Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: Rn6hkZUh/3iJ8GwxzJfJxYsI3cNYEx688N5V9nNZaLk=
Subject key identifier: 0C:B7:09:CE:58:3A:FB:28:F9:2F:77:CD:CC:6F:14:8D:F9:84:FB:A0
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019CAD90683AA2DCA00EA08189625E53669A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: e4Iq3MciilhfdHBoIUdm8oEIG/b0MFUKp9v/14oy7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:68:3a:a2:dc:a0:0e:a0:81:89:62:5e:53:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=0cb709ce583afb28f92f77cdcc6f148df984fba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:22:13:43:5d:18:74:0c:25:32:56:f2:eb:
ec:c2:9b:17:4f:f1:90:cf:9b:64:d3:75:03:c4:32:
09:48:76:63:96:9a:fb:46:5c:03:73:40:2b:6c:e7:
d0:33:77:28:2d:73:7a:4f:95:4a:cc:ee:01:be:ec:
eb:91:80:98:0b:df:cb:78:42:6c:fd:57:14:fd:33:
d5:91:a4:33:7e:52:10:c8:9a:90:1a:ae:98:be:c3:
e8:1a:0a:39:80:28:23:75:7c:7d:2e:e1:22:e2:c3:
0e:78:91:27:67:4a:60:21:a5:7f:54:e8:c3:2d:ad:
62:25:7c:0d:22:80:2f:e0:98:c3:96:7d:8e:10:52:
f3:d6:a3:e1:1d:3e:f0:d1:28:86:47:fa:6e:05:39:
93:dc:70:54:7f:13:02:2d:b1:a9:be:ce:4c:6d:c1:
56:95:bc:be:49:f9:9d:06:d9:01:a7:23:89:bb:7e:
91:5f:82:f7:20:2b:9b:3c:03:2c:3e:5a:68:49:9f:
dd:2b:23:61:90:48:39:15:84:c4:c7:fb:f4:af:18:
49:61:5c:5d:6a:4e:c0:2b:f8:6f:6a:ba:80:11:d5:
9a:16:2f:81:92:ca:0e:e0:66:ad:32:1f:2b:b5:f7:
c0:4a:2b:cd:47:80:51:56:4c:00:03:59:b5:c9:97:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:09:CE:58:3A:FB:28:F9:2F:77:CD:CC:6F:14:8D:F9:84:FB:A0
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c3:c7:dc:54:81:21:83:5f:25:96:86:0f:3d:ad:c0:ff:34:
22:a6:1c:f7:e7:89:6d:a8:ea:02:73:0c:c3:cd:b9:18:db:44:
e7:7a:30:76:23:5a:0f:94:c3:3f:9e:0d:e1:c1:6a:2f:d7:91:
11:a0:ae:bf:df:72:0f:29:0a:8f:77:bb:ce:c4:df:5a:59:a3:
74:f9:0a:ea:2a:2f:e2:2c:2a:e7:cb:22:fb:6e:38:51:6b:82:
bc:48:41:f9:db:8b:b1:47:9c:ae:6c:72:66:f2:d6:2f:33:bc:
47:e3:cb:ed:86:28:fd:79:56:50:9b:7c:a7:bc:48:0f:33:a2:
dd:96:27:b7:7b:c0:fb:90:23:d3:d3:ab:fc:cc:5c:d3:93:51:
02:36:e5:f9:b0:9e:97:a3:5d:f4:03:08:d6:f6:4b:b7:c2:f6:
e2:dd:d1:5e:06:00:9d:3b:6e:d8:9b:10:f7:72:9d:39:c2:bb:
f0:6b:fd:3a:86:50:e6:63:89:15:95:0a:9a:91:03:41:09:de:
8c:13:53:8d:58:7a:a1:d2:b6:18:81:6e:84:ea:47:7b:18:5b:
78:f4:aa:f0:37:a8:1e:5d:d4:8c:19:1c:8b:fd:5e:58:08:a0:
b6:7a:ca:b0:05:1a:b4:19:6c:e8:cd:bb:25:df:c9:14:92:a4:
47:b5:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:15 2026 by rpki-client