Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 89cskSoAU/TnCj0tfIsVIQ4s4orb0eZHASuyoXlXeqg=
Subject key identifier: E3:0B:C9:CD:D6:B3:F7:FA:A3:DF:A4:63:F5:F0:95:50:88:97:1F:39
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019F19431072A1970E294796389BCCBFC507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 16:00:52 +0000
Manifest this update: Tue 30 Jun 2026 16:00:52 +0000
Manifest next update: Wed 01 Jul 2026 16:00:52 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: tacoN51Lxn/MPtwbeyw+FZoTDAcOgbp64Ql64c0GSAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:10:72:a1:97:0e:29:47:96:38:9b:cc:bf:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jun 30 16:00:52 2026 GMT
Not After : Jul 1 16:00:52 2026 GMT
Subject: CN=e30bc9cdd6b3f7faa3dfa463f5f0955088971f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:68:9f:50:77:87:0e:24:47:5d:50:df:47:
9b:76:6c:7b:51:2a:18:6d:ec:63:d1:51:45:02:bd:
1c:3a:bf:37:22:2f:21:62:c4:c2:50:16:cc:aa:db:
4f:56:a1:e3:0c:d2:19:38:bd:cd:29:68:65:a5:c0:
88:46:b3:31:47:90:12:73:86:d7:7a:64:de:63:f2:
72:e2:71:0d:07:25:a3:fd:f3:ad:fe:66:03:06:84:
ad:36:a4:c0:ba:96:77:81:cf:43:8a:e1:83:68:54:
a6:4e:71:7e:82:16:08:03:20:63:62:69:33:e7:59:
86:28:87:b0:b1:f3:75:34:a4:e7:7d:3a:f1:ff:5b:
58:bd:57:b4:ab:12:95:db:12:c3:fd:a1:07:59:a8:
bb:77:3e:85:ac:46:51:f4:41:d7:c1:b0:d7:d6:3d:
1e:eb:9a:82:66:b4:3e:ae:c4:57:f5:c1:3d:ca:88:
cd:fe:36:4a:e8:f0:e8:9b:28:3a:90:d1:37:53:8f:
dd:e3:d9:5b:b7:48:1e:e9:9a:9b:d0:62:12:df:21:
64:06:70:31:60:86:8b:8c:48:e6:a0:56:eb:c5:bc:
4f:dc:87:fa:20:37:a4:5b:f6:b6:d9:e1:be:ec:dd:
7b:b2:78:93:61:2f:04:4c:1e:17:d5:aa:5f:c3:69:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:C9:CD:D6:B3:F7:FA:A3:DF:A4:63:F5:F0:95:50:88:97:1F:39
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:19:d1:d4:51:ab:51:04:8d:fc:b3:ea:ca:91:73:11:36:7a:
f5:48:a6:f6:ce:83:1f:56:78:31:f0:07:1c:04:ff:1e:a2:36:
20:a3:04:d3:5c:71:2f:eb:8c:90:7c:ca:c6:19:c1:80:0e:8d:
8c:55:81:4d:ec:2b:f7:f1:fe:b9:e9:d4:23:58:5a:88:0d:cd:
b0:4f:d1:df:40:88:f6:88:62:9f:ee:b3:05:bc:be:41:69:da:
1a:95:48:37:8d:f5:f0:65:d1:eb:3d:6d:ae:37:71:df:a7:37:
09:c6:db:13:d5:fc:bb:2c:c3:13:4f:ce:63:ec:26:8b:80:69:
24:02:d7:de:b4:48:36:3d:87:bd:dc:fe:98:cd:c4:0e:9d:5e:
12:05:fe:fd:e6:24:18:c0:7e:99:5f:0f:02:ab:56:3d:49:f8:
57:71:4e:24:39:a0:50:3e:61:4d:dd:4b:45:c4:c9:e5:ab:ac:
99:4d:12:87:d6:2e:4b:1d:e2:9f:df:70:1d:b5:2c:fd:87:e0:
61:a1:c1:fd:4c:4e:10:22:2b:45:7a:f3:d8:f0:52:92:ba:84:
a2:1d:07:eb:a8:7f:f1:48:c1:a2:a8:c0:a5:a4:be:2a:61:03:
a4:65:35:83:30:ab:6d:ea:03:35:a4:3c:b7:8a:a8:42:a9:ee:
74:88:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client