Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: hhQj9Ep9DMQn5Uws2Dd/2z+eyik9IJO3gPAwvFwGLgs=
Subject key identifier: A6:A4:4F:9A:2B:BF:E5:67:8F:BF:D2:1B:E9:F9:24:FC:93:D3:EA:E2
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 019D382EA82CB640BE187221A86F6DFB1240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 0B70
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: RWnyCFA3XOQvQDK0AFnAoGkAFQ3pRFb0nnllegOYcr0=)
2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a8:2c:b6:40:be:18:72:21:a8:6f:6d:fb:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=a6a44f9a2bbfe5678fbfd21be9f924fc93d3eae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:dd:a9:b1:f1:40:76:3b:60:8e:1e:29:1b:
ef:36:06:a1:ec:b9:61:12:53:20:66:79:b2:66:f4:
c9:26:95:5b:35:73:14:bf:f5:39:a8:44:9d:4e:c5:
53:48:1d:d4:58:a3:ac:16:2b:39:ca:c8:8d:6c:bb:
a4:8c:19:50:3d:e2:dc:c0:ee:11:54:ad:02:54:d3:
30:e3:67:88:f0:8d:44:18:e6:14:36:0d:b5:7f:ec:
50:58:03:3e:14:df:2e:1a:98:9b:fc:ec:7b:f2:bf:
f5:09:1c:23:59:4d:df:5b:c7:36:3b:fa:a1:00:9f:
ee:bf:e1:2d:a5:69:1b:1c:08:95:63:a1:95:c1:0d:
e6:8a:22:dd:ce:83:7a:d1:95:68:8e:31:c1:0d:fa:
f6:33:d0:b8:b7:8e:d9:42:f9:ce:07:6e:f9:7b:d1:
0f:2c:a7:1f:ad:b0:3c:bc:d3:77:57:cb:9e:05:1c:
44:4f:81:66:3d:e4:84:d2:53:ca:0a:1e:ad:42:6c:
0e:25:b9:20:01:de:0b:24:41:27:9c:50:78:13:a0:
5e:0f:77:45:a2:ef:6c:e9:43:7e:a6:c0:dd:4e:ce:
ac:78:ab:57:b2:b7:f6:49:c1:72:46:cf:4f:9b:9c:
ac:68:55:3c:e5:58:41:af:52:f9:6b:2e:f0:a0:24:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:4F:9A:2B:BF:E5:67:8F:BF:D2:1B:E9:F9:24:FC:93:D3:EA:E2
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:49:2e:bc:cb:77:c8:57:d0:97:36:4d:86:6e:2a:52:b2:71:
cd:50:bf:e3:46:17:a9:91:28:19:56:b0:3b:46:53:20:99:05:
86:24:da:67:c2:d5:0b:2e:61:ae:1a:e5:27:28:d3:8d:0d:b2:
29:eb:a7:4a:e2:8e:1e:1d:cd:fe:2b:50:d7:fa:b0:ff:cf:b7:
78:fa:f7:f3:ed:e5:a0:e1:a1:03:11:dc:3c:55:d1:be:54:e2:
49:f2:8d:5b:59:85:7a:88:c6:8a:f0:7e:47:ad:73:36:3f:d9:
9c:8b:d5:29:0a:65:67:c7:16:eb:5e:9b:6a:fa:8c:00:ed:be:
82:0b:22:d2:01:e4:e8:68:87:08:ff:27:3d:b5:3d:9d:15:c2:
a8:b5:eb:34:78:f8:c9:2c:49:27:99:ca:c8:71:d6:4a:d7:68:
09:56:05:a7:86:70:7a:69:7f:8b:38:90:6e:53:4b:ce:33:63:
39:a1:3a:41:a9:7a:96:23:20:50:1e:8b:8f:9f:53:74:ad:66:
8c:46:79:2d:6d:d5:05:6e:51:ee:7c:11:4a:fc:f1:73:73:13:
b2:96:9d:49:65:5a:4f:28:93:2b:3c:83:8d:65:25:36:69:09:
73:e8:d5:51:33:d0:34:8c:68:a0:b5:01:84:6a:1f:d1:9c:7c:
fb:c1:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:44 2026 by rpki-client