Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: MAJ6ee0bvVtUDsUCXs192qKryBrs2ICsWGNI+dL985w=
Subject key identifier: 3C:F3:24:58:65:AA:EF:8B:4A:5D:E1:38:98:FF:95:B0:25:F3:D3:C1
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019E30A93CF21391EEC8577799AE08105FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0D24
Signing time: Sat 16 May 2026 12:00:57 +0000
Manifest this update: Sat 16 May 2026 12:00:57 +0000
Manifest next update: Sun 17 May 2026 12:00:57 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: mzponSI5fR34gTLK1w/00ywH0DROXCtlCbMN1xAm9lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:3c:f2:13:91:ee:c8:57:77:99:ae:08:10:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: May 16 12:00:57 2026 GMT
Not After : May 17 12:00:57 2026 GMT
Subject: CN=3cf3245865aaef8b4a5de13898ff95b025f3d3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:bc:69:c0:53:33:ba:1b:5a:a4:2d:32:e6:
57:1f:39:a4:29:f2:65:54:dc:dc:39:2a:64:fa:ba:
91:ed:ea:a7:4f:9d:cc:1a:a6:3b:c7:69:4c:99:b8:
77:e1:c1:9a:91:a9:1e:f1:49:51:7d:24:c0:fc:06:
61:93:e8:a9:ff:c6:e3:08:3e:54:aa:50:09:38:23:
a7:b1:20:5c:48:6a:19:cc:0c:a5:6b:9f:c7:22:36:
db:fc:6d:f3:30:be:91:2d:c7:f2:65:c8:f0:da:fe:
d7:ec:5e:03:97:ef:2a:07:b5:1f:0b:53:47:e4:6f:
fd:f8:5b:93:52:36:f9:b3:76:3b:bd:fe:27:d8:1e:
29:53:16:5f:44:54:0f:b7:c9:0a:6a:21:b6:5e:b6:
76:77:4a:5e:02:ac:27:90:8a:19:33:a2:27:3b:0d:
9e:d0:cb:87:15:e7:ac:ab:18:d3:58:47:e9:0a:18:
f7:b4:6c:4e:b8:93:66:2b:34:de:54:d0:53:31:1a:
b9:34:3e:0e:05:e4:d1:59:df:75:8f:a8:e2:d4:d7:
bf:2d:7e:eb:7e:79:c6:af:be:c5:9a:3e:86:73:ce:
f0:d9:c5:34:68:fd:c3:cf:5e:ca:0c:8b:77:22:26:
f9:6e:07:0e:f6:f1:d0:d4:15:83:03:86:b3:7e:b9:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:24:58:65:AA:EF:8B:4A:5D:E1:38:98:FF:95:B0:25:F3:D3:C1
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8e:38:f8:95:47:d7:90:e2:8f:b0:f6:36:31:68:2c:74:58:
aa:65:58:1b:c0:33:41:c8:50:5a:a4:90:e9:4e:57:45:59:c5:
80:ab:c0:59:14:3d:ae:47:22:4a:6f:40:f0:26:63:7d:34:95:
d3:00:37:c4:d6:a4:79:f2:2c:00:66:8c:01:3c:51:e3:73:c8:
d9:f8:e8:5d:de:75:54:52:37:e9:fd:93:fc:85:cb:a0:7d:e8:
18:66:4d:f6:6a:b7:c4:7f:30:34:b7:93:b8:fc:69:3f:92:98:
4f:d7:17:85:f8:b5:80:31:2d:af:29:69:66:e5:30:65:2d:3a:
c9:9f:17:80:a3:1f:01:dd:a4:e1:ae:2e:c4:1b:65:a5:92:57:
e8:54:aa:80:73:28:b9:d3:3e:4d:42:a0:2e:e2:1b:bd:ef:28:
46:7b:45:f3:3c:45:c7:f7:26:68:5c:1d:e5:e7:bd:2c:55:e7:
03:9a:2b:52:dc:8f:a4:f8:8b:52:bd:f3:3a:1a:ce:3e:ec:3f:
8a:71:55:03:b5:ba:cb:c6:ed:75:f5:8b:44:01:13:31:12:16:
81:42:b0:9b:43:4f:50:3f:80:dd:0e:90:85:2e:bd:13:6e:da:
7f:bb:2f:3c:aa:13:e3:10:5b:a1:4c:ff:8f:e9:f0:a3:e2:cf:
e6:80:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:53 2026 by rpki-client