Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: BK30eboSCRnn2U+eCyvTSwQtJ9vnl5yx+/YKSuFY9/w=
Subject key identifier: 9E:30:82:05:41:4D:BE:E5:4D:AC:3C:DF:24:09:ED:67:44:67:17:5A
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019CABD92FBF77173FA41D9E49BF929A05C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: 5unAJRudvt7tyWGlz9G//UeSAlhLmOr6KTBEpg8pMIE=)
2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2f:bf:77:17:3f:a4:1d:9e:49:bf:92:9a:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=9e308205414dbee54dac3cdf2409ed674467175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:ed:68:33:33:6e:27:ac:f1:ce:66:70:2b:
08:d8:07:b0:86:bf:85:f5:cd:ea:d2:aa:c8:75:ca:
8f:4f:8a:c7:04:86:41:e6:f9:d7:4b:13:7d:ee:72:
51:47:54:38:7b:a6:54:bc:24:b0:cf:42:31:90:2d:
3a:99:bb:1e:2b:69:89:85:4e:4b:b8:63:21:8a:ab:
07:0f:02:ba:14:86:ba:ac:55:e8:94:cc:2b:29:eb:
b2:e5:27:3a:70:c7:d5:df:8d:7b:a2:70:07:f2:7d:
03:78:a5:0c:e9:cc:fd:6c:3b:79:8f:0d:97:8a:5d:
be:86:fd:6d:34:c5:90:bc:42:07:85:e4:ac:ef:27:
2e:f0:f1:17:2d:6e:78:a6:1d:09:3f:19:f0:ac:da:
62:80:42:98:3c:c3:3f:cd:28:8b:93:09:c8:60:88:
b0:a9:27:f0:04:2a:b9:74:18:8f:0d:03:d6:96:6c:
ea:cb:09:c0:74:fc:10:16:3a:0c:53:16:c4:4b:39:
3c:09:cc:87:fc:3a:d8:f5:17:83:c0:ed:b0:79:9e:
0e:bf:1e:c2:fb:af:b0:1f:a9:31:85:81:45:e1:79:
58:25:5c:2d:c4:c8:fe:67:d8:8b:0e:dc:b6:e9:af:
42:49:0e:6c:08:f5:9c:19:c3:5a:4d:64:68:05:26:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:82:05:41:4D:BE:E5:4D:AC:3C:DF:24:09:ED:67:44:67:17:5A
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:ff:b3:de:95:7c:a7:72:c8:24:a9:54:d9:df:ef:19:04:
c9:a5:01:a8:29:4a:98:bf:57:c3:08:3c:1e:3b:b9:22:ce:98:
b2:a7:67:b6:48:66:79:7a:90:ee:61:6d:ad:65:e2:3a:b9:d8:
aa:62:e4:c5:14:b4:69:51:a1:ed:3a:c4:4a:ff:36:9f:c2:c5:
90:c8:8a:e2:2b:73:f0:8d:54:05:30:f2:82:38:c2:8f:3b:ff:
a0:0a:d1:4c:1a:62:24:15:16:a7:5d:db:2f:d0:09:7a:ca:1f:
3d:44:f1:12:bd:57:c7:e1:47:54:51:14:33:d4:5b:47:78:d5:
4a:72:e4:ff:35:46:35:57:30:44:6b:0d:1c:f0:74:99:cb:52:
57:0c:2f:05:8f:54:95:29:51:21:e4:3a:46:c5:5e:6d:de:3e:
b4:c3:15:b2:ed:af:9a:31:12:4e:52:d1:5d:e1:05:c9:57:eb:
70:53:56:b1:b8:59:5b:67:49:b6:25:51:53:65:3c:89:8e:b2:
d2:25:cd:96:9a:78:91:a3:57:9a:77:36:48:0b:65:ac:a9:da:
c2:73:d3:f2:5b:c0:f2:2f:d1:d2:03:d7:ad:e9:06:b7:e6:74:
35:51:5b:cf:4d:75:7c:c2:ed:e8:93:b7:34:69:c9:64:11:41:
9d:ef:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:03 2026 by rpki-client