Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: 8IblZ+QEOrM5MC+yuvgVCmD1fWgI8cLTrvoCxKGX6xU=
Subject key identifier: AA:B7:80:56:DB:FD:27:F6:3B:C1:BE:CA:61:E1:B5:D4:3D:BD:E6:D5
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019FA8629D3D02B74476963051C321BF38FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 11:01:02 +0000
Manifest this update: Tue 28 Jul 2026 11:01:02 +0000
Manifest next update: Wed 29 Jul 2026 11:01:02 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: 3hMhyieLj6UthsW/YBidVsOSjGJsTJe/iLKZAqok/Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:9d:3d:02:b7:44:76:96:30:51:c3:21:bf:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Jul 28 11:01:02 2026 GMT
Not After : Jul 29 11:01:02 2026 GMT
Subject: CN=aab78056dbfd27f63bc1beca61e1b5d43dbde6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:9e:33:9b:4a:f0:43:ae:d6:f7:a7:d8:98:
61:e3:77:a4:c0:c2:30:e5:1a:fa:9c:3e:81:90:3f:
54:cb:77:6c:ac:9d:a8:da:c4:9e:cc:ef:93:fb:ad:
2f:3d:7e:cc:5c:03:1e:cc:8c:44:b1:5d:b8:20:e7:
dd:b8:57:0f:a1:4d:1f:fc:9a:7f:a0:c3:7c:6b:24:
b0:3a:3c:14:5c:65:6c:57:90:b7:0c:41:d3:be:84:
b2:bb:11:ff:d5:89:61:de:a7:17:34:8d:24:94:2c:
f8:49:89:0a:53:75:15:5e:c3:ba:03:89:ea:7c:9c:
46:7a:56:43:fa:0b:9a:38:a1:7a:e0:4e:29:38:f9:
b5:cc:7c:9e:c7:81:3d:78:20:cd:19:67:4c:eb:ba:
56:5d:78:9e:1c:8d:58:13:fa:54:cf:c6:bf:90:7b:
21:7b:ea:fb:3b:2d:4d:8c:c9:52:17:35:9c:f1:a2:
f6:30:f6:d4:ea:d8:ec:8f:58:f3:d1:38:b5:6d:41:
92:6b:9b:3f:3c:66:2a:3c:6d:a7:b0:ae:3c:4b:a7:
3d:e9:78:30:c9:e4:8c:f2:6e:11:ab:8a:8c:5c:8a:
97:6d:4e:49:39:52:a3:09:70:65:1f:d1:5d:a4:48:
b6:f7:80:9a:1f:f7:77:a5:7c:3a:cd:b8:32:5b:a0:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:80:56:DB:FD:27:F6:3B:C1:BE:CA:61:E1:B5:D4:3D:BD:E6:D5
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:8f:6e:e9:a9:b4:bb:18:09:67:9e:26:3e:68:fa:6f:9e:
c0:0d:c0:07:67:83:96:d7:b9:b9:ab:0f:fe:63:d0:5f:db:cb:
5c:40:33:31:2c:df:b6:0b:00:10:5f:78:a4:10:9e:a4:7c:8a:
99:1a:86:fc:30:2c:9b:48:4d:23:6c:dd:af:3b:03:df:3c:05:
06:35:a6:10:fe:ff:f3:6c:4d:57:d4:7c:d7:24:39:37:0a:6e:
1c:bf:e0:6e:87:03:d4:55:c9:ec:9b:d5:fa:ca:b1:8c:fd:aa:
e7:d9:f8:20:29:64:1c:99:11:39:22:3d:83:ee:c9:57:bb:1b:
c3:8a:da:b8:c9:06:62:4d:d2:e0:76:1a:80:8e:ae:5c:16:57:
f4:fa:c6:0e:25:4b:c9:fc:14:ac:f2:cf:ae:5a:fc:e8:c6:77:
10:f0:17:b4:f2:84:b5:e8:b5:20:2c:91:19:db:ae:ee:e7:06:
93:fc:52:2b:53:12:16:a9:ab:d5:50:0b:f2:8b:d0:26:bc:84:
3c:c6:c1:39:de:16:65:ae:fe:9b:76:9a:70:75:9d:aa:a4:86:
ab:69:b2:e2:ec:a0:95:5f:80:eb:7d:9e:a0:4a:ec:19:7a:68:
fe:75:be:66:e0:48:e7:af:ff:e8:4a:d3:b3:7f:63:a2:91:31:
eb:19:c0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYp09ArdEdpYwUcMhvzj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5
MTVkYjgwHhcNMjYwNzI4MTEwMTAyWhcNMjYwNzI5MTEwMTAyWjAzMTEwLwYDVQQD
EyhhYWI3ODA1NmRiZmQyN2Y2M2JjMWJlY2E2MWUxYjVkNDNkYmRlNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvByeM5tK8EOu1ven2Jhh43ekwMIw
5Rr6nD6BkD9Uy3dsrJ2o2sSezO+T+60vPX7MXAMezIxEsV24IOfduFcPoU0f/Jp/
oMN8aySwOjwUXGVsV5C3DEHTvoSyuxH/1Ylh3qcXNI0klCz4SYkKU3UVXsO6A4nq
fJxGelZD+guaOKF64E4pOPm1zHyex4E9eCDNGWdM67pWXXieHI1YE/pUz8a/kHsh
e+r7Oy1NjMlSFzWc8aL2MPbU6tjsj1jz0Ti1bUGSa5s/PGYqPG2nsK48S6c96Xgw
yeSM8m4Rq4qMXIqXbU5JOVKjCXBlH9FdpEi294CaH/d3pXw6zbgyW6B75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq3gFbb/Sf2O8G+ymHhtdQ9vebVMB8GA1UdIwQY
MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt
MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh
LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/uPbump
tLsYCWeeJj5o+m+ewA3AB2eDlte5uasP/mPQX9vLXEAzMSzftgsAEF94pBCepHyK
mRqG/DAsm0hNI2zdrzsD3zwFBjWmEP7/82xNV9R81yQ5NwpuHL/gbocD1FXJ7JvV
+sqxjP2q59n4IClkHJkROSI9g+7JV7sbw4rauMkGYk3S4HYagI6uXBZX9PrGDiVL
yfwUrPLPrlr86MZ3EPAXtPKEtei1ICyRGduu7ucGk/xSK1MSFqmr1VAL8ovQJryE
PMbBOd4WZa7+m3aacHWdqqSGq2my4uyglV+A632eoErsGXpo/nW+ZuBI56//6ErT
s39jopEx6xnA3w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:04 2026 by rpki-client