Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: msc0OivoNFphyB9nsk+upHadCSCN1r7tT85G6jATu3o=
Subject key identifier: BC:8C:C0:A4:79:F6:1E:EB:9C:C7:F2:42:D4:19:66:7B:48:23:FA:A7
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01A13ECB8C653CF0D84ED160F8BA40153AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0EB9
Signing time: Thu 15 Oct 2026 09:01:29 +0000
Manifest this update: Thu 15 Oct 2026 09:01:29 +0000
Manifest next update: Fri 16 Oct 2026 09:01:29 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: TMtouevIXCEBRhVOd7lFpWAuS6optBeo/+MehH2f2zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:8c:65:3c:f0:d8:4e:d1:60:f8:ba:40:15:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Oct 15 09:01:29 2026 GMT
Not After : Oct 16 09:01:29 2026 GMT
Subject: CN=bc8cc0a479f61eeb9cc7f242d419667b4823faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:89:c0:58:f2:73:5f:45:74:a6:4d:ba:a2:
48:73:c8:d4:27:7b:79:96:4c:f5:db:8a:0d:06:94:
df:5b:dd:33:3c:49:25:90:f7:4c:95:cb:3a:8c:82:
f5:11:91:f4:80:0e:fa:43:69:aa:50:74:97:79:fa:
ba:b1:57:ef:b4:cc:da:97:f7:2c:b2:80:d7:c3:3b:
66:ca:55:cb:2b:36:01:64:2b:b9:26:73:61:93:9f:
03:f4:a1:68:42:47:74:d4:83:83:27:35:67:f5:74:
56:c8:90:33:66:bb:a1:57:77:9e:0f:6b:81:d5:7b:
86:ac:a0:f4:ef:b2:da:ea:16:6f:66:68:fa:e3:79:
85:e7:5a:00:b9:53:ed:bb:fb:22:0b:7d:66:29:4d:
ff:2c:ab:85:67:77:0c:0d:e1:51:fe:bc:c2:06:74:
58:bc:2a:16:f9:69:ff:e1:8e:a0:88:59:fb:34:30:
42:b9:4b:c3:b8:6e:59:63:9a:a1:74:33:44:1c:fe:
36:e4:2d:d3:2c:26:6d:67:4e:09:ab:0e:00:3b:d1:
01:56:fc:0f:0d:9d:bc:40:8b:8f:fa:6a:a3:1e:2c:
5b:c2:7c:ab:5c:9c:76:52:95:00:10:cf:ed:4f:c6:
04:0d:fe:7c:6e:1b:ef:66:b5:53:dc:b8:1f:98:5e:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:C0:A4:79:F6:1E:EB:9C:C7:F2:42:D4:19:66:7B:48:23:FA:A7
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9f:c6:2c:3a:e6:cb:ec:3b:ee:07:a2:17:2d:da:fd:75:fe:
c2:db:c2:b9:dc:c9:76:8e:7e:80:e1:f3:fd:12:49:39:af:2c:
49:21:83:64:f7:fc:87:8a:a5:43:8d:87:85:a7:20:31:75:54:
44:b5:4c:f5:76:56:34:1f:54:be:b8:40:81:f2:4b:df:fd:39:
ef:28:17:a6:f6:0a:19:7a:5c:9d:33:a5:ac:f2:8f:20:26:33:
29:56:40:aa:a6:31:b0:a1:23:55:70:a8:93:b5:30:80:1b:64:
5b:ee:f9:b4:5a:18:d8:41:98:0b:2c:a6:7e:fb:25:34:d8:4f:
35:34:ed:33:86:fc:85:ce:62:85:55:f1:95:09:ee:db:7f:bd:
a8:bc:24:11:a8:fc:ac:0f:fa:b7:20:ab:1c:1f:7c:80:b4:99:
38:99:1b:fe:12:45:b2:5f:cb:a2:5f:8d:f5:59:90:64:2a:75:
d6:b2:2d:ed:61:29:54:1d:5e:d0:4e:93:7b:d3:de:c6:61:98:
95:60:4f:f5:4a:de:7c:21:ff:a1:43:40:81:2e:d8:73:4b:63:
f6:a2:4c:fa:05:70:c4:e6:b6:1e:2e:d0:93:47:2d:af:e2:cc:
f3:53:ef:d1:de:a7:70:1f:bd:97:ca:ae:9e:2a:55:b5:4a:36:
83:2f:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:13 2026 by rpki-client