Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: CauE7SVuT8OItJpgopginVL2b2fLBFvmirkcvfy62ag=
Subject key identifier: F0:81:C6:DA:CF:F6:A0:44:12:09:0D:90:6B:C3:8E:8D:A6:45:35:53
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 019CAE356E47FE99AF0286C8608F15BBD26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0CFC
Signing time: Mon 02 Mar 2026 11:01:02 +0000
Manifest this update: Mon 02 Mar 2026 11:01:02 +0000
Manifest next update: Tue 03 Mar 2026 11:01:02 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: YVbD435Aw2LZTpkKtBKTEHB115YGuwJi275f4IEkVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:6e:47:fe:99:af:02:86:c8:60:8f:15:bb:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Mar 2 11:01:02 2026 GMT
Not After : Mar 3 11:01:02 2026 GMT
Subject: CN=f081c6dacff6a04412090d906bc38e8da6453553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:40:f7:26:65:13:ca:d3:4a:43:cb:bf:6f:
22:92:8f:9d:72:97:fe:80:89:85:52:18:9b:8a:e2:
82:58:28:80:44:ce:5e:a5:73:20:87:a0:4e:f6:c7:
13:fb:a2:13:cb:b0:be:05:8a:28:ed:66:e6:d1:42:
74:5c:69:7b:6b:c9:5a:07:f6:4e:b4:a8:29:1f:7e:
9c:1d:5f:a7:7d:2d:03:fc:f5:6d:fa:9a:31:2b:f3:
e6:20:4f:a3:0f:91:e5:75:c5:10:d2:3f:f5:c8:74:
73:a1:78:e7:ac:31:7f:cb:8c:2f:16:b2:d8:26:54:
8c:f8:58:3f:63:bd:83:6d:12:38:39:94:2c:fe:e4:
ec:c2:0a:4e:10:00:01:79:43:51:31:ca:36:23:68:
08:f4:e5:47:7f:c8:37:8d:25:93:e4:52:b5:2b:cb:
bd:b1:1b:72:b4:61:5c:6e:f0:21:84:f4:7b:f2:da:
7f:7d:f9:f1:ac:b7:9e:0d:7c:92:83:2b:a8:d7:1e:
c0:c3:dd:28:b3:f5:c0:32:df:f2:2b:26:a8:9d:e0:
e0:c3:dd:e9:39:cf:85:64:90:29:0b:ed:82:ce:50:
13:67:75:7a:4b:93:54:71:b1:dc:e5:b1:b8:3a:29:
60:82:a4:59:38:0f:61:8f:b7:bf:ce:f0:44:47:6c:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:C6:DA:CF:F6:A0:44:12:09:0D:90:6B:C3:8E:8D:A6:45:35:53
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:46:ca:6e:e3:4c:19:7d:90:c2:2d:2a:82:49:64:5b:42:b7:
b2:50:bb:d2:49:88:e9:51:00:74:4f:22:75:c3:af:51:45:ed:
df:4a:61:da:a8:9c:88:98:3e:cb:e2:9f:d4:c2:b6:35:dc:f0:
5d:38:81:fe:c1:e9:25:af:7b:70:e7:b5:9a:d3:4f:76:34:82:
cb:21:39:40:c0:e5:41:30:6b:5d:7f:21:db:5c:79:c1:a1:04:
3b:d5:6f:e0:84:a4:60:b1:4f:7e:3d:b1:3a:44:1c:93:45:af:
54:a7:7c:35:14:c5:fe:dc:92:d9:eb:4d:59:5a:b5:6e:a4:65:
72:95:21:dd:39:74:0e:c2:7d:dd:75:e2:e9:24:2b:9c:e4:1f:
3a:ee:78:cb:8f:0a:69:4c:ec:05:71:5a:c6:50:10:f5:e9:3c:
00:12:d0:2d:ee:bb:e7:a0:9f:0f:fb:d2:40:86:e7:ba:56:08:
5b:62:c8:be:c0:99:d1:a6:61:79:35:e4:f0:d5:85:b8:67:da:
57:00:d8:47:ef:a1:31:21:77:19:18:9f:c4:8c:c0:e1:d1:a9:
c5:36:7e:9c:ca:5c:6d:c0:87:b2:aa:2b:60:bf:f6:52:22:be:
cd:46:8d:de:98:88:a2:03:57:73:0c:f6:e1:84:30:a0:59:fb:
16:bb:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:10 2026 by rpki-client