4c:5f:83:
31:ba:93:77:f9:26:88:78:8d:57:e7:8b:6c:73:54:4f:00:d3:
42:4e:ae:83:b0:84:56:d1:c9:44:77:c4:a1:dc:d6:c2:90:81:
6e:36:84:ff:71:9e:e2:d8:c5:ea:db:af:24:1d:79:bb:55:00:
20:20:48:40:9d:50:0d:0c:b3:c6:d5:70:96:e6:58:70:3e:7d:
e9:00:77:13:ad:8a:83:e6:4a:72:ca:92:aa:3b:0d:e3:e3:eb:
e7:1a:49:e2:c3:9c:c9:42:5c:e7:11:2f:2f:d8:5e:9d:c6:f1:
33:c6:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:02 2026 by rpki-client