Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: q3q97rj/hTOg65gKjbieWqjhVv3Ld5xTdSYcr+ipiF0=
Subject key identifier: 09:4C:33:B7:12:96:E8:E7:D0:78:B6:32:96:1F:EA:3F:90:60:24:DF
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019FAA19A53919DEABAD925F375174B4E837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:00:35 +0000
Manifest this update: Tue 28 Jul 2026 19:00:35 +0000
Manifest next update: Wed 29 Jul 2026 19:00:35 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: 4Njz6BVVdw/WQaorl8I3cCK4LwyB3qV/DEXoJtnzFaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a5:39:19:de:ab:ad:92:5f:37:51:74:b4:e8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jul 28 19:00:35 2026 GMT
Not After : Jul 29 19:00:35 2026 GMT
Subject: CN=094c33b71296e8e7d078b632961fea3f906024df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:b8:82:ed:dc:20:a9:e5:fb:58:b8:42:45:
68:89:61:ca:ce:5b:10:49:4d:b8:27:58:e5:bc:ae:
f2:fe:e3:a7:3a:51:cb:7b:33:2f:52:53:ce:0a:7f:
7b:f4:da:fa:84:e0:98:81:26:2d:b6:47:b5:39:66:
94:a9:17:0c:64:37:67:f3:d0:b8:b7:e5:05:d8:d3:
b3:90:dd:5a:14:82:01:df:e1:b0:7f:47:ca:34:38:
be:fe:43:71:6f:1f:96:e4:1f:86:e4:f7:69:a3:bd:
2a:b6:57:a1:4d:d7:cd:07:13:b6:90:07:27:85:fb:
d8:a6:47:ca:b1:42:1b:02:dd:4a:c2:13:75:eb:8f:
33:9a:07:6f:e6:4a:b9:ab:a9:65:cb:c1:7d:68:c2:
d5:4a:04:52:ae:e7:f4:38:21:57:a8:5b:fd:1b:50:
ca:02:66:62:67:ff:fe:fb:8b:82:b9:f7:8c:26:31:
9a:e3:89:5c:d2:d3:d1:5e:e4:ea:a7:03:40:e1:c8:
ce:6f:a0:13:ea:c8:50:5e:a9:24:7d:ef:9e:db:85:
a6:4d:de:ec:bc:be:aa:02:92:6f:d3:02:70:1b:2a:
9d:e3:85:12:e1:82:85:83:0f:0c:ff:5c:6f:87:10:
d5:9d:ab:e6:d4:96:85:8b:7d:17:9e:ec:cf:8e:33:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:33:B7:12:96:E8:E7:D0:78:B6:32:96:1F:EA:3F:90:60:24:DF
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:8f:cb:fd:a6:9d:20:c6:cc:c3:4b:f1:3d:3c:a0:06:f6:
c6:74:d7:d6:f9:89:f4:b2:0a:55:22:06:4c:36:d3:cd:8b:0b:
2c:cf:9c:ba:b8:f5:a8:5f:c1:ff:96:b2:e0:2d:80:d1:02:1a:
fe:fc:7c:d5:67:57:76:04:3a:46:7c:2e:a8:4a:b0:ce:ba:19:
29:66:0f:d5:e5:33:66:d8:16:2a:f2:cd:df:82:e8:ac:28:40:
3f:c1:ad:57:38:a3:b8:ca:9f:14:fa:c6:30:04:0c:2b:81:1c:
27:d5:29:4e:77:90:c5:b1:ae:d2:f5:71:e9:65:10:7d:43:6b:
72:bc:ed:dc:47:d9:0a:63:bf:1a:5c:81:54:ae:c1:a7:2a:de:
b1:b6:b8:a4:af:d0:85:ed:1c:51:a4:a5:96:43:69:0e:a0:bc:
62:46:d0:8b:ce:27:67:9c:f5:af:4d:3b:27:b0:af:bc:02:55:
b8:c2:b8:2a:e2:d8:5a:8e:75:d3:fb:4b:1d:27:60:ad:c7:52:
8c:c9:c3:c5:07:bb:23:8a:22:c5:de:86:6f:7e:54:27:94:ee:
5f:73:9b:be:f3:32:a5:06:45:87:7f:3b:3d:e1:92:b8:93:1a:
6e:79:d6:33:2b:0c:71:42:33:a4:65:8b:af:91:c1:8f:4f:a0:
3b:bd:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:16 2026 by rpki-client