Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: nrqluw0bsdfHSiktzGQSAknsLoqpuOYKiAuZ+k3ASsE=
Subject key identifier: 4C:C4:DE:74:54:51:20:88:AA:6F:C1:B8:2C:17:A1:4A:AC:CA:17:AD
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019D9818B052920147F11F3646B53E8C33E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0CD5
Signing time: Thu 16 Apr 2026 21:00:47 +0000
Manifest this update: Thu 16 Apr 2026 21:00:47 +0000
Manifest next update: Fri 17 Apr 2026 21:00:47 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: fSS8FweDFhlIA3DsZswWAcB1G+R4WBd/5mX3ZKQnz4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b0:52:92:01:47:f1:1f:36:46:b5:3e:8c:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Apr 16 21:00:47 2026 GMT
Not After : Apr 17 21:00:47 2026 GMT
Subject: CN=4cc4de7454512088aa6fc1b82c17a14aacca17ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:7e:3b:06:12:cf:a2:d8:ae:ba:db:39:71:
34:e1:d9:6f:c8:cc:d6:e0:88:c4:c9:ee:21:e6:70:
44:e1:b1:29:99:f8:82:b8:1c:c6:5d:9f:73:b1:de:
87:0f:c2:89:77:14:4d:6a:02:99:76:9b:23:12:20:
54:fb:e3:6e:c7:6c:5f:5b:cf:dd:57:83:51:9d:9f:
ef:44:9a:4f:44:91:1b:2a:be:ea:a0:f1:93:d8:45:
b2:a2:22:ba:a1:83:c9:b5:24:b0:f4:68:99:46:ab:
68:8d:e9:9d:c8:c5:29:c6:e1:2f:12:33:a4:87:96:
29:2f:35:e4:5f:08:c6:42:d4:b5:93:ba:de:f6:fd:
d4:5b:e5:32:67:fc:3d:74:37:e5:9d:1f:30:19:0e:
86:90:37:2b:66:83:84:90:da:47:33:ff:ef:9d:0b:
71:df:ed:7e:b6:30:16:73:08:78:fd:b7:ac:7a:68:
77:13:62:3d:c7:04:a4:cf:67:d1:47:98:69:a5:70:
78:e9:f5:31:02:08:b0:f6:ff:2e:a0:c4:67:0e:41:
b3:9c:5a:32:d0:8d:50:ec:b6:4a:3b:1a:3c:cd:e6:
4a:77:23:7c:f4:77:87:fb:d9:21:b7:d7:31:46:52:
48:68:f7:6b:47:03:d9:49:6c:de:73:df:d1:55:5a:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:DE:74:54:51:20:88:AA:6F:C1:B8:2C:17:A1:4A:AC:CA:17:AD
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6b:41:31:82:55:2a:83:a2:23:6c:32:3f:5a:d2:28:69:e6:
24:38:33:db:9c:35:0e:dc:3b:68:20:56:4f:60:9c:f8:7b:25:
75:e6:ed:e1:83:33:76:fc:be:d2:13:85:0d:f7:27:87:59:74:
56:68:d1:8a:96:06:a8:12:e0:3f:68:4b:4d:fc:8d:53:be:cf:
aa:62:ce:b4:7f:8a:8d:ec:bc:e8:e0:f6:0a:a4:57:a3:48:23:
73:52:38:f9:ca:e4:5c:5e:31:2e:c6:18:30:a0:e6:fe:6d:f3:
cb:06:04:1d:19:43:2f:61:c0:f4:1c:66:41:1d:db:14:c6:b4:
a7:a2:b4:e4:7e:b0:58:cf:57:26:f0:dc:32:c2:e4:b6:31:cb:
4e:8b:81:b1:ed:e5:44:35:7f:3c:1e:b5:65:f2:2b:34:04:29:
3b:8b:80:00:cc:99:80:f3:7e:f4:ab:fb:a9:79:e6:22:c5:09:
c6:08:22:fd:99:0a:62:bc:80:6f:34:b4:68:21:46:c0:1a:75:
4c:6f:45:5d:c3:cc:04:c2:fa:c1:b3:cf:89:25:27:a7:46:be:
1a:ac:c8:cc:3c:c8:ff:40:35:a8:f5:8f:bb:7a:b9:75:06:fc:
b2:a6:a3:b0:71:76:7f:d6:46:3a:d4:c4:36:20:fe:9c:9e:da:
48:53:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:22 2026 by rpki-client