Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: tbketiWc12atsHJ0vrZj35uZ/qoMl/CPOaRJob3FnxQ=
Subject key identifier: 7C:2F:3C:88:BF:FE:5B:AD:49:63:9F:79:83:96:92:D5:5F:6C:2E:CB
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019F1867DFC50380BC2EBEC09A02AC122CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0D9C
Signing time: Tue 30 Jun 2026 12:01:28 +0000
Manifest this update: Tue 30 Jun 2026 12:01:28 +0000
Manifest next update: Wed 01 Jul 2026 12:01:28 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: Bzfui9IRv+ebbqA9kapbzF40huse3f28DHZPXAoHYMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:df:c5:03:80:bc:2e:be:c0:9a:02:ac:12:2c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jun 30 12:01:28 2026 GMT
Not After : Jul 1 12:01:28 2026 GMT
Subject: CN=7c2f3c88bffe5bad49639f79839692d55f6c2ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b1:13:5b:e4:f7:a5:13:07:db:10:c5:39:a4:
f9:96:56:75:1b:d7:f3:74:2d:2a:62:f6:7a:f8:8a:
14:c2:58:05:21:98:6d:d3:0c:f2:1f:bc:36:0c:8a:
2e:0d:e0:7f:5f:d3:90:1b:c8:28:5d:9b:a2:3e:9e:
a1:c4:3b:7f:91:9f:b6:ec:3f:8a:aa:d7:1c:ba:86:
6d:46:e9:2c:68:5c:82:03:16:73:4b:e6:28:2f:9a:
b9:a6:04:a7:85:41:e5:f0:c2:ae:5c:a4:12:92:52:
d2:41:64:5a:f3:b8:0a:ec:d0:d0:5d:96:10:e4:42:
50:b8:c2:7e:99:9e:d9:ea:0f:0a:df:b7:af:cc:35:
3e:67:fe:18:e7:76:72:c3:e1:ab:f6:42:9a:54:c9:
cc:4c:fb:b9:b5:65:a5:d8:fc:3e:a1:21:01:69:8b:
3e:fb:6b:7f:b3:b2:f0:c9:db:0f:e7:50:77:14:9b:
50:5f:29:90:71:92:64:61:44:66:15:7a:69:2b:6a:
e7:1b:a3:12:e0:1a:15:f7:92:c4:6b:66:78:58:9f:
62:71:06:b5:3f:ae:23:13:22:90:a3:38:ed:56:f4:
f1:a0:3a:4d:62:0c:68:27:8d:7a:25:28:85:fd:54:
e7:fc:c7:d7:9b:da:0a:0e:74:12:14:91:ab:ea:7e:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:3C:88:BF:FE:5B:AD:49:63:9F:79:83:96:92:D5:5F:6C:2E:CB
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:70:40:a8:b3:bf:6d:0b:87:7b:4d:0f:73:ec:e4:ce:2a:98:
0d:4e:ed:0f:ff:39:23:05:71:0b:88:fc:5a:ff:ee:45:42:2e:
ec:e9:f8:91:ca:c6:ce:1a:ad:8a:38:c5:34:c4:11:7a:ea:8d:
ab:39:32:54:ef:72:17:60:97:ff:93:84:e8:56:b8:cd:6d:39:
d4:60:c9:fc:02:a3:7a:9a:e6:ba:a5:32:57:5d:da:42:93:f8:
60:20:9b:51:fc:6b:e2:82:7c:21:11:fb:3f:2f:d5:b8:e7:c4:
5f:01:fc:c7:23:fe:5e:c3:13:97:42:03:a6:57:06:7b:60:19:
a2:10:6c:a7:79:22:c2:79:bb:e5:b8:d4:10:2f:81:b7:7b:9f:
83:77:e0:cd:af:2c:9c:96:0c:cd:ab:38:00:30:46:04:cf:e2:
b5:a7:60:59:17:91:d9:d9:9e:c0:ae:44:2b:80:4c:10:51:d7:
05:24:1e:32:0c:3e:35:07:84:3b:47:59:83:61:d3:72:1d:48:
70:8c:ea:60:10:ad:b9:dd:55:0b:91:52:43:30:b8:5a:1c:f1:
c9:ef:72:c3:49:c0:9e:58:98:c5:c5:13:88:88:6d:87:36:3e:
53:93:2e:90:4d:34:9e:71:17:6d:bc:15:b3:dc:2d:e0:d5:a0:
14:e0:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client