
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File: 2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier: gF1cOF7Zgs6rY0LnT1Pq729QgNA6jCTLVpm3jnYKmk8=
Subject key identifier: DB:F6:08:2A:45:B8:D7:17:E7:32:F1:69:9D:28:3E:6C:BD:A6:AC:05
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 01A06F837E562EDD82BF0A49ECD4795A2A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:23 +0000
Manifest this update: Sat 05 Sep 2026 03:01:23 +0000
Manifest next update: Sun 06 Sep 2026 03:01:23 +0000
Files and hashes: 1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: KcZGm6hWMHak8FSKghwviJ80/g94JqphdSrZLuOo7Xk=)
2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:7e:56:2e:dd:82:bf:0a:49:ec:d4:79:5a:2a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Sep 5 03:01:23 2026 GMT
Not After : Sep 6 03:01:23 2026 GMT
Subject: CN=dbf6082a45b8d717e732f1699d283e6cbda6ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:2c:3e:e7:eb:64:fd:a3:8b:11:df:03:75:
7c:23:df:c8:ea:e7:82:b0:cf:a3:5b:14:f4:a5:13:
2c:b7:4d:6e:30:ae:06:d7:a5:ac:6d:e1:e8:c0:3d:
d8:7b:ff:3b:51:9e:f5:d5:4e:44:0c:71:b4:63:e3:
cd:f2:6a:52:54:84:4e:59:12:56:77:2c:9d:ea:06:
2a:e6:37:fa:c3:e4:63:f4:da:f4:89:86:23:95:e5:
ac:ee:fc:83:dd:a2:4b:be:18:05:4d:75:c9:8d:eb:
29:a5:b2:a7:0b:7c:d6:2d:a0:0c:5a:c8:1f:4c:f0:
84:93:c1:39:b3:ee:96:5f:b2:bb:2b:f4:02:b3:07:
99:79:46:27:ce:49:1f:92:56:1e:c4:76:f0:33:6f:
73:cc:c6:cc:6f:6d:ed:95:2a:5e:ea:07:f2:a7:8d:
82:85:b4:50:bb:a0:46:08:9d:22:2d:38:7b:cc:01:
6d:cb:91:f9:7c:98:9d:67:ba:ef:77:6d:ff:b9:e5:
22:b3:27:20:94:7c:32:a6:a8:cf:62:a5:33:c6:7a:
20:82:ff:b6:45:0e:1b:fc:c8:5c:a1:73:ec:18:a2:
01:7d:80:8d:08:f7:23:04:47:da:97:75:c6:92:83:
5f:6d:7a:9e:e9:43:5b:65:ec:e1:ed:fa:61:9f:cf:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:08:2A:45:B8:D7:17:E7:32:F1:69:9D:28:3E:6C:BD:A6:AC:05
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:08:1b:95:03:9a:e7:57:4c:51:ab:8f:8d:c8:12:1f:59:
09:10:f0:ae:7c:a1:db:b5:ed:08:30:bf:de:6b:9f:91:72:0e:
10:19:71:16:88:25:b5:bb:89:5a:1e:63:3f:59:98:ea:ed:96:
91:4c:73:af:96:51:3a:8a:c2:ba:44:3d:49:58:b2:97:94:11:
7e:d0:56:c0:56:2a:31:fa:79:75:4a:f4:60:f9:bd:d0:13:fd:
82:a7:d7:66:d5:34:08:90:ae:fe:cd:28:9b:b0:b8:19:cc:7b:
20:ff:62:97:56:de:de:12:73:55:06:67:16:74:2e:fe:91:06:
5e:ee:a5:e6:30:d5:1f:5a:45:e7:db:33:55:28:f6:ee:4c:c4:
11:62:ad:b0:70:eb:e8:7c:6c:f8:f8:61:da:b5:b2:71:9f:e3:
a0:b5:3f:cd:df:14:87:07:69:47:86:af:fd:ed:6c:c0:98:e2:
59:ef:fc:52:b1:66:13:3b:72:9d:2e:df:5d:90:10:19:57:06:
fd:a4:86:34:bb:4e:91:d3:95:87:6e:fe:6c:0b:04:22:61:40:
76:ef:d6:8e:9c:9a:c3:ef:51:45:c0:ee:7a:56:c0:ba:e5:1f:
ed:d7:4d:dd:5e:8f:26:1b:f8:17:2d:63:86:c9:9b:ac:02:4c:
59:b7:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:21 2026 by rpki-client