Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: 6zoz8AAJI5jVZtCGAFO+MH+thgRBJaljVE48viQ+L40=
Subject key identifier: A4:1D:2C:5D:AC:F9:5C:1D:96:39:FC:71:85:99:65:5B:83:E4:A1:86
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019CAA8FE875B9A5D6E0B430FEB3DC692AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0C5A
Signing time: Sun 01 Mar 2026 18:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:01:23 +0000
Manifest next update: Mon 02 Mar 2026 18:01:23 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: BbZROxlvnh1hp38Ds3kQx4Y3iILxxrVTCo4cKkdSmBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e8:75:b9:a5:d6:e0:b4:30:fe:b3:dc:69:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Mar 1 18:01:23 2026 GMT
Not After : Mar 2 18:01:23 2026 GMT
Subject: CN=a41d2c5dacf95c1d9639fc718599655b83e4a186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:be:43:7d:e0:aa:78:6b:b9:27:1b:f9:28:
ab:d8:d9:4a:1a:2b:b1:04:eb:aa:ff:ae:5f:ce:80:
86:e6:70:aa:65:6e:6b:35:13:3b:45:3a:2f:b3:7f:
4b:eb:8a:df:36:49:2b:52:2c:40:1d:f0:59:83:9b:
02:9d:58:cb:bd:30:bf:6a:91:d5:29:18:0d:36:37:
60:9a:7c:7a:6c:bf:39:a4:33:a7:b8:c5:f7:30:94:
1b:dd:ea:cb:73:96:38:86:e3:2a:b5:77:7f:de:95:
cf:be:f5:ec:79:b5:1c:e6:ce:a9:ec:66:c3:90:9a:
47:e4:9b:9a:e2:09:0f:11:6e:90:9f:c3:ab:dc:c2:
f6:be:d6:18:cf:53:23:8c:a3:96:0f:57:b5:bd:44:
89:1a:e2:99:e3:79:78:f7:8d:0e:7b:9c:41:ad:ca:
93:11:ef:65:17:bb:de:7f:bd:10:3b:2a:30:a8:fe:
15:38:2b:56:2c:7e:8b:3c:44:c7:cf:b2:56:9a:1e:
ed:0d:89:63:a1:70:2f:24:95:0f:25:01:67:e3:60:
71:97:df:92:03:83:c2:77:26:26:89:b6:ce:62:41:
5d:52:7e:fd:64:bc:10:25:3b:67:a4:b7:22:7a:9f:
ca:ad:79:0b:d2:f3:d7:ce:7d:21:14:62:d3:c2:7a:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:2C:5D:AC:F9:5C:1D:96:39:FC:71:85:99:65:5B:83:E4:A1:86
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:1f:94:b1:f2:9d:c6:ba:31:52:0e:ad:a4:10:74:e7:fb:
82:08:7e:7d:6d:74:4a:f4:2f:f9:9e:d0:23:16:8e:d6:e1:0b:
3d:29:28:13:c9:fc:b7:e0:fd:a9:04:2d:41:d0:5d:cf:b2:33:
0a:10:44:aa:0b:90:bb:58:b9:9a:75:c8:ac:fb:8d:30:fb:33:
bb:d0:c1:65:16:09:a8:86:7a:4f:ed:a6:3a:ba:a4:4a:1e:6b:
4d:a2:fd:7f:cd:81:4c:6f:ab:fa:68:75:92:eb:fc:11:a6:fd:
5d:82:a2:26:07:d2:b9:98:05:61:ae:e4:45:af:15:b6:e9:c9:
45:ac:45:1c:36:44:7b:86:5b:58:d1:a7:db:dc:ca:49:23:13:
5e:27:32:e4:c0:ea:14:f6:27:11:0f:50:dd:c6:3b:f8:eb:30:
d0:52:e0:7b:19:f0:d0:67:04:7b:39:ca:3a:a9:46:ae:e1:49:
7b:7e:00:74:73:7d:2f:41:2e:8c:47:f0:74:31:82:09:e4:2f:
55:54:82:1c:2b:50:13:ab:ac:57:69:56:d5:94:5f:bf:9b:f5:
29:82:90:52:73:88:41:9f:c6:08:9a:89:0c:4a:02:c3:b1:d4:
2c:1a:02:9e:36:5b:e2:71:df:e6:9c:2f:a3:69:6e:27:a1:f4:
46:2f:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:45 2026 by rpki-client