Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: ccig6yDc217stnzHpwJxuuAiKy5RWxO4/rgZ3pzLjIk=
Subject key identifier: 1B:55:67:7B:8E:0E:C1:6D:A8:AD:3E:30:08:73:81:2A:32:76:32:E8
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019EBDA2B7E1A70E5864A86ACF25DB0F5296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0D6D
Signing time: Fri 12 Jun 2026 21:00:18 +0000
Manifest this update: Fri 12 Jun 2026 21:00:18 +0000
Manifest next update: Sat 13 Jun 2026 21:00:18 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: sVOKRQbnEUkAQFPtXs2nFyFQfgHGRlhgOCas4xv7deg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:b7:e1:a7:0e:58:64:a8:6a:cf:25:db:0f:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jun 12 21:00:18 2026 GMT
Not After : Jun 13 21:00:18 2026 GMT
Subject: CN=1b55677b8e0ec16da8ad3e300873812a327632e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:c5:2b:4a:47:57:5f:58:2b:5a:3b:4c:27:
cb:87:97:93:0d:33:d7:8d:25:d1:4a:70:76:be:16:
08:ce:65:9e:ec:e9:b3:13:75:3a:8f:8d:09:b8:86:
c8:55:72:62:b1:51:05:57:ae:0d:56:f9:1e:12:82:
f5:88:bb:b3:06:8f:85:ed:e8:cb:c4:33:5f:03:dd:
34:8c:a3:40:41:12:61:58:12:eb:ae:02:72:2b:54:
68:9a:55:73:cf:1d:a2:51:db:a4:d5:88:fb:61:ef:
9c:e7:fc:72:3d:4e:99:ec:ee:52:3a:b2:00:73:0f:
02:2a:86:53:21:f5:dd:24:b0:03:d3:95:34:d8:95:
3a:c9:d8:c3:31:66:5d:ec:d9:d7:b4:a8:50:66:eb:
2e:05:a3:1b:45:08:9d:b3:a8:2b:9c:ff:71:ac:ed:
1a:fa:62:c8:50:62:4f:9f:e3:e2:a8:91:71:b5:e2:
9f:f4:a3:e1:56:6d:ef:90:b7:e2:b5:6a:43:bf:22:
e1:60:04:18:a7:63:d1:f5:8f:ec:13:78:34:0d:aa:
43:e2:f5:46:eb:b5:4d:67:89:d7:5e:f9:05:85:f2:
ac:29:6f:9e:f5:e6:f5:f1:72:29:61:ce:9f:5c:ab:
ca:a3:8b:bf:c5:46:72:c2:d2:c1:29:ed:ae:b1:4a:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:67:7B:8E:0E:C1:6D:A8:AD:3E:30:08:73:81:2A:32:76:32:E8
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:bd:73:d5:30:a6:d4:dc:a8:37:4a:87:9d:d9:2e:ee:89:a2:
f2:d2:61:74:0a:02:da:3a:6c:48:63:e7:a1:ee:72:78:7b:e3:
6d:d0:a7:94:d2:da:33:c9:24:f9:ec:5e:d3:9a:e2:59:6d:a6:
13:51:a6:05:d3:3d:5f:4a:fd:02:36:69:fb:52:af:17:66:b5:
87:cb:c4:10:e5:0a:fa:6e:a3:c7:bf:b2:3c:fe:b0:4e:c3:a7:
bc:ae:2d:3d:91:32:20:f8:91:41:79:c4:98:42:65:3b:32:78:
6a:ae:2f:88:73:87:7f:e1:a9:2f:07:7f:b3:84:81:01:52:58:
9c:8a:53:ab:5c:0b:16:a8:27:53:ef:45:82:62:c4:f6:46:04:
05:0a:7a:65:02:f7:28:2b:e9:bb:e0:3e:85:e5:98:8e:03:2a:
e7:bd:e1:17:4f:03:ea:e0:43:39:06:74:cb:3a:d6:84:8f:a6:
86:78:81:ea:76:28:04:e6:91:f1:4b:59:62:40:7f:2c:13:31:
dd:d1:60:7c:61:98:d2:a4:0a:50:18:80:ce:1a:c9:86:27:7f:
1f:55:85:f2:e6:d4:6f:c4:75:34:58:30:54:0b:25:a0:17:ab:
e7:52:7b:3d:39:59:fa:31:46:16:95:22:b3:a5:b7:2b:70:f7:
57:59:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:11 2026 by rpki-client