Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: dtYRw0nE+bxTE9vWMa2cA8WSEMFfS7sfy9Sz1iEh6To=
Subject key identifier: CD:28:3C:A0:D2:DA:72:EB:21:D4:9B:D6:03:94:86:17:C7:A1:AA:19
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 01A0C9A19F6985D6A7878F0470A49CA41EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 15:00:07 +0000
Manifest this update: Tue 22 Sep 2026 15:00:07 +0000
Manifest next update: Wed 23 Sep 2026 15:00:07 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: +ohZeeLJyYjqekctHqEatNy2tf7+fskcuA4UommnRx8=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:9f:69:85:d6:a7:87:8f:04:70:a4:9c:a4:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Sep 22 15:00:07 2026 GMT
Not After : Sep 23 15:00:07 2026 GMT
Subject: CN=cd283ca0d2da72eb21d49bd603948617c7a1aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:c7:9e:8b:38:91:2f:1b:0c:d9:ed:ad:35:
6a:c8:b8:58:3b:b1:d9:56:df:bb:60:86:f4:97:e6:
70:80:6f:e8:1a:44:9e:e1:37:d9:b9:ab:82:a9:96:
eb:5c:7e:a9:68:9e:92:9e:5d:f5:0e:7e:c9:a1:96:
88:cc:ec:70:be:1c:1a:28:ef:64:23:ea:60:4f:3a:
29:b8:92:f0:f5:e3:96:8e:a5:d0:60:f0:80:ef:93:
b0:ad:d8:ba:45:c8:a8:4f:45:2e:f3:6c:d1:18:84:
b6:10:f3:56:11:de:46:b2:0e:96:5d:b4:f0:c7:a2:
34:c1:1a:e6:68:0f:e5:1a:4a:cd:ca:df:5d:9c:5a:
78:54:65:fd:44:27:d2:6f:09:55:49:b4:8b:e7:fb:
f2:c8:07:de:1b:39:68:ae:9f:f5:de:33:30:b2:4a:
b9:30:fb:a6:e5:a6:be:bc:8a:20:11:83:d6:f6:e1:
46:b7:2f:40:72:9f:8c:32:88:e4:e1:83:83:bd:b9:
b9:fe:95:0f:b9:4e:50:72:18:d9:2b:04:8c:2a:1d:
ac:55:87:86:e5:b0:ae:bb:24:fd:c4:d8:de:0f:ca:
7e:9b:9f:0f:40:8b:a4:c4:de:20:3b:2d:5f:ac:5e:
a6:27:50:d4:a3:d6:24:5f:9a:dd:7e:44:7b:15:f9:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:3C:A0:D2:DA:72:EB:21:D4:9B:D6:03:94:86:17:C7:A1:AA:19
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:27:76:fd:a4:c3:8c:1d:bb:a3:64:c8:76:1e:27:f2:3d:
14:81:f4:a4:7e:e3:4c:67:77:ff:1f:a7:f8:17:6e:d1:d2:7c:
5a:9a:72:93:93:33:27:12:2e:a1:f8:ae:41:ae:21:93:ef:bb:
cb:77:a5:fd:91:87:6e:32:83:dc:89:4d:97:94:92:a5:ad:5a:
fd:61:e2:5e:fc:34:94:7e:6b:21:27:7b:9e:1a:9c:dd:4c:a8:
ee:67:11:63:2b:ae:ac:8b:c9:33:8e:14:97:88:2f:b6:89:6d:
99:f2:ac:e3:ff:09:77:f5:d7:3f:d2:0c:fd:63:fe:0f:0a:82:
1e:f4:22:bf:72:8c:04:bc:71:f8:06:ef:e5:44:20:f8:73:d2:
42:51:cc:8b:c4:ff:82:53:ed:0a:41:75:43:c6:c2:07:59:15:
99:2b:3d:cf:17:69:fd:5c:cd:6a:f1:0f:04:15:0f:89:20:e9:
b8:0d:7b:8d:c5:2a:49:a3:8a:53:1c:b7:dd:b5:58:41:dc:8f:
34:7f:7e:0c:08:69:e7:5e:e9:8c:04:fc:6e:89:d6:14:78:49:
87:39:8c:81:5b:21:7b:9d:a1:cd:68:d1:63:5a:dc:8e:65:c5:
88:00:df:d9:fb:f4:b0:e4:31:af:b0:62:39:93:61:82:a2:70:
9d:fe:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:23 2026 by rpki-client