Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: UlO/LIhF0H4p3tK2i2vzPRpVjEz2FwbUFrCOPQd0Zls=
Subject key identifier: 3C:4A:C3:C3:16:78:9D:A7:16:70:8F:47:D7:32:33:5C:87:DF:62:BC
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019FA93E110A63DF6704AC5D6CB96C69E29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0DE7
Signing time: Tue 28 Jul 2026 15:00:44 +0000
Manifest this update: Tue 28 Jul 2026 15:00:44 +0000
Manifest next update: Wed 29 Jul 2026 15:00:44 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: sqlzBa4WfyEWIZ/QL+BuIz9N8JsAkYgeeCLUDlnccPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:11:0a:63:df:67:04:ac:5d:6c:b9:6c:69:e2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jul 28 15:00:44 2026 GMT
Not After : Jul 29 15:00:44 2026 GMT
Subject: CN=3c4ac3c316789da716708f47d732335c87df62bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:03:fe:e8:e0:fa:1d:36:40:1a:17:7d:99:
e3:75:3d:fc:f5:4f:79:de:68:52:2c:7c:b7:a8:b6:
25:55:16:4b:c0:aa:67:41:11:39:4e:f9:b8:c6:12:
77:03:1a:39:37:58:c0:e8:f5:8b:b8:4b:8d:72:e8:
b3:19:2f:6b:d9:3f:32:2e:f5:36:9d:b8:3e:17:7a:
f6:88:2b:b7:e8:db:60:35:fe:cf:c5:51:5a:90:88:
8c:7e:d6:bb:80:b1:d8:c3:0a:72:2e:57:8d:5e:f4:
05:e2:a4:68:be:ea:9a:c6:01:04:a8:f2:cb:f3:d7:
e6:73:b8:4d:71:d4:93:27:9d:97:54:39:d2:89:6e:
50:4f:82:3e:b6:78:95:94:7d:db:c3:c6:5b:9a:39:
af:f9:bf:10:27:61:61:25:6c:bb:67:01:66:fc:57:
83:58:5b:ed:d1:57:08:13:84:f8:7e:3c:a4:d1:46:
a2:f3:44:a6:c9:c0:d9:2a:a1:f7:ad:d7:aa:e0:b8:
52:e2:12:a8:02:12:e9:9f:6b:c7:67:52:23:17:34:
e9:3c:1f:1a:a4:33:0c:39:4a:b2:6f:54:dd:b1:be:
fc:96:6d:f8:0c:87:07:2e:ab:d3:63:c3:ea:ab:7e:
52:32:99:66:4b:b0:43:44:f6:c7:1c:cd:ce:37:f2:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:C3:C3:16:78:9D:A7:16:70:8F:47:D7:32:33:5C:87:DF:62:BC
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:15:17:ad:3a:3b:2f:e2:66:5f:e3:99:e2:b1:a2:3b:fd:06:
76:3b:6c:23:9d:cb:30:31:a8:61:bb:06:cb:05:8a:43:ff:d1:
a0:9e:3f:cb:ef:3c:ac:e9:d6:5a:10:b0:13:32:d0:48:d6:0d:
9d:49:f5:f6:d6:dd:d4:fb:10:17:4a:cf:24:f4:80:f8:c1:47:
38:60:8c:67:83:48:ec:8b:13:54:26:db:34:eb:dd:85:e7:ce:
90:7f:f5:ff:e2:74:06:78:7e:a2:9e:62:1f:70:08:3b:f8:7f:
53:ab:94:a3:2d:56:35:ac:91:76:49:4a:a9:fa:cc:48:1a:73:
6e:5b:49:93:77:c1:2b:8a:60:bc:56:38:86:77:75:da:2a:9f:
fb:28:bb:b1:87:b2:ec:25:0b:61:27:60:a1:a1:41:96:9b:74:
4f:78:a1:93:0e:ab:0b:ac:4c:ae:41:8e:fe:1d:74:92:b4:ad:
20:f0:12:3f:44:88:ae:bd:f7:10:f2:f9:36:4e:9d:87:bc:dc:
27:54:66:8b:ba:d3:64:4f:54:36:8c:c5:4c:16:da:66:2a:ee:
da:7d:de:52:3b:43:b4:fa:1c:0b:6f:74:be:39:51:f1:c3:5d:
44:37:c5:ac:3a:62:6f:54:0d:3e:0e:6b:31:33:36:19:3e:c1:
7b:90:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:45:05 2026 by rpki-client