Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: t63FlBMSQdoXQSas/zBmCzKHqvR6yQvf5F5d8dWKgd8=
Subject key identifier: 4B:67:A1:F5:EC:3E:7C:CC:1F:AA:FC:6B:32:21:3C:A5:CB:16:F5:52
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 01A0C21F7D87EF5E16B308D86C0C5EE0DC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 04:00:38 +0000
Manifest this update: Mon 21 Sep 2026 04:00:38 +0000
Manifest next update: Tue 22 Sep 2026 04:00:38 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: SZ1uGmak46gqIyNiXe8IeJEwsLdBY9bkZqnccE4vA9I=)
2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:7d:87:ef:5e:16:b3:08:d8:6c:0c:5e:e0:dc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Sep 21 04:00:38 2026 GMT
Not After : Sep 22 04:00:38 2026 GMT
Subject: CN=4b67a1f5ec3e7ccc1faafc6b32213ca5cb16f552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:39:7a:c4:2c:d4:77:f6:80:bf:c4:22:26:
72:f4:f8:fc:3b:19:df:f1:3e:06:9c:45:ce:64:5c:
0b:ae:bb:7d:99:eb:bd:03:0b:f1:35:39:db:af:48:
97:42:d2:1c:b2:48:fd:26:17:f4:54:b8:8b:78:a8:
16:32:5f:41:62:e5:6a:00:5b:59:e5:54:c9:62:b6:
5e:76:a5:0b:68:f9:b9:85:01:12:1d:df:1b:e6:cf:
94:f1:95:32:a9:e6:b8:24:d6:c2:62:92:e7:b0:40:
c0:00:42:e2:21:b7:27:d6:d3:bc:f2:c5:6f:38:2e:
82:87:22:12:73:43:9c:e3:e2:c3:a4:f8:cd:4c:5a:
81:aa:1a:0e:bd:d3:9f:d9:47:6d:78:df:96:17:75:
fb:30:62:00:02:29:d0:4f:1a:f1:25:36:c7:8f:e9:
b1:c5:21:2f:2c:31:86:ba:b4:72:c0:d0:b1:d8:87:
8e:a5:e4:81:2e:91:ef:06:39:86:77:ba:14:e4:8b:
aa:5f:4b:f9:7c:fe:84:30:a4:80:1d:76:da:6a:24:
35:c6:20:6e:08:fe:aa:f7:33:a2:e2:43:2e:52:cd:
c2:64:0f:35:99:15:91:4f:b0:06:76:ca:4e:68:a1:
0c:4f:b6:67:21:50:a9:c0:b0:86:59:e0:b5:d3:15:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:A1:F5:EC:3E:7C:CC:1F:AA:FC:6B:32:21:3C:A5:CB:16:F5:52
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:35:2d:fb:f6:5c:0f:29:f1:3b:02:2d:5e:18:89:3b:af:
f6:4c:ce:90:04:b9:65:61:a2:4b:d6:b6:cf:ba:7b:2f:78:6d:
a9:c7:ad:8a:5f:48:eb:03:78:e4:ed:f9:12:5c:b5:4b:64:fd:
ae:cb:08:ee:ce:ad:9c:49:ac:8d:02:0b:bd:9d:d9:c5:c3:a6:
f3:04:1c:c9:09:19:da:0e:e1:82:f9:59:c5:d1:db:6b:d9:c3:
6c:54:7b:06:07:0b:38:57:8f:97:36:a0:89:a5:e1:c8:e3:e9:
c6:fa:0a:7f:a8:d6:79:69:6a:81:75:ac:f9:02:58:23:c7:64:
b9:26:c4:45:92:58:9c:53:ec:53:5e:a6:4e:ee:f9:af:b7:21:
dd:e3:91:22:81:43:52:2a:ee:95:f4:7a:c9:62:52:7e:f0:98:
5a:64:e7:d3:5e:bc:71:37:82:6c:7a:1e:fd:b2:b4:06:b4:1b:
14:7f:bc:aa:d2:7f:fe:6f:84:96:37:e1:71:2f:20:2a:22:a6:
ff:46:43:8d:3a:42:56:ea:ab:0a:2e:ba:e8:52:55:04:67:65:
07:e3:d2:82:2f:15:f1:6a:32:03:2d:f1:8f:61:81:8e:ed:d7:
aa:52:62:45:e6:94:f6:58:6a:81:e7:5c:c0:e2:34:e2:15:4b:
0d:6d:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:15 2026 by rpki-client