Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: O/30Hu2w+50AY2s6Szso+bO0kZEtc15hqRPyesAhhsw=
Subject key identifier: 4F:60:3B:7A:7E:EC:7B:97:75:D6:06:85:12:35:94:EE:DF:16:B8:B9
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 01A143844DAFE30CF6669B53F84F321B25DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1AA4
Signing time: Fri 16 Oct 2026 07:01:46 +0000
Manifest this update: Fri 16 Oct 2026 07:01:46 +0000
Manifest next update: Sat 17 Oct 2026 07:01:46 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: dCf0kDHhJXVi0Cxq6icaGlIMFuA2AOq9s48Hnsp8Xzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:84:4d:af:e3:0c:f6:66:9b:53:f8:4f:32:1b:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Oct 16 07:01:46 2026 GMT
Not After : Oct 17 07:01:46 2026 GMT
Subject: CN=4f603b7a7eec7b9775d60685123594eedf16b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:24:01:ce:9e:bf:49:23:6b:56:47:ed:93:
38:1c:23:73:54:10:ea:44:75:2e:77:a6:af:a7:ce:
59:e6:68:76:e0:e7:d2:20:69:32:6c:04:f2:92:18:
a9:31:d9:d9:dc:0b:15:00:01:da:bc:95:ab:06:ea:
09:66:b0:02:4e:f4:1b:9d:f1:7b:d1:dc:91:f3:f9:
89:95:00:e3:af:dc:29:55:d2:66:03:74:81:63:90:
18:4d:ff:2d:dc:69:2b:9a:c8:c9:8c:d2:45:7b:47:
01:d4:6d:95:9a:6d:41:2a:af:70:be:83:d3:14:37:
22:e0:62:36:fc:28:c7:a2:78:d2:54:f6:ca:2d:8d:
5b:0e:b1:0f:f6:4a:89:df:a8:17:65:a3:54:d4:8c:
bc:b4:f6:94:2f:07:78:de:e4:0b:be:aa:98:84:a9:
79:c1:47:83:1d:ea:00:9c:12:8f:ff:7a:eb:b6:21:
be:1c:e4:95:92:02:f1:43:d4:f8:2e:18:05:08:93:
7d:ee:65:03:f9:c6:ac:d9:dc:9f:cb:08:61:a6:a2:
84:2d:f4:56:56:3c:91:27:a4:9c:45:30:ba:2e:51:
e8:d7:35:d6:f1:b3:1c:ed:ee:1f:f5:b2:70:b0:a3:
f0:6e:74:bb:da:b6:29:ab:9c:b6:fe:e8:49:fd:61:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:3B:7A:7E:EC:7B:97:75:D6:06:85:12:35:94:EE:DF:16:B8:B9
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:7f:d1:20:8e:38:7f:dd:d5:d0:36:6b:75:a9:ef:b6:0f:
69:44:b4:b0:4d:0a:c5:1a:b0:5f:c1:ff:01:75:7a:1d:3d:dc:
e9:74:87:cb:1d:8a:c3:87:e7:03:bd:9a:c5:b3:30:cd:c6:24:
74:55:7b:f5:3b:a9:b5:46:2a:35:fc:c5:bc:23:9d:0d:ba:70:
2a:cc:5b:0e:a0:00:12:37:a0:f2:8d:41:15:09:04:e0:c2:35:
7d:bf:92:91:2f:62:df:e0:11:d0:ea:b7:04:8f:e5:42:38:e7:
41:fe:f8:de:01:14:ba:7b:f8:33:a8:30:61:58:dc:22:20:89:
70:56:c7:c8:e7:7a:c0:c9:35:a7:f7:ec:4f:66:6f:5f:58:4c:
95:bd:1a:2c:b0:e5:9c:e6:b7:62:18:71:7a:ce:37:4f:04:25:
b2:bb:27:e7:ed:2e:97:e6:50:2f:81:f6:27:4e:8c:16:1f:c3:
bf:72:33:e6:5d:29:c2:e6:5d:b3:12:e5:ad:ad:f9:85:3e:41:
28:26:45:59:50:c2:14:91:26:6d:33:c0:72:ab:3b:7f:eb:4c:
19:6c:39:c0:67:93:7f:b7:e4:96:e1:9e:29:fb:7b:42:f7:21:
90:c6:ee:65:47:be:fe:b1:f7:ec:1e:47:90:40:cd:47:5a:6b:
71:64:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:38:51 2026 by rpki-client