Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: H0LlX8bM9MK6S3IlDETrUvOc7xec0vmMNfuFeQCJTCM=
Subject key identifier: 03:DB:0E:2A:91:8B:12:D3:4E:84:AD:7D:1F:05:77:42:66:F3:23:0F
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01A000255D845D2B95EFC55CE6B9748C356D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0E14
Signing time: Fri 14 Aug 2026 12:00:43 +0000
Manifest this update: Fri 14 Aug 2026 12:00:43 +0000
Manifest next update: Sat 15 Aug 2026 12:00:43 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: qZlcUC9QYOQjpVmTHNp+pYiAB/f86C2p88fXwDaqdf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:5d:84:5d:2b:95:ef:c5:5c:e6:b9:74:8c:35:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Aug 14 12:00:43 2026 GMT
Not After : Aug 15 12:00:43 2026 GMT
Subject: CN=03db0e2a918b12d34e84ad7d1f05774266f3230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:b0:b1:66:4e:ea:19:27:9d:ba:a0:1a:5e:
eb:4b:22:32:90:72:14:ca:89:b6:85:4f:3b:53:8b:
f8:32:d6:fe:e1:c1:50:da:76:02:58:a2:2d:96:9a:
1b:4e:83:cd:32:2f:2e:f5:cc:c2:35:69:7e:47:bd:
be:67:80:12:f6:30:eb:70:0b:ee:b4:04:59:d8:28:
24:08:09:f4:f9:23:f7:92:19:62:8b:1a:63:b1:06:
08:0d:b7:97:2a:d7:83:e6:8e:ae:58:7a:1a:24:91:
6f:d5:63:84:7b:f8:12:48:67:c6:d6:d6:41:b9:a7:
a5:ca:c4:f7:71:37:d7:ba:24:65:5c:18:10:ca:df:
b3:9f:cd:71:86:ff:c1:81:61:c9:90:5f:54:e5:3c:
0b:f0:58:d5:d8:33:81:ac:5b:ac:2f:a6:b1:ba:b3:
06:3b:71:d4:c2:1c:f5:a0:c5:05:e1:6a:5e:b1:fe:
64:ba:c9:d3:63:ea:0f:c0:36:a4:33:81:eb:17:0c:
d2:91:c3:f7:d6:59:08:33:ab:e7:da:e8:04:2a:3a:
3e:76:74:8f:63:59:d7:fd:b2:73:06:88:42:5c:b0:
c5:ab:8e:9f:27:05:f8:49:54:38:6c:ba:ce:34:ba:
21:58:8b:9c:24:2c:0a:ef:e5:80:90:a3:69:ff:79:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:0E:2A:91:8B:12:D3:4E:84:AD:7D:1F:05:77:42:66:F3:23:0F
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:88:3c:0d:eb:ab:b2:d2:bf:16:b1:02:e8:9f:b2:9f:58:82:
a5:58:0f:de:e1:8f:e2:a2:08:e8:d2:0a:69:f5:6b:e5:84:1f:
15:9c:4e:4b:c1:44:2e:2a:ca:f1:45:83:0d:5c:13:02:c6:c1:
e7:14:6f:13:1e:ab:7c:e9:4d:72:61:8e:d3:1c:5f:59:94:bb:
1f:f8:a1:4b:c6:3e:54:8a:f9:b8:95:cf:07:69:25:0e:00:5a:
96:93:d5:6d:a6:b0:79:c7:6a:49:b4:d7:cd:9a:63:2e:bf:c0:
a0:45:97:3e:3f:7b:59:1b:f0:25:69:44:ee:7e:fd:8e:7d:95:
d2:d5:53:20:ca:6d:50:ac:5f:61:99:b5:84:5c:4a:e0:b1:78:
ce:29:58:61:61:cb:bb:c1:cd:84:1c:96:8d:66:17:38:c2:8b:
25:9c:27:28:c2:cb:05:fc:f7:40:9a:af:44:64:04:be:a7:a5:
e1:43:db:ef:ef:08:e8:45:63:e2:2b:bd:38:88:b8:1d:6a:17:
72:43:99:6b:e7:35:a0:98:e0:c9:54:3a:7d:14:c6:7c:0d:e9:
0f:ee:66:40:9b:34:dc:64:bf:6f:81:83:94:67:16:40:93:ee:
38:bb:22:03:07:46:f0:be:d9:c3:a5:48:36:27:d1:de:bf:0a:
b8:fe:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:32 2026 by rpki-client