Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: c2buT5O0dJwsZZrEQQmHFvShn5HEDFd7/C+YzZ1PnDo=
Subject key identifier: 59:ED:CE:8A:97:28:CE:80:F8:5A:AF:A2:AE:17:BF:D3:F3:B1:D7:23
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019D992B14FB602D40D358ECD1DC0C229022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: HGhOHibItoRwfx6QEYkykNnkS72EpAcp1f+lQ+Pz3Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:14:fb:60:2d:40:d3:58:ec:d1:dc:0c:22:90:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=59edce8a9728ce80f85aafa2ae17bfd3f3b1d723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:a7:7b:1c:bf:06:27:6c:97:e2:44:13:bd:
82:0b:f5:77:79:b5:66:ef:83:c4:75:5c:62:28:0b:
7f:d9:94:06:e7:58:91:6e:a8:8c:12:46:85:c2:8f:
87:6f:b9:40:59:25:71:f4:a5:01:a6:20:07:f9:62:
93:23:ee:2c:09:df:69:70:e6:6f:a6:da:6c:7d:57:
21:c8:29:39:9c:5f:63:97:42:5a:8c:16:bb:10:0b:
df:b5:43:bd:e5:9d:c8:14:88:29:45:84:c4:13:89:
24:77:c8:cb:0a:28:5a:2d:c1:47:32:15:20:7d:f2:
d4:b6:2c:6f:d7:bf:0d:ae:f6:7e:84:ff:08:ef:ba:
a8:30:73:0f:a5:b8:18:b8:7d:d9:a1:04:5f:52:ae:
c9:43:4e:e7:c4:c4:e5:eb:c0:09:5e:9d:9b:83:68:
1a:de:da:6b:01:65:bb:58:a7:75:26:0e:8f:39:03:
83:8d:50:d4:6c:46:5c:8f:6b:54:86:1e:30:54:cd:
fd:30:f2:35:88:0a:b0:1b:a3:e3:b4:14:8d:dc:26:
08:53:c6:f4:fe:3d:ce:31:61:40:7e:9c:01:71:10:
cd:dc:42:c3:91:43:6d:90:f0:a6:7e:db:d9:4d:60:
cd:df:b6:ee:85:de:99:c5:cd:aa:89:07:b5:5f:c7:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:CE:8A:97:28:CE:80:F8:5A:AF:A2:AE:17:BF:D3:F3:B1:D7:23
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:c2:35:a7:ef:6a:66:45:fb:2d:1f:f1:b0:7d:02:ea:b0:
d0:bb:08:dc:da:d1:fe:e9:ec:76:30:c6:6e:d9:95:b3:f0:97:
cd:86:b1:f3:dc:b8:53:7e:c2:a3:dd:dc:b6:79:4f:67:a7:e5:
4a:51:cb:8b:ed:53:9c:6c:29:5c:d5:52:32:6d:19:b9:20:08:
c6:71:73:8e:10:7b:0e:2d:b3:a6:b0:13:29:e7:08:79:ec:77:
35:a6:08:a2:d4:b4:99:e6:d4:ae:43:86:ee:da:83:19:9d:e2:
7b:19:da:4a:1e:36:87:fd:01:c4:ac:98:6d:39:f0:87:38:6f:
ac:a6:c8:bf:ae:29:bf:66:82:04:20:49:ac:02:a8:9a:28:97:
96:6c:eb:84:95:13:a0:2f:9c:ea:85:17:6e:89:30:54:bc:53:
84:fb:7f:72:ef:b2:4c:5d:63:83:fb:bb:54:b9:58:e4:96:0b:
ca:e6:be:a9:60:30:7c:4c:c2:55:43:d3:da:26:cf:35:28:fa:
e4:42:65:6c:18:7d:49:45:f0:d6:3d:3f:c4:cc:1e:8f:83:06:
b0:0c:2a:41:bd:66:c4:36:e7:fe:76:9e:8f:77:d0:cd:f0:49:
45:91:11:28:18:08:dc:3a:e1:5c:d6:aa:fa:9b:84:64:f0:a9:
8d:97:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:04 2026 by rpki-client