Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: sk+ZEBIu8XsmdJsv+aiZsJh8zIilOn3j1BGPjie6S/s=
Subject key identifier: 2C:78:74:09:93:F7:74:31:81:14:4F:99:CD:5B:6E:FA:C0:9C:78:0F
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019FA82B2E190BFDD40E562ADC038859F60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 1381
Signing time: Tue 28 Jul 2026 10:00:29 +0000
Manifest this update: Tue 28 Jul 2026 10:00:29 +0000
Manifest next update: Wed 29 Jul 2026 10:00:29 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 7DJDLLbXUT85N2kFo0gC3FFXkIdVNaF55xcw1FuUQuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:2e:19:0b:fd:d4:0e:56:2a:dc:03:88:59:f6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Jul 28 10:00:29 2026 GMT
Not After : Jul 29 10:00:29 2026 GMT
Subject: CN=2c78740993f7743181144f99cd5b6efac09c780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:65:98:6a:f2:72:e6:b0:95:30:f9:3d:97:
a9:30:d0:99:75:65:85:2f:99:e4:db:92:05:6b:b4:
69:a1:5c:e9:fb:10:eb:40:af:ef:95:2c:a6:f4:98:
eb:92:4d:5e:50:ae:1a:67:82:d2:89:a2:67:2b:50:
be:2c:95:25:a9:21:68:12:89:10:b4:ee:12:df:7d:
4b:86:bf:b2:d0:c9:3a:3e:89:be:99:c8:eb:46:4b:
4c:bd:4b:b2:2d:ed:d3:ca:0e:1a:a3:72:43:a8:db:
b7:b8:34:cc:82:cd:23:95:6d:ed:57:f6:cf:11:5a:
e7:71:76:e3:cb:7a:4e:51:ea:d5:67:bc:11:53:bb:
ba:cb:7d:98:58:d6:f2:bf:66:64:1d:86:9b:08:73:
77:18:45:e3:58:6f:64:cc:d9:6e:b1:57:b5:f0:2c:
e6:81:5a:48:69:57:47:28:15:20:ba:7b:7b:f1:c2:
fb:53:ae:78:0a:69:0b:d5:d9:6d:39:6e:98:b4:f1:
cb:49:25:c1:47:b3:f7:53:9c:46:f9:d5:3b:bb:1e:
77:15:83:3e:e1:bf:7a:52:a0:d0:62:49:cc:3c:98:
17:a9:00:cf:29:d6:c1:6e:ef:15:26:98:3a:8e:a9:
fe:5f:2e:e2:46:d2:05:1e:ae:86:bd:27:5c:2a:41:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:74:09:93:F7:74:31:81:14:4F:99:CD:5B:6E:FA:C0:9C:78:0F
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e8:0b:d9:89:b0:50:06:09:c2:39:e9:4e:65:3b:20:57:43:
11:4f:a4:8e:74:69:bb:0c:4a:07:42:c7:e3:f8:d1:11:d3:76:
ea:f0:73:d8:d7:a8:c8:e4:db:d1:60:fa:f7:86:73:4e:0e:8f:
eb:47:56:cc:a0:84:0d:eb:6b:29:f4:a5:70:9d:b0:fa:f6:54:
b6:52:fa:19:33:e0:52:a2:4b:a3:47:05:2a:a1:73:45:d7:bd:
4c:75:d9:ee:92:72:78:63:91:34:b3:57:f8:09:ef:63:71:11:
05:06:ba:b2:c6:1c:f9:9b:1e:54:9d:f2:38:02:96:85:41:17:
47:a2:4f:4b:8f:62:b6:10:7b:69:28:03:ca:ff:c3:41:b4:1d:
70:67:02:9a:de:08:d0:54:03:ba:40:fc:7e:ac:84:cf:95:e6:
bb:92:ba:e4:97:ac:a8:78:d9:46:d3:d5:9c:73:b8:cb:1a:6d:
a3:90:bc:23:b9:f7:a2:e6:58:8e:cb:a6:9b:f3:e9:31:c0:3f:
0c:18:11:0a:2d:a5:dd:28:cf:c6:72:38:6e:e5:99:ea:c8:63:
d3:96:a1:25:73:5b:ac:f2:7d:b0:af:2b:24:3d:87:ab:5c:f2:
f9:ff:ca:fd:3a:f4:30:33:76:df:90:b0:f1:06:09:3a:c0:2c:
22:a0:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:13 2026 by rpki-client