Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: fQ4CKcWhKoBjt8gZb5dvt3OwlPGBypXFqUM8iH2snW4=
Subject key identifier: 01:5C:E0:51:41:34:A7:C6:3C:ED:90:2D:0E:44:E8:B1:03:1B:C4:13
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 019CAB6B53C79CED32635C6704E93C8418D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: d06kp5Awo+TrFPX42+TReiZrjP9nPL3sVBs36L6laiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:53:c7:9c:ed:32:63:5c:67:04:e9:3c:84:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=015ce0514134a7c63ced902d0e44e8b1031bc413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:1e:37:90:c2:35:38:e9:e1:62:06:5f:af:
f2:11:3c:0d:d6:32:3c:37:c9:3e:75:7c:c0:33:b1:
ce:51:7d:f1:05:73:ce:6a:63:fe:65:0c:19:1e:f6:
8d:62:e1:6a:10:71:d0:5f:a4:6e:9e:d5:29:9e:7e:
4f:1f:d3:19:52:b2:49:4b:a5:db:03:b8:82:74:47:
f0:9c:9e:a7:86:66:0b:7b:cc:c6:4a:81:43:5d:bf:
4a:8b:53:34:0f:04:e9:57:dd:f0:16:23:33:a3:35:
a8:f2:a7:17:3d:a0:25:f7:0b:86:8d:d3:ba:7d:f3:
ec:3d:07:80:42:51:24:82:eb:20:40:ed:c8:44:4e:
be:6c:96:01:4b:d4:3d:06:0a:ea:d2:61:cc:88:25:
82:62:e9:00:b6:1b:35:e7:2f:7a:bb:d4:a8:26:29:
76:1f:43:ad:13:e2:0a:a0:f2:be:84:2a:51:52:22:
df:ab:2c:a3:08:b3:1c:11:5c:2f:a7:5b:ab:87:64:
91:ed:fb:6c:b0:04:b4:25:13:14:23:b5:e8:46:db:
25:72:03:fe:c8:1b:25:07:30:e4:55:c0:28:db:b3:
ef:17:f4:21:ea:8f:37:61:f6:47:28:dd:85:34:42:
7a:3c:86:8f:c8:3c:9b:11:10:52:37:5f:61:f6:87:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:E0:51:41:34:A7:C6:3C:ED:90:2D:0E:44:E8:B1:03:1B:C4:13
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:85:cb:7d:de:26:db:ac:4c:29:7b:93:88:37:fd:62:97:
fa:f1:8f:77:3f:7b:fe:54:36:56:f6:aa:a0:ce:a8:0e:40:4a:
e7:34:33:9a:1f:90:96:59:a5:02:2b:c5:cc:2d:06:c4:ee:f8:
9d:eb:ea:6b:6f:5b:22:8d:58:da:3d:6a:dc:ad:50:d9:22:5a:
09:13:d7:86:a2:6d:bb:23:4d:cd:e5:31:e3:26:ed:c1:fb:ac:
7e:69:10:5b:7e:00:c4:0e:a4:5e:99:f0:0b:26:7a:72:4f:00:
a7:b8:bc:61:34:0e:64:cc:1a:2f:b3:96:08:53:e9:10:48:88:
47:38:56:09:13:0c:da:8f:38:92:c1:d6:70:ce:d0:cd:68:b9:
5c:ad:64:0b:2e:b5:d0:1d:79:c6:0b:68:05:59:48:72:c4:aa:
13:17:ae:27:70:22:92:f9:d7:33:e8:a2:ea:52:c3:f6:a3:aa:
04:e9:47:24:bd:96:21:b8:0f:4f:9d:33:29:ba:e6:df:83:6e:
92:1b:0a:67:d5:19:cb:88:ab:70:f4:ca:65:cf:b8:e9:5a:b8:
38:1a:a8:b0:ac:8d:f3:ba:f7:08:bd:f1:69:20:6f:cd:3c:bd:
5a:ca:a6:06:f2:d1:19:77:86:ef:f2:05:06:b7:be:99:5a:9e:
b6:85:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:18 2026 by rpki-client