Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: PRJL59oTm8N7CDIExyAdph1+Z3GaZoZzH+/jRFlDvPA=
Subject key identifier: EE:92:F5:31:FA:4D:57:91:5A:19:4F:D7:AF:C3:35:FC:5B:E4:61:40
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019D378963DA428B2502D9D436D5952420D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0CA3
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: K5ESUDuSKg1CQqisD3Em829imr/ztUYApu8z1ELLDeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:63:da:42:8b:25:02:d9:d4:36:d5:95:24:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=ee92f531fa4d57915a194fd7afc335fc5be46140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:1e:63:47:8a:2b:ed:c6:23:0a:4b:57:d9:
1d:67:13:a3:1d:9e:11:99:f6:38:a0:3a:21:51:06:
21:4c:f5:2a:4b:53:10:d4:91:6e:0b:cb:6a:3e:1e:
f2:13:50:37:07:a4:ae:60:59:ae:98:63:24:a7:87:
e8:fd:2d:7b:e4:bd:43:8b:0f:d2:b7:2d:98:52:7b:
41:e0:b9:7a:a4:43:20:00:59:cc:e4:00:3e:38:bd:
21:31:2c:74:38:c1:b8:93:6b:dd:c7:80:38:97:39:
1b:b0:d2:71:1f:06:94:8d:63:f8:17:1b:5f:ec:8a:
50:c9:db:c0:f4:47:8e:66:69:ad:f1:0a:9e:00:1c:
1d:0f:05:ad:ad:ee:9a:71:40:b6:a0:96:81:2c:5d:
d3:55:a7:83:72:33:74:e1:07:c0:da:77:f9:8b:4f:
f9:20:31:75:0f:90:aa:4e:b9:0f:c6:24:19:ba:7a:
01:78:28:c8:63:9a:e7:bf:19:0e:30:af:84:ff:3f:
3e:cc:21:95:77:bd:04:a7:d0:ea:1f:af:8a:e3:59:
c9:c5:ee:86:ea:7e:7c:c0:54:2a:dc:30:b2:45:ac:
69:07:42:21:53:24:21:1e:84:bc:48:80:1f:a2:d0:
74:4e:97:25:6f:f4:b8:32:51:90:7b:c2:a4:aa:14:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:F5:31:FA:4D:57:91:5A:19:4F:D7:AF:C3:35:FC:5B:E4:61:40
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:e2:60:28:1a:eb:f8:59:57:56:bb:ce:ba:3b:71:e3:d4:
e0:47:61:30:0c:24:7d:5a:82:ac:e6:82:4f:35:cc:e8:c1:af:
3c:83:de:75:36:c2:2f:d9:cd:18:28:3e:a2:2e:c2:52:82:5c:
56:32:cb:2f:75:42:25:85:23:7d:be:ea:bc:0f:d9:e4:4b:e2:
8c:37:f3:ad:5a:0f:7b:52:32:d3:ac:d7:9b:94:74:ae:56:8f:
4b:53:fb:c2:16:c9:ea:f1:35:c4:0a:0a:f0:b0:fa:76:52:d3:
84:15:85:3d:5f:b3:c3:45:3b:6f:01:99:21:b1:3d:93:8e:bd:
40:b5:4d:5f:34:cf:a0:0b:b8:72:60:4c:9f:db:e4:d8:0e:9d:
d4:ec:fd:a7:43:15:28:df:1d:e9:90:97:7e:a2:dd:ae:74:cf:
76:30:fd:4c:bd:08:d3:4a:f4:f2:6c:27:ee:01:c1:76:85:1d:
f7:83:db:c3:c0:ac:3a:9d:94:d3:0f:30:89:48:d0:52:00:d3:
bf:67:25:f1:1e:10:a7:25:5c:4c:81:fb:db:9e:51:ca:48:3f:
30:6f:dd:f1:ad:eb:3d:bd:c4:a3:45:19:16:e6:04:7c:8f:8d:
32:d2:5e:1a:a1:9a:fe:c0:1a:8c:ba:fe:a1:bd:3d:84:02:3a:
cb:a0:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:28 2026 by rpki-client