Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: tVhg48FtKheSZkqPNYcIrkN03+l3AfpbRqeaKbRmYGg=
Subject key identifier: 73:08:39:3E:AB:22:FD:BF:9C:5C:8B:5A:D2:69:34:0C:9D:5E:27:16
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019CAD5A377F77077998F3914E6947DC7414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:36 +0000
Manifest this update: Mon 02 Mar 2026 07:01:36 +0000
Manifest next update: Tue 03 Mar 2026 07:01:36 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: 4zZmWaYPdFfu+6VIZYwwmhS+xvlrcLfZ3tvXdFVqUzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:37:7f:77:07:79:98:f3:91:4e:69:47:dc:74:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Mar 2 07:01:36 2026 GMT
Not After : Mar 3 07:01:36 2026 GMT
Subject: CN=7308393eab22fdbf9c5c8b5ad269340c9d5e2716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:66:e2:64:60:c3:c5:8f:a7:98:eb:5b:44:
ae:30:8b:18:1d:f2:ea:96:0a:a3:bb:db:4d:1b:62:
58:10:0c:d3:1f:d2:e1:38:4b:88:6b:7c:4d:d8:1f:
ac:0a:17:f3:5e:20:9a:ff:f7:42:9c:b2:7e:ca:02:
e2:a5:dc:cd:d6:c9:b3:64:e7:62:f8:c3:a3:df:1e:
84:26:04:aa:15:cf:03:a8:40:05:1c:95:fd:62:d6:
5e:e1:72:94:ff:f1:7e:e7:c8:1d:aa:2c:0d:34:b8:
c8:34:89:79:b6:ab:2a:1d:11:62:68:a7:c6:a1:66:
8b:7e:08:c4:02:a4:c7:16:d6:7d:bf:b8:81:aa:63:
46:6f:dd:5e:31:23:fa:82:e4:c4:dc:ee:f6:56:2c:
84:1f:7f:75:59:ab:fa:fd:b0:a1:c4:19:c5:b1:a1:
c5:49:58:26:51:e0:78:2e:79:6f:a9:3f:a2:ac:36:
52:49:c7:29:f0:0d:da:c4:7d:8f:c2:3e:22:ef:e3:
77:8c:c9:77:1f:99:14:f8:e8:f0:3b:06:33:96:b2:
e1:f9:75:e5:6a:64:00:38:fd:a1:8e:50:47:db:9e:
77:85:29:df:73:76:b3:36:1f:ee:ef:eb:b9:21:cf:
73:60:09:e8:31:e3:d7:29:9d:5a:92:c4:94:64:73:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:39:3E:AB:22:FD:BF:9C:5C:8B:5A:D2:69:34:0C:9D:5E:27:16
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:8c:77:a6:e8:d1:a4:26:b4:f5:21:59:99:0a:6b:10:1a:
6a:4b:91:57:e1:2b:b7:c4:c5:90:c9:13:9f:ec:8f:5a:00:f3:
31:0a:c8:ff:70:e5:da:2d:69:c4:f8:55:14:a9:5b:9f:bf:96:
b7:cf:de:d0:61:c1:e1:91:5c:f8:94:b9:85:62:81:bb:7d:ab:
e6:25:8e:26:eb:a9:9d:50:31:91:68:9c:f8:4f:f4:20:90:bc:
76:d1:a6:ea:35:46:63:a6:75:f0:f0:a3:0a:b5:59:fd:96:ef:
18:a0:f9:43:74:19:28:9d:ee:e6:68:8e:7f:53:b4:92:ed:9b:
65:14:4f:70:27:ac:ee:78:29:81:62:cb:bb:fc:ec:4a:59:56:
62:17:76:71:fb:c0:40:67:d2:c5:f9:11:0d:05:6d:e5:85:39:
26:1b:74:7e:2b:8c:5c:90:95:3f:d0:9b:7c:d4:8f:e4:3f:37:
cf:6a:c9:a9:d8:68:6f:56:99:25:60:cd:52:99:98:3e:56:88:
b4:21:b5:58:35:20:87:f7:73:b5:8b:33:81:44:5f:e7:e9:f3:
bc:4d:a9:82:4b:c8:8b:29:34:9a:bb:59:7d:93:ec:91:0f:7f:
be:cd:f3:0f:6c:a1:bd:44:69:41:b5:b0:07:89:05:36:e8:c2:
d3:ea:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:29 2026 by rpki-client