Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: SQOgSCiskv0lTKz1Wv8J3kRQd4A4U7scOKc1/2CP8+Q=
Subject key identifier: 22:E7:9B:49:10:01:C4:1D:C6:DD:38:E4:47:CA:00:3F:F7:73:C2:66
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019DA4F944E96ACFA8CB382FBD224533A677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0CB3
Signing time: Sun 19 Apr 2026 09:01:32 +0000
Manifest this update: Sun 19 Apr 2026 09:01:32 +0000
Manifest next update: Mon 20 Apr 2026 09:01:32 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: pbyOExjHZnmU1LyVrkkxvpEfm2OEuencuSxCXZnkA+Q=)
2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:44:e9:6a:cf:a8:cb:38:2f:bd:22:45:33:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Apr 19 09:01:32 2026 GMT
Not After : Apr 20 09:01:32 2026 GMT
Subject: CN=22e79b491001c41dc6dd38e447ca003ff773c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:be:12:ab:99:a2:7d:4c:71:41:71:39:4a:
58:36:25:5d:cf:2a:97:01:1c:d7:20:99:64:9a:7b:
f2:e6:4b:ef:7f:86:d7:ef:63:76:3d:29:ce:8f:27:
5e:1d:fa:be:cd:0d:ee:02:85:78:4e:8f:22:f4:5a:
5d:bf:bb:1d:9e:95:59:87:ac:a0:e2:6b:82:eb:ce:
02:e2:00:61:5a:25:56:84:6c:25:e5:24:1b:d5:7c:
25:10:81:4c:26:df:ab:53:f3:e2:95:db:cb:d4:fe:
22:cf:bb:5d:0b:6a:86:f5:8e:bb:c2:27:1f:e7:5a:
de:83:f3:91:21:06:f8:f3:c4:93:44:be:5e:5e:78:
ed:dc:00:2a:d0:8d:c3:c7:7b:2d:0a:d4:97:bc:e0:
b6:0d:85:d5:df:5e:d6:70:29:d4:03:05:56:f8:d2:
07:3b:bb:8f:fb:4b:1e:47:8e:f4:b2:09:4e:d1:3d:
3f:c0:a4:4c:a0:93:30:e8:cd:09:0b:8a:56:71:b9:
7c:47:c9:0b:5a:c7:99:ec:24:bd:6c:50:f0:21:1a:
da:66:cd:6d:07:5f:86:f5:b0:37:37:f4:6a:b2:82:
90:77:59:55:6a:65:be:04:dc:29:0d:72:2e:ba:52:
9b:f2:b9:49:96:b8:e8:59:90:71:d9:06:3f:af:51:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:9B:49:10:01:C4:1D:C6:DD:38:E4:47:CA:00:3F:F7:73:C2:66
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:b1:ed:36:b3:51:8b:fd:13:e5:dc:e9:e8:c2:25:a9:f7:
62:41:2c:c0:37:34:9f:4e:fb:c9:f4:c0:6f:18:19:25:fb:5b:
a3:23:7f:a8:26:2f:41:9c:be:27:cd:5a:a3:00:d1:ea:ae:b0:
16:67:d8:85:f3:f9:62:3c:ae:cf:5b:3d:12:73:18:3f:9f:8c:
d7:bc:a9:db:08:fc:4a:81:37:6d:87:37:78:21:d5:28:4d:f7:
52:28:0a:f5:89:2b:3a:42:75:a8:3b:fa:07:fc:8e:4a:db:a1:
b3:25:78:2c:96:84:f6:ca:4f:2d:28:b2:da:e2:25:8c:23:25:
29:bf:8c:51:41:b0:c1:b1:c3:f3:f5:36:e6:2f:e7:57:d5:91:
fd:fa:09:13:7e:7e:1e:7e:8d:69:6a:2b:a6:87:8a:b6:dd:97:
47:1f:48:b8:1c:15:14:0f:0b:25:0f:32:ca:89:f2:97:11:df:
f0:19:43:ae:67:7f:ed:75:1b:d0:15:ca:dd:22:14:5f:c9:46:
f9:ed:ea:9f:fb:3a:25:4b:3e:fb:a9:0d:7e:33:a4:45:2a:29:
40:d7:e8:c1:45:6f:2e:18:a8:f7:80:f7:d4:fd:51:31:e7:67:
02:a1:58:9d:67:09:03:c6:9f:d0:a1:f8:16:22:8b:2e:81:b4:
22:c8:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:45 2026 by rpki-client