Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: vtRkXi36AuU/j6lLorloIHrtsECCw688kP7lXV8pybE=
Subject key identifier: 22:8E:44:B0:DD:56:EE:D4:6F:D8:4F:E1:46:EB:1B:EF:C0:F0:9A:21
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 019D38D330CFD883D8779256E3065AB33AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 0228
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: ohBy6CYFWvwM8ThKGQJgaFjhyDHi3Nb56lT07AEXZ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:cf:d8:83:d8:77:92:56:e3:06:5a:b3:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=228e44b0dd56eed46fd84fe146eb1befc0f09a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:0e:73:23:c3:f9:70:63:e7:a4:bd:4a:22:
e2:09:95:47:5a:09:16:20:17:20:4a:da:f8:90:76:
8e:0e:56:30:5e:4a:31:65:85:b1:94:68:88:58:df:
6b:65:13:d6:72:97:cd:5c:aa:bc:0b:df:4a:d1:c3:
77:67:a8:6a:ba:63:7f:f1:1f:5c:ca:42:a2:ae:68:
74:38:1e:32:49:39:6f:f4:b6:f2:a5:a7:1d:f6:6b:
02:9a:4a:32:3a:b7:72:a3:1c:0f:e5:6e:f0:17:a7:
27:0d:cf:d5:8d:8d:94:b9:92:f9:bf:c2:d0:6a:5e:
16:d4:1c:1e:42:97:aa:13:95:34:e6:31:42:97:4e:
af:6c:3d:05:5c:8c:87:9a:ff:37:7f:c5:ca:6a:1f:
1f:f5:23:dd:56:e9:1d:54:6a:c8:ab:2a:2d:f5:17:
8b:20:ca:89:be:b9:dd:7c:4f:bf:cf:7d:50:14:51:
66:a6:03:d3:ac:7b:f9:28:d9:21:a3:13:85:14:be:
83:78:90:3d:5d:38:73:9b:d1:95:48:e7:c2:d5:5c:
d4:76:e1:09:b9:80:b7:20:94:09:56:d3:9e:a0:f0:
74:f1:24:d1:0c:3b:ee:d1:66:8e:f9:07:80:26:07:
1c:df:85:8b:55:ad:a8:bf:fa:39:97:4d:25:d1:38:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:44:B0:DD:56:EE:D4:6F:D8:4F:E1:46:EB:1B:EF:C0:F0:9A:21
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3e:ff:15:b2:cd:04:fe:f8:c0:6d:e4:5c:0c:7c:f5:5e:ca:
b6:e0:91:c7:e2:33:81:9b:5b:7f:53:8b:3a:ed:75:f5:a1:5d:
22:e6:9f:1f:23:45:cd:62:8d:74:2b:3c:c0:ab:4a:b9:2b:c9:
6f:ea:69:ce:25:b1:f5:f1:79:8f:19:83:e8:d7:87:8c:db:b1:
64:10:48:04:42:81:ad:3d:89:a8:2c:86:ea:07:18:1a:65:2e:
0a:06:d5:cd:97:a0:b3:c4:18:86:74:dd:1d:b1:24:e7:b1:be:
54:cc:3d:d5:c3:6c:30:e4:77:9e:4a:ec:09:0f:43:8c:4b:1c:
a8:da:fa:46:fb:9a:2a:b4:2c:1b:4d:bb:1d:85:0b:52:a2:af:
85:f1:31:90:ee:7c:5f:2d:2c:9b:34:ca:a5:91:d9:2f:12:d6:
6f:ae:1e:ad:63:bb:8b:fd:42:cf:c6:ec:6e:22:99:5e:e0:72:
5e:da:b4:f3:22:3f:e9:4f:78:52:9f:60:4d:cb:f9:89:c5:ac:
aa:b9:87:56:ee:65:c3:6c:72:36:f0:d7:36:b1:7d:3e:c7:af:
c2:ad:b0:e4:b0:17:e1:bd:94:44:88:b1:ec:ab:51:cf:d4:cb:
dc:f2:79:4e:80:b3:2c:45:9e:ad:dd:b1:8b:bf:00:02:6c:c5:
53:10:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:25 2026 by rpki-client