Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: AvtumL4zGJ4Ntp052Vq8ba3nI1UwLmB6OkEFEIZKuBk=
Subject key identifier: 85:54:FF:39:DA:E7:9D:6F:9C:9F:50:96:6F:6D:D5:7B:79:45:92:60
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01A1C5FA4037FD3A0BE4DDD4521B7CFAAB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0EFF
Signing time: Tue 10 Nov 2026 15:01:14 +0000
Manifest this update: Tue 10 Nov 2026 15:01:14 +0000
Manifest next update: Wed 11 Nov 2026 15:01:14 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: zTBvZfkrIe2BFdXy2tfjDyup3adykTimdAwXUQ06Dz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:40:37:fd:3a:0b:e4:dd:d4:52:1b:7c:fa:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Nov 10 15:01:14 2026 GMT
Not After : Nov 11 15:01:14 2026 GMT
Subject: CN=8554ff39dae79d6f9c9f50966f6dd57b79459260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:18:d2:48:d1:58:5d:09:2d:a7:c4:77:f4:
48:33:1a:63:1b:9a:f2:8b:b3:6b:a7:32:11:29:bc:
cb:f9:7c:93:df:76:8b:65:8a:c9:76:b5:f8:bc:5f:
2e:df:00:49:a3:29:4d:2f:3b:d3:54:93:b5:c4:8e:
13:dd:b2:35:d3:57:86:2b:10:40:a0:d8:a2:ef:ad:
63:c6:52:90:13:64:37:52:ec:d3:44:aa:ed:cd:d1:
80:0a:aa:0b:c0:3d:27:85:1a:fc:a4:cf:2f:25:e9:
4d:54:b7:5d:0b:38:84:63:51:38:c2:ac:8b:e4:2f:
bb:57:7a:9a:27:d0:e5:fd:81:0c:13:dd:47:df:bb:
2e:21:9e:10:ab:74:cc:f7:a5:58:87:73:cd:e5:a5:
58:eb:cb:cb:00:37:38:da:6f:c3:a2:a8:e4:8c:7b:
c1:a4:aa:e6:b1:07:17:e3:af:1a:43:7b:a2:70:21:
cf:ae:72:02:5b:43:85:2f:f9:f0:55:63:06:4e:bc:
51:c5:5e:ef:98:d8:69:d5:77:bd:3c:ea:ed:d2:f1:
e8:20:49:fa:2c:4a:b8:fa:0b:27:65:18:fe:2c:05:
a1:82:13:61:8d:75:1e:8f:94:8b:8f:61:ce:31:6a:
69:6d:82:38:c1:9f:0e:5c:dd:f3:30:aa:22:5b:a2:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:54:FF:39:DA:E7:9D:6F:9C:9F:50:96:6F:6D:D5:7B:79:45:92:60
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:d1:f2:92:b3:7f:cc:90:66:e9:4f:1c:2d:af:ce:03:e9:
4c:4e:6e:3c:b3:c9:21:0f:58:b3:58:1f:c8:65:a5:31:f4:10:
6f:c0:78:c8:b4:f1:67:46:f4:72:d5:49:82:72:ad:ed:48:12:
e8:22:2b:3c:68:d9:81:3f:35:a9:e2:7e:cd:cc:83:bc:8c:18:
d1:a1:3e:81:bb:7e:45:d8:11:f0:58:4c:59:2a:bb:a8:cf:df:
cc:3f:ee:3a:ac:0b:d3:d9:3a:38:54:4f:35:86:f7:94:56:11:
95:9f:3d:c8:2f:c8:b9:72:f7:9f:0d:0e:60:d2:bc:a6:18:91:
a4:7c:3e:7a:47:90:2b:24:53:fc:d5:5a:08:3a:06:5e:8e:cd:
98:b8:00:57:49:f0:3e:f5:37:5a:76:66:af:c5:1f:53:06:95:
76:a5:03:c9:b7:cf:ee:42:23:4f:8c:2d:55:ee:8c:c5:17:2c:
97:5d:8a:dd:52:f8:39:6a:e8:8d:53:54:50:2b:a1:1a:f0:af:
1f:a2:b6:d1:5e:d4:af:4c:30:63:75:24:80:6a:63:75:b2:d5:
32:07:07:6d:b6:5a:b5:6d:24:93:41:e1:7e:ae:71:4a:b2:68:
75:25:15:ba:f9:cc:3a:f7:09:6e:e9:4e:70:14:73:31:c7:7b:
9a:74:e7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHF+kA3/ToL5N3UUht8+qsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl
YTI5YzgwHhcNMjYxMTEwMTUwMTE0WhcNMjYxMTExMTUwMTE0WjAzMTEwLwYDVQQD
Eyg4NTU0ZmYzOWRhZTc5ZDZmOWM5ZjUwOTY2ZjZkZDU3Yjc5NDU5MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eoY0kjRWF0JLafEd/RIMxpjG5ry
i7NrpzIRKbzL+XyT33aLZYrJdrX4vF8u3wBJoylNLzvTVJO1xI4T3bI101eGKxBA
oNii761jxlKQE2Q3UuzTRKrtzdGACqoLwD0nhRr8pM8vJelNVLddCziEY1E4wqyL
5C+7V3qaJ9Dl/YEME91H37suIZ4Qq3TM96VYh3PN5aVY68vLADc42m/DoqjkjHvB
pKrmsQcX468aQ3uicCHPrnICW0OFL/nwVWMGTrxRxV7vmNhp1Xe9POrt0vHoIEn6
LEq4+gsnZRj+LAWhghNhjXUej5SLj2HOMWppbYI4wZ8OXN3zMKoiW6IhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVU/zna551vnJ9Qlm9t1Xt5RZJgMB8GA1UdIwQY
MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt
MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk
LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOTR8pKz
f8yQZulPHC2vzgPpTE5uPLPJIQ9Ys1gfyGWlMfQQb8B4yLTxZ0b0ctVJgnKt7UgS
6CIrPGjZgT81qeJ+zcyDvIwY0aE+gbt+RdgR8FhMWSq7qM/fzD/uOqwL09k6OFRP
NYb3lFYRlZ89yC/IuXL3nw0OYNK8phiRpHw+ekeQKyRT/NVaCDoGXo7NmLgAV0nw
PvU3WnZmr8UfUwaVdqUDybfP7kIjT4wtVe6MxRcsl12K3VL4OWrojVNUUCuhGvCv
H6K20V7Ur0wwY3UkgGpjdbLVMgcHbbZatW0kk0Hhfq5xSrJodSUVuvnMOvcJbulO
cBRzMcd7mnTnPw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:12:24 2026 by rpki-client