Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: QkEjTm1v4m7SU44l5/VnNTwpZUmtd+YS1HyJKjml4C4=
Subject key identifier: A5:61:85:7F:6B:A0:CB:6B:98:CA:9E:19:8E:33:39:7F:2C:8B:A0:AB
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019D3865AFA107B26B506B597156CF25FAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: 84d/h0q4Wek/hkaFWrABsMGlF3nlRWffhtAr+sigC+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:af:a1:07:b2:6b:50:6b:59:71:56:cf:25:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=a561857f6ba0cb6b98ca9e198e33397f2c8ba0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:a1:7d:ba:f3:56:52:e0:ef:ab:06:29:f5:
2d:33:3c:6c:68:62:85:ff:a6:06:bd:0b:5c:69:65:
39:2a:90:de:5a:1e:49:ef:29:ab:a9:fb:b3:4e:5b:
eb:1f:47:f2:d1:09:0e:e6:ff:46:db:e1:b2:70:71:
19:a2:46:a2:56:d6:50:41:d3:b6:62:6b:08:59:57:
b5:b4:90:e4:b8:9c:15:d4:38:b8:3f:7f:6e:3a:ae:
3a:fc:c0:57:65:4e:ab:a1:b6:2e:43:27:1a:48:5c:
82:90:ce:cf:49:42:15:45:26:85:0d:e8:03:a9:90:
a5:e9:5b:2a:ac:79:37:22:cc:10:7f:37:14:4c:66:
0c:d7:cc:ed:d9:df:a8:b3:e1:ff:98:1b:b0:64:ad:
6b:6d:0d:d3:e2:54:c2:14:c8:a7:f1:c1:89:45:93:
22:d2:10:77:d3:e9:17:de:74:7c:c4:af:67:a1:28:
1a:11:82:aa:28:ed:4f:2b:ad:e1:b9:89:55:e0:50:
85:bb:c8:28:73:f5:23:07:00:68:01:71:2c:28:11:
43:a8:fa:71:3a:74:83:fd:4c:89:1f:53:87:28:2d:
7c:54:eb:86:5f:40:2a:7d:a5:8a:69:1b:b7:a8:eb:
bb:97:c9:a0:e5:83:4b:b8:1a:4b:44:07:59:a2:bb:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:85:7F:6B:A0:CB:6B:98:CA:9E:19:8E:33:39:7F:2C:8B:A0:AB
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:12:6b:56:98:45:a0:cd:10:c0:4f:83:83:e8:6a:80:d2:70:
5d:e0:8a:0a:64:4a:74:aa:ef:56:e2:08:b5:79:69:d8:9e:21:
25:89:18:54:1d:9f:32:ec:d6:32:2f:78:d4:d3:55:f4:d4:19:
b4:21:6f:3c:8f:78:0f:92:cc:ac:72:d2:5a:b4:c8:b3:e6:86:
8c:2d:c6:cd:6a:fd:82:31:8d:11:c4:8e:94:b2:9d:4b:74:f9:
46:8f:a5:db:56:a8:f2:37:c2:85:01:99:ee:ed:2e:c4:17:6a:
a6:22:4b:37:ee:9e:15:7d:e5:a7:7c:df:98:16:6a:53:cb:93:
b4:f3:b5:b8:7a:08:3a:75:9a:03:2c:7b:d4:bf:2c:e6:d5:27:
23:fe:cb:94:dc:f2:9e:f1:9a:ef:87:43:fa:0a:7f:f9:dc:ab:
a9:99:ba:d3:9f:cd:22:fc:6e:fa:74:57:27:d5:c4:2e:cc:7f:
44:87:38:3b:b3:e7:18:1d:84:35:19:c4:1f:2e:37:3e:ee:3c:
3c:dc:8f:99:48:e9:4c:a7:0e:a5:d1:19:2d:5f:19:fd:fc:a4:
69:a3:a5:6f:b0:b1:64:39:e4:b7:b9:81:f6:63:18:b6:cd:86:
fb:45:c7:4b:b9:e6:fd:cb:b6:3c:8a:46:74:7b:8a:83:9d:95:
b7:15:78:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Za+hB7JrUGtZcVbPJfq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjYwMzI5MDcwMTIxWhcNMjYwMzMwMDcwMTIxWjAzMTEwLwYDVQQD
EyhhNTYxODU3ZjZiYTBjYjZiOThjYTllMTk4ZTMzMzk3ZjJjOGJhMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWahfbrzVlLg76sGKfUtMzxsaGKF
/6YGvQtcaWU5KpDeWh5J7ymrqfuzTlvrH0fy0QkO5v9G2+GycHEZokaiVtZQQdO2
YmsIWVe1tJDkuJwV1Di4P39uOq46/MBXZU6robYuQycaSFyCkM7PSUIVRSaFDegD
qZCl6VsqrHk3IswQfzcUTGYM18zt2d+os+H/mBuwZK1rbQ3T4lTCFMin8cGJRZMi
0hB30+kX3nR8xK9noSgaEYKqKO1PK63huYlV4FCFu8goc/UjBwBoAXEsKBFDqPpx
OnSD/UyJH1OHKC18VOuGX0AqfaWKaRu3qOu7l8mg5YNLuBpLRAdZoru+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVhhX9roMtrmMqeGY4zOX8si6CrMB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBJrVphF
oM0QwE+Dg+hqgNJwXeCKCmRKdKrvVuIItXlp2J4hJYkYVB2fMuzWMi941NNV9NQZ
tCFvPI94D5LMrHLSWrTIs+aGjC3GzWr9gjGNEcSOlLKdS3T5Ro+l21ao8jfChQGZ
7u0uxBdqpiJLN+6eFX3lp3zfmBZqU8uTtPO1uHoIOnWaAyx71L8s5tUnI/7LlNzy
nvGa74dD+gp/+dyrqZm605/NIvxu+nRXJ9XELsx/RIc4O7PnGB2ENRnEHy43Pu48
PNyPmUjpTKcOpdEZLV8Z/fykaaOlb7CxZDnkt7mB9mMYts2G+0XHS7nm/cu2PIpG
dHuKg52VtxV4hA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:09 2026 by rpki-client