Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: U1OTrnyEEfr01lw4JPpsdWAOg3MBDRt4IFBm0UWalUU=
Subject key identifier: 9B:EA:1F:15:1D:0B:94:CC:6E:C0:26:D6:0E:16:7C:1C:88:9C:3F:1B
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019CAB6B6F3733E6CB12844FDF560E29322C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 11F5
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 3Ii11UvmK+2allH75aOIrlX5y6I06weaVzFS3HdlxYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6f:37:33:e6:cb:12:84:4f:df:56:0e:29:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=9bea1f151d0b94cc6ec026d60e167c1c889c3f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:1e:98:c5:d5:38:7f:9f:08:18:53:6e:45:
46:eb:62:96:b1:e8:ba:b2:ae:eb:ae:13:07:e9:65:
8b:cc:0a:e4:82:be:d0:d1:4f:3a:e3:d7:d2:2a:19:
ed:14:10:54:8f:15:31:bc:6c:b4:87:ea:87:d2:d0:
b1:92:bc:78:a1:b8:eb:35:50:0a:e2:bf:8c:7c:18:
43:16:99:c1:ba:78:84:79:f3:b1:4e:fd:18:c0:73:
c0:75:3a:e9:91:a7:0d:59:39:6c:22:db:49:ac:2b:
77:e4:f5:a0:e8:ac:99:30:9a:b5:05:d5:03:ae:25:
46:92:14:e9:aa:86:43:ba:76:74:c7:b1:b4:88:c7:
35:8c:86:45:e7:bd:a9:c2:ec:48:c4:41:45:d1:91:
ee:89:e0:16:35:2b:1c:84:0d:16:0a:70:c9:c4:4f:
d4:f5:04:0b:19:1b:69:61:ae:16:59:0a:b3:58:b7:
8b:58:ee:13:1f:15:e0:e2:c7:90:95:10:45:9a:11:
3e:82:3e:65:d8:60:80:87:b4:35:4b:24:99:92:dc:
24:54:b5:af:87:36:6b:86:f1:0a:b8:1c:f9:4f:a8:
11:de:f3:c7:c0:0d:17:e6:16:e7:4d:d6:d5:3c:db:
8a:01:fc:f0:1a:ba:c9:21:19:44:9a:a4:e5:b9:fc:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:1F:15:1D:0B:94:CC:6E:C0:26:D6:0E:16:7C:1C:88:9C:3F:1B
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:20:b3:31:cb:62:d0:68:77:cb:28:fe:23:da:98:27:0b:8c:
93:5c:2a:16:4f:ae:b9:b3:f0:d6:a6:9f:e7:c3:60:e1:a5:36:
33:4b:17:7b:c3:6d:09:98:f3:db:9f:56:d1:54:68:5a:27:c9:
b9:1a:51:45:65:d0:e5:fc:94:f3:da:27:b4:5b:2e:ed:34:e8:
71:2b:8d:42:07:ed:5f:90:09:61:4d:6f:db:84:51:48:28:02:
d2:e8:9a:6f:53:50:3a:60:eb:6f:e3:c4:f1:d1:cb:2c:a1:30:
be:32:13:39:61:b5:4c:ad:cd:2f:a5:16:74:02:54:7a:7d:54:
19:f5:70:69:84:9e:d0:5a:a5:fb:6d:90:78:dd:53:b2:d8:c1:
eb:0a:55:6f:0e:0c:bb:3d:47:33:4c:ab:7f:90:22:18:d6:03:
90:25:ff:c3:9f:ee:5f:ba:bf:52:de:13:af:92:05:d1:ef:fd:
2b:db:4b:b0:42:dd:a5:90:db:39:81:5a:f4:86:cf:a6:8a:ed:
f2:1e:20:17:52:bb:22:25:92:df:10:0a:ba:8e:09:1e:f2:ad:
36:e0:2a:48:1b:9f:1c:6f:98:f4:fb:dc:44:9a:e7:d6:4a:f1:
44:d2:12:3f:0a:5a:d2:77:7c:f0:53:b3:37:c6:ca:6e:66:0c:
71:a2:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:49 2026 by rpki-client