Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: lDbvlXcEpZlHQQEMKQ8EY9VbMkdxr5e4iIQedePlU5Q=
Subject key identifier: EE:FD:A1:69:8F:45:32:1D:E8:30:DB:D8:FE:9B:67:79:A5:EA:BF:B5
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01A0C44512FACD035990186D318F4814AD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 14:00:56 +0000
Manifest this update: Mon 21 Sep 2026 14:00:56 +0000
Manifest next update: Tue 22 Sep 2026 14:00:56 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: SD+zY2Xc0A3Pe2dWtTcQcf9FpayzdWV/WN6kbO2IHHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:12:fa:cd:03:59:90:18:6d:31:8f:48:14:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Sep 21 14:00:56 2026 GMT
Not After : Sep 22 14:00:56 2026 GMT
Subject: CN=eefda1698f45321de830dbd8fe9b6779a5eabfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:de:b8:dd:32:0c:ba:9f:92:e5:0c:59:b0:
2f:07:d2:a7:90:56:f4:7b:fd:4e:87:40:d2:79:2b:
22:1f:6c:e6:4c:f2:9a:77:4c:b5:e8:5f:fc:39:23:
2e:97:8b:fc:c4:3b:98:27:0b:31:40:2d:8c:70:4f:
de:e4:73:2c:13:60:60:2c:0a:fb:ab:2d:51:13:b8:
0c:fe:a3:a2:50:98:90:12:e8:c1:2f:d7:5f:f0:7e:
3f:ad:9e:6b:18:6e:5b:c8:ff:56:27:48:a6:89:8a:
8d:ee:54:29:ec:5e:59:10:07:0b:d4:cc:e2:5e:48:
5e:9f:b0:fc:fd:01:d7:ee:95:4e:61:14:fe:c5:1f:
89:f8:11:79:7f:29:12:d9:cd:92:6b:15:f1:55:7b:
ca:2a:fa:bd:d5:33:b2:fd:ce:b6:f4:1e:2f:f0:6e:
8f:2f:58:ec:6e:88:9f:f9:07:13:9a:c6:7b:19:13:
f7:4d:bb:c7:4a:d8:d2:43:7f:e6:85:d1:68:23:92:
a8:25:90:c6:0f:b1:37:be:d7:44:cf:46:76:af:db:
8b:70:f6:a4:7d:40:7e:c0:18:a7:ce:c3:a0:70:8f:
4e:93:d7:50:06:7c:9a:ce:45:85:1c:95:8c:57:71:
d8:bf:1b:32:33:38:91:e0:51:ba:0e:72:29:9c:0d:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:A1:69:8F:45:32:1D:E8:30:DB:D8:FE:9B:67:79:A5:EA:BF:B5
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a5:c7:f4:11:91:b9:6e:e5:10:6b:44:71:69:f4:96:6c:1b:
96:4a:34:87:01:65:4d:58:ec:b5:cc:de:db:5f:18:a8:37:6f:
68:87:b2:49:a2:8b:9e:56:cf:68:08:de:5e:74:e2:55:a5:16:
bd:15:48:86:66:a1:ea:16:89:20:43:55:a9:1d:f2:c5:62:ee:
23:f5:8a:e7:57:d7:17:4f:1c:76:79:6b:c2:52:da:78:a4:f0:
9b:33:8d:0e:f2:52:71:e1:de:92:00:70:d2:8c:3f:40:69:de:
92:31:8c:1d:e2:bc:d5:d4:2f:b8:7d:43:f7:ff:8e:9b:29:ce:
a4:a1:50:d4:37:a5:62:af:2a:b9:ed:a8:a5:86:eb:8e:e8:c4:
5e:d4:91:f8:90:24:33:0c:57:8d:49:da:22:a1:e1:3f:79:3e:
61:f6:08:08:14:fa:55:bd:38:e9:5b:12:ca:d6:35:13:d0:ea:
b2:bc:46:13:2d:2e:77:38:43:cc:74:84:5e:52:e0:69:ff:40:
03:b7:74:b2:24:2c:31:ad:62:6c:eb:c4:a4:11:55:d4:fc:cf:
4c:a4:dc:39:2e:14:75:35:3e:41:26:cf:f8:4a:ce:18:29:a7:
3a:c7:fe:5d:64:eb:7e:b9:f2:a7:de:a0:ee:8f:5a:cb:f6:36:
bb:7c:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:45:48 2026 by rpki-client