
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: wGNP3Xh5nxHRPRPGb3M5E0vVwPW/dZJuKJQDitAkYUQ=
Subject key identifier: 3E:1E:58:DA:DC:92:59:2A:DE:FC:6B:31:5E:F6:31:0B:6A:EC:8C:4C
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01A1434D043D5E7B05EBDA2E877AA9409B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0D88
Signing time: Fri 16 Oct 2026 06:01:23 +0000
Manifest this update: Fri 16 Oct 2026 06:01:23 +0000
Manifest next update: Sat 17 Oct 2026 06:01:23 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: oFbv279FZwGefS7KyvEs7P0LIsGciOs19/TmZEy9BWo=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:4d:04:3d:5e:7b:05:eb:da:2e:87:7a:a9:40:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Oct 16 06:01:23 2026 GMT
Not After : Oct 17 06:01:23 2026 GMT
Subject: CN=3e1e58dadc92592adefc6b315ef6310b6aec8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:3e:bb:c4:65:65:2e:57:2b:57:c5:9c:dc:
1b:6c:d0:d2:67:42:3e:d3:ed:95:17:93:af:dc:6e:
c3:ca:59:dd:6a:0e:70:88:92:73:78:1e:18:d4:80:
21:83:03:c6:5e:93:00:51:bc:db:24:91:3f:53:89:
ee:66:60:d6:7b:dd:ff:d0:2d:a6:30:a1:80:ce:27:
11:49:84:34:2d:b0:2e:00:39:eb:34:1e:1f:93:f5:
46:97:a9:8e:fe:88:c3:53:27:d9:14:15:81:88:f3:
b0:20:88:9e:d8:66:6b:ad:5d:58:c1:17:3e:f3:dc:
af:6b:06:04:34:99:5c:15:56:65:01:99:9f:d4:ea:
b8:ae:3e:12:0e:c5:58:8e:c6:ff:97:a7:04:3c:c0:
ed:2c:21:f1:d4:ad:21:38:1c:8a:eb:0e:64:c1:8f:
05:80:f2:5c:a4:56:f5:e7:e6:ae:11:fe:96:58:a3:
f4:a5:e2:30:22:06:c7:0d:9b:18:cb:73:a6:73:47:
f9:eb:a3:af:04:40:33:44:46:bc:d9:79:49:7b:1e:
f2:bc:a7:d2:cf:4e:a0:30:73:3d:b9:38:02:98:20:
a6:63:4d:34:92:84:d4:07:af:89:78:20:01:f9:26:
66:1c:14:d0:87:28:38:8d:80:83:f8:b9:ef:e7:24:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1E:58:DA:DC:92:59:2A:DE:FC:6B:31:5E:F6:31:0B:6A:EC:8C:4C
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:73:00:3d:37:c7:22:e1:75:f4:3b:af:24:fd:aa:38:a9:
27:a5:61:4a:b8:eb:69:eb:25:a0:9b:e4:37:39:4a:4e:d9:01:
86:76:6e:77:e1:4a:6d:cb:97:ac:cc:44:46:80:8e:7d:cf:a4:
4a:3d:33:6a:bf:4b:4c:b0:dd:3a:e5:8f:d5:c5:9c:c2:e3:17:
44:36:41:b2:c6:6e:9f:10:8b:20:c0:0e:d9:34:0f:eb:c0:f8:
f7:70:43:b3:ae:10:6c:95:54:1f:83:b8:a6:0b:b1:2e:c4:c0:
a1:7e:b3:2d:4b:e1:64:d1:5f:dc:68:62:5b:b2:86:fa:dc:43:
51:3c:4b:68:a3:5b:95:ae:88:b0:e7:5a:53:4d:24:f6:6f:0b:
8c:2a:a0:af:8d:97:cb:d0:af:f0:cc:fc:8a:7a:00:37:02:99:
ae:75:bb:08:80:44:cc:25:33:9f:96:38:ee:42:96:d8:cd:59:
96:24:4e:55:a8:67:43:1b:69:fb:33:a6:be:45:09:87:d1:bf:
42:7c:67:c2:6c:53:a2:bf:ca:f0:04:4c:7b:fe:d8:3c:c4:60:
90:b4:a4:f3:7b:fa:20:6c:52:ce:00:17:ab:50:8b:5e:29:75:
64:18:85:64:ff:3f:aa:28:90:8a:c3:cf:38:e6:1a:35:84:8f:
b2:d8:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:21 2026 by rpki-client