Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: iDRRjlVjuUqs7DLiYZRF+LsjKOu1xvk2JvJX7IEzpOg=
Subject key identifier: 3B:EF:EF:73:B4:DC:8A:AE:97:6F:B8:49:84:F5:63:B4:8B:61:43:E1
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01A0C331E003CA20918F1C6680D0F778875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0E79
Signing time: Mon 21 Sep 2026 09:00:20 +0000
Manifest this update: Mon 21 Sep 2026 09:00:20 +0000
Manifest next update: Tue 22 Sep 2026 09:00:20 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: BqtkhJHIE0CzE75hT1qcqP6DYnSA2SaHq4qgdJe6Bs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:e0:03:ca:20:91:8f:1c:66:80:d0:f7:78:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Sep 21 09:00:20 2026 GMT
Not After : Sep 22 09:00:20 2026 GMT
Subject: CN=3befef73b4dc8aae976fb84984f563b48b6143e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:7c:77:46:fb:42:f3:df:eb:e4:fb:11:b9:
c5:58:f5:29:87:11:42:ba:f9:51:17:de:6a:f4:2f:
e6:6e:50:11:ed:81:d0:6d:ee:be:ee:9b:99:78:b3:
0b:09:3f:07:a6:30:36:cc:82:29:38:da:68:16:66:
9a:a0:25:3d:62:4f:93:92:e2:10:f3:24:af:8a:d4:
e8:7c:20:e5:7c:51:90:02:72:81:37:47:18:43:29:
88:74:d8:c7:45:03:1a:56:15:0c:03:10:cf:49:3e:
8d:b1:80:e2:b6:a1:6a:61:2b:38:6e:15:c4:fd:ec:
91:ee:d3:44:65:15:4c:d2:a1:13:db:c9:15:dc:c6:
b5:c8:75:1c:d4:c0:54:0a:c8:a9:62:1f:34:be:42:
fb:a7:a8:1e:e8:b4:89:da:85:3a:87:63:cb:ae:80:
bb:ef:34:f8:30:ac:c1:d1:34:67:a0:e9:0b:68:07:
23:21:cc:34:36:25:fa:9b:b0:30:0c:3f:80:7d:39:
c6:f7:10:3e:2b:cd:8a:94:3d:7c:48:b0:e5:8f:29:
5c:54:7c:10:20:37:b0:45:10:cc:b0:30:02:8f:be:
4f:3e:52:41:46:a1:ba:8d:f9:af:cc:47:a7:10:86:
5c:41:8f:5b:26:5f:88:90:f5:e5:e6:de:7c:aa:6e:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:EF:73:B4:DC:8A:AE:97:6F:B8:49:84:F5:63:B4:8B:61:43:E1
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d6:0e:de:29:2c:27:aa:24:96:3f:29:3f:d6:69:72:b6:e6:
5d:0c:ff:76:be:15:87:3a:54:40:b1:af:e0:9f:6d:04:82:5f:
4b:fe:b2:e2:dd:e6:c0:2c:28:c1:3e:e0:bb:ac:2d:4f:e9:72:
f2:68:68:b3:d5:aa:22:21:58:72:87:9b:af:4a:e9:86:e5:ce:
2f:24:7c:91:fe:9f:66:61:16:7e:5f:db:70:58:f6:3e:bd:2b:
1c:7a:24:48:c0:cc:98:7c:c2:48:bd:e3:fe:4f:19:10:e4:86:
17:83:06:9d:20:b1:f9:47:04:de:a7:37:e8:b9:93:e8:76:95:
4a:a1:93:7c:cb:2e:66:0d:9c:18:79:d3:15:e8:4e:3a:c9:63:
34:76:7d:5a:da:14:f4:81:47:8c:8a:46:ca:5b:9d:db:c7:4c:
07:e7:64:c6:0f:9c:31:0b:3f:50:68:f5:1a:96:51:80:fd:f3:
40:5d:ee:d2:01:96:58:4c:0e:77:49:36:a9:86:98:00:6b:3e:
18:22:dd:cb:bc:55:a1:e9:15:42:8a:60:be:ab:90:70:b7:2c:
dd:8e:bd:8e:16:29:65:15:a4:45:15:23:8b:0d:26:8f:4a:52:
17:09:ab:71:a8:14:bb:66:d9:cd:dd:11:16:b6:19:8f:a2:8e:
58:66:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:33:49 2026 by rpki-client