Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: dUHDAselw45vzDOzgSzphu7pgu7a2HBINge79IVzKW4=
Subject key identifier: 3C:FF:32:37:B0:46:C7:8D:F1:99:25:E4:FC:79:33:14:3D:89:B6:2F
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019D98F44DD6E63845E0FEA2F631C8EA4540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: qeOlqY5VlsccM2H+YoXehLFSltdr8+bwKUZwLMQX3RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4d:d6:e6:38:45:e0:fe:a2:f6:31:c8:ea:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=3cff3237b046c78df19925e4fc7933143d89b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:d5:a2:ca:83:b4:68:9e:4c:55:d5:bf:98:
53:a6:c7:bd:3d:f6:5d:5b:74:cd:ab:1d:69:37:8c:
01:63:87:b5:fe:11:35:e3:96:bb:e1:dc:8d:1f:9d:
b3:0b:17:79:9c:72:f7:4e:0a:90:6c:fc:79:fa:37:
77:bd:96:8e:e1:08:21:dc:55:12:a6:c5:b4:03:38:
e5:07:60:7a:da:bb:5e:49:73:2b:ea:73:3f:36:fc:
53:a0:f2:90:1e:8a:ad:6d:7d:9a:4e:8f:b7:05:7d:
57:ac:cb:7b:1c:81:32:43:fb:25:20:4d:48:6f:14:
7e:70:eb:a2:10:08:8a:19:1b:d2:66:0b:6b:55:9e:
21:6f:8d:68:de:fd:62:c0:e9:e2:a8:79:70:46:bd:
d6:d6:4a:c9:29:df:a6:83:88:83:c6:85:70:4c:92:
77:3d:53:2b:15:74:4b:af:30:c0:57:3a:36:dc:14:
e5:55:b0:b9:b0:a1:86:7a:cd:df:ce:be:eb:45:27:
d2:57:9e:c0:16:7e:d0:8e:59:74:5a:6c:73:bc:08:
7f:61:6e:21:5b:3a:dc:e3:73:69:32:2c:27:bf:1c:
81:ec:12:ea:50:f8:f5:97:f7:85:bd:82:23:42:f9:
c4:28:e7:8a:06:d1:a5:b9:09:bf:17:79:f4:eb:bb:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:32:37:B0:46:C7:8D:F1:99:25:E4:FC:79:33:14:3D:89:B6:2F
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:75:c3:11:cc:d2:64:5b:f6:e2:f6:a3:01:77:a1:23:76:
e8:f1:1d:0c:8a:89:58:20:e7:24:45:26:2e:ac:3e:5c:f5:73:
ac:7b:7c:30:10:fc:24:86:e4:a1:86:45:85:2e:bc:ad:2e:e1:
70:da:c1:7a:1a:38:7e:db:53:fc:54:8a:29:9a:19:db:59:10:
ba:b0:24:8e:65:d1:88:b6:f2:3d:ca:11:b1:50:9f:ac:69:f6:
c3:f8:9b:a0:87:e7:88:07:46:d5:4a:ed:c2:f7:27:d7:76:bd:
ac:73:d4:60:2d:4a:74:c8:71:cc:a3:14:e9:8b:01:ec:3d:46:
a2:37:ee:87:bc:8f:e4:33:70:94:dc:88:f9:5a:7a:8c:a5:4e:
6b:08:6d:d3:1f:1d:a0:fb:c5:31:3a:39:72:0f:7d:37:2f:d2:
c7:ee:7c:95:bd:96:8b:77:d3:15:9b:72:fb:4d:0a:e2:d7:d5:
c0:4d:32:ab:78:02:a6:f8:b9:41:3a:dc:98:53:5b:c3:8b:0e:
5c:86:c5:a9:f8:2c:bc:b7:b5:4b:1b:99:55:c2:2b:97:e2:b9:
da:db:e9:19:33:f7:bf:ca:8b:2b:aa:d4:4b:2c:87:be:19:2e:
5d:0a:f9:06:b5:59:10:d4:d8:9f:6e:c9:9b:a0:0f:df:38:b3:
2c:13:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:48 2026 by rpki-client