Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: U760Qy2gaHYmSNcxaNeP3HsbQF0/S2aADnaJFsm8FBo=
Subject key identifier: E2:54:4B:E2:79:77:09:C2:B2:90:DE:50:0F:92:2B:57:BC:2E:34:23
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019E314DDA01EB704D979C6F75D36D93DE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0BF1
Signing time: Sat 16 May 2026 15:00:46 +0000
Manifest this update: Sat 16 May 2026 15:00:46 +0000
Manifest next update: Sun 17 May 2026 15:00:46 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: IynskBPMIu8WUy3kGLGA+C22tFZ8PkJkEYYTVBqJaro=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:da:01:eb:70:4d:97:9c:6f:75:d3:6d:93:de:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: May 16 15:00:46 2026 GMT
Not After : May 17 15:00:46 2026 GMT
Subject: CN=e2544be2797709c2b290de500f922b57bc2e3423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:91:73:f2:5b:cc:72:b8:e2:fc:a4:7f:d3:20:
a6:1e:37:db:57:6c:ef:85:db:2e:94:5b:67:9e:1b:
dc:0b:07:e7:7e:57:38:5e:0d:a1:8f:1e:90:90:e1:
02:3f:09:f8:3d:7a:38:c0:9d:b3:77:a1:28:69:60:
ca:31:96:54:1f:9c:fe:b0:41:e3:06:ce:c6:47:cd:
87:ed:28:82:dd:2e:ea:51:03:bc:70:d9:50:9a:62:
3d:b2:84:48:eb:60:a6:31:6b:19:c5:64:f5:d5:2f:
ee:28:c6:c2:e9:ae:22:5f:d8:38:44:8d:76:dd:fd:
6a:05:7e:23:81:b2:28:01:77:74:10:f1:2e:89:c4:
6a:c3:ab:b2:47:db:b3:7f:31:96:ac:84:ad:de:1b:
61:41:b8:3b:a6:90:9c:cf:f2:1e:56:8d:01:0b:bf:
1c:48:1e:bf:a6:bc:c1:b6:e6:45:a5:90:c5:56:6b:
59:eb:a2:c7:cf:3d:9d:38:6e:76:81:25:4e:98:7f:
e8:4b:0f:de:87:e4:62:d7:02:8e:83:fd:ec:aa:d0:
2f:f4:5c:da:b5:9d:6a:ff:dc:72:53:ac:56:77:30:
96:13:bc:7d:eb:22:06:d1:5a:07:cf:0d:73:03:2a:
e8:1a:57:0c:2f:8c:6e:4f:95:bb:08:9a:1f:0e:99:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:4B:E2:79:77:09:C2:B2:90:DE:50:0F:92:2B:57:BC:2E:34:23
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:68:bf:56:aa:e5:a0:3c:ec:f3:b7:a8:94:51:c1:f1:82:
9e:2b:48:67:9b:9a:09:5d:78:c9:88:1f:28:48:ac:a3:03:07:
4f:3c:e1:9e:82:6a:c8:fd:dc:32:3e:9e:db:a3:98:2a:80:3d:
86:06:cd:fd:4e:dd:17:46:23:84:81:d9:91:27:6c:e0:28:52:
2e:34:81:fb:f0:f6:e2:a7:8c:f5:ca:11:c5:5b:36:26:0f:71:
59:df:ce:23:97:32:f5:56:37:27:68:cc:fc:ce:10:a4:e5:a8:
1c:de:95:62:de:0b:ee:93:b6:19:5b:45:c7:21:bc:3e:08:98:
6e:de:e7:d5:f0:ac:7f:6d:49:84:67:09:86:ce:9a:36:9d:06:
f3:07:1d:d6:0e:f9:9c:fb:d4:5b:59:af:61:c3:d3:d0:d9:03:
06:94:0f:5d:8a:91:11:6f:a5:79:9d:c6:69:b9:c0:5e:ce:6c:
61:2d:1d:a6:a0:26:04:61:f8:09:3c:d4:fe:a4:fd:27:2b:9f:
45:bd:3e:17:1e:6c:d4:27:a1:33:74:1e:47:5c:20:ed:24:e6:
fc:5a:78:21:f8:8c:8d:5b:e6:84:2e:96:11:25:d0:80:cb:8a:
03:ad:e2:9e:7f:ad:10:2d:0e:b5:ba:f5:50:81:07:4b:14:4b:
d0:ed:4e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTdoB63BNl5xvddNtk95tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4
MDFlYmYwHhcNMjYwNTE2MTUwMDQ2WhcNMjYwNTE3MTUwMDQ2WjAzMTEwLwYDVQQD
EyhlMjU0NGJlMjc5NzcwOWMyYjI5MGRlNTAwZjkyMmI1N2JjMmUzNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZFz8lvMcrji/KR/0yCmHjfbV2zv
hdsulFtnnhvcCwfnflc4Xg2hjx6QkOECPwn4PXo4wJ2zd6EoaWDKMZZUH5z+sEHj
Bs7GR82H7SiC3S7qUQO8cNlQmmI9soRI62CmMWsZxWT11S/uKMbC6a4iX9g4RI12
3f1qBX4jgbIoAXd0EPEuicRqw6uyR9uzfzGWrISt3hthQbg7ppCcz/IeVo0BC78c
SB6/przBtuZFpZDFVmtZ66LHzz2dOG52gSVOmH/oSw/eh+Ri1wKOg/3sqtAv9Fza
tZ1q/9xyU6xWdzCWE7x96yIG0VoHzw1zAyroGlcML4xuT5W7CJofDplHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJUS+J5dwnCspDeUA+SK1e8LjQjMB8GA1UdIwQY
MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt
NjJkYzQ0N2ZlNDM4LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4
LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2Bov1aq
5aA87PO3qJRRwfGCnitIZ5uaCV14yYgfKEisowMHTzzhnoJqyP3cMj6e26OYKoA9
hgbN/U7dF0YjhIHZkSds4ChSLjSB+/D24qeM9coRxVs2Jg9xWd/OI5cy9VY3J2jM
/M4QpOWoHN6VYt4L7pO2GVtFxyG8PgiYbt7n1fCsf21JhGcJhs6aNp0G8wcd1g75
nPvUW1mvYcPT0NkDBpQPXYqREW+leZ3GabnAXs5sYS0dpqAmBGH4CTzU/qT9Jyuf
Rb0+Fx5s1CehM3QeR1wg7STm/Fp4IfiMjVvmhC6WESXQgMuKA63inn+tEC0Otbr1
UIEHSxRL0O1O8g==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:28 2026 by rpki-client