Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: nlvOqJFa+E2dauOJcNPjwrfQ0gYAIx09MEr4fnc3s4M=
Subject key identifier: 2F:38:2E:97:7C:05:E3:BA:CF:48:E2:6F:6D:86:8C:44:46:A5:F7:DD
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01A000CAAB3B323D417428AFCE50FF642020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0CE1
Signing time: Fri 14 Aug 2026 15:01:17 +0000
Manifest this update: Fri 14 Aug 2026 15:01:17 +0000
Manifest next update: Sat 15 Aug 2026 15:01:17 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: 09zNN37rT0WGid/lTZteW525QCBjDshFgUgBxGwbOXk=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:ab:3b:32:3d:41:74:28:af:ce:50:ff:64:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Aug 14 15:01:17 2026 GMT
Not After : Aug 15 15:01:17 2026 GMT
Subject: CN=2f382e977c05e3bacf48e26f6d868c4446a5f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:42:cf:27:4e:6c:58:c3:8c:28:f9:3a:ab:
18:1c:86:3d:32:0d:dd:28:f7:85:7a:75:5c:4b:39:
79:37:1c:26:2f:61:8e:21:55:5a:f0:e8:84:60:63:
85:03:b7:1f:f2:70:5c:95:c6:50:06:3f:12:4f:9c:
8f:d6:f5:1b:cc:d0:4f:aa:bb:fb:41:18:28:05:f0:
22:bc:a3:b2:3d:eb:8b:13:e0:70:47:e6:09:9c:c6:
d9:a6:66:ff:28:ef:f1:ef:0b:5e:4e:5c:67:c3:b1:
79:26:4a:ca:9f:3a:b3:b3:e8:e7:d2:b9:40:8a:f9:
cb:78:ce:0b:0f:ae:01:b0:e3:00:ed:db:1d:86:34:
b7:39:b6:ff:6c:4a:a6:b9:cd:c5:32:db:6b:46:10:
f3:aa:ae:33:9d:a5:fb:76:e7:21:fc:89:d9:8c:8c:
40:16:5b:4a:29:63:e2:13:4d:a0:27:36:c4:8c:80:
18:47:90:5f:c6:44:8a:eb:73:43:9f:35:43:7d:5e:
95:c3:43:9a:f3:bd:64:76:e6:df:63:79:c0:fb:ca:
2b:1f:a7:bd:e9:94:67:c6:9f:09:c4:0e:6f:38:5a:
40:8b:5a:31:bc:6e:ef:79:86:c4:6a:98:f1:1d:20:
fd:eb:55:aa:40:a9:d4:72:3d:18:cc:d0:85:31:b0:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:2E:97:7C:05:E3:BA:CF:48:E2:6F:6D:86:8C:44:46:A5:F7:DD
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:f0:83:d9:c4:02:c1:e3:35:37:68:d0:72:1a:02:c8:a0:
fd:6f:10:62:84:55:5e:f1:ea:57:a5:e0:99:de:29:c1:47:60:
1a:e4:1e:7b:b5:d5:c2:7f:b9:35:46:f3:30:71:36:79:b3:a6:
d3:91:a5:4c:e0:da:4a:a1:2e:76:2b:92:c7:2e:b6:69:e9:67:
d8:77:59:62:7b:8f:d7:a2:c9:c0:25:e1:2f:b2:5a:32:fa:21:
bb:b0:43:be:03:5c:97:79:27:38:b0:54:b2:57:9c:33:41:62:
98:ba:a7:e8:65:ca:54:cb:4f:d6:11:a7:f6:6c:fb:45:bb:71:
f5:a4:69:b1:81:ae:45:b9:8a:2e:e4:26:cf:14:f0:ef:5f:f5:
44:3f:73:a6:65:5e:fa:95:fb:b4:1c:d4:96:31:26:65:8a:28:
3d:bf:f6:48:c8:80:9b:f4:02:d3:50:63:3f:b3:99:7d:ac:6b:
aa:78:04:e7:77:65:6c:23:d7:53:f4:27:d5:d9:7c:93:97:8a:
d4:94:46:df:e0:4d:b6:c3:e8:f2:d5:2d:db:36:e9:85:4f:47:
1e:da:7f:34:6a:21:8e:f8:bf:49:06:6a:e8:19:06:4a:d6:14:
cc:c7:7b:cc:a7:2f:4f:72:9b:4b:e5:07:c8:39:a5:eb:3a:8c:
0c:73:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:47 2026 by rpki-client