Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: nk2fWPY4VeBvducuXCjFs18AxxtIRfC8QkC1OqfI77w=
Subject key identifier: 2D:88:26:18:95:29:10:31:C0:A2:55:86:AD:01:50:C4:FC:2C:67:C9
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 01A03F3B8B42D5B96EEB94BA5DD4E86BF3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 03B9
Signing time: Wed 26 Aug 2026 18:01:01 +0000
Manifest this update: Wed 26 Aug 2026 18:01:01 +0000
Manifest next update: Thu 27 Aug 2026 18:01:01 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: ufI9VwdH8EipMtWI7lYD6z8mVCwZ5Rzs/vmK0BiquYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:8b:42:d5:b9:6e:eb:94:ba:5d:d4:e8:6b:f3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Aug 26 18:01:01 2026 GMT
Not After : Aug 27 18:01:01 2026 GMT
Subject: CN=2d88261895291031c0a25586ad0150c4fc2c67c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:fa:d4:a6:00:5b:46:37:59:64:45:85:3d:
b8:d5:a4:50:b6:7d:49:29:eb:55:73:40:c2:fe:a7:
d1:31:8e:1d:bb:76:98:ea:6f:9a:63:12:28:ee:33:
dc:d2:37:71:fe:43:12:7f:bc:f8:ef:74:ca:e7:25:
02:66:f7:6f:4b:42:c0:ac:44:c2:09:8a:1b:52:ba:
e9:62:00:e1:59:e9:57:d9:69:a9:d7:f8:cb:22:8c:
60:32:da:c6:28:00:47:7a:b5:50:cd:33:9d:19:ac:
b6:79:d0:ce:0b:08:ab:c1:75:0a:7d:ff:ec:56:1e:
98:e0:cf:ce:66:7e:0d:5e:e3:cd:79:ba:09:93:f3:
82:e5:de:8a:5e:57:ae:95:26:c4:c4:64:43:fa:dc:
70:3a:01:2e:f8:d3:e1:38:a9:59:b7:5c:84:1d:31:
f3:eb:49:97:62:ab:bd:e4:6a:f2:c5:a1:01:dd:dc:
5c:57:b5:06:41:a0:45:dd:4e:33:ca:84:cf:93:b4:
e7:ba:5b:bd:60:a8:b6:bf:36:06:d2:12:0d:ce:cd:
b5:2b:56:45:7b:1a:72:18:1f:71:87:55:96:be:82:
d6:d8:90:5f:49:6d:2f:c9:07:36:a1:1b:90:8d:98:
3a:14:8b:5e:5d:d6:c8:45:b3:b7:a7:1a:eb:54:fc:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:26:18:95:29:10:31:C0:A2:55:86:AD:01:50:C4:FC:2C:67:C9
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:91:dd:a8:ca:ad:5f:18:9a:26:b4:94:4a:7f:eb:12:55:ce:
66:83:ae:30:78:c0:27:04:63:dd:e3:f7:78:62:b6:10:d9:03:
36:73:6d:51:ad:52:8b:59:7c:fc:66:fe:c1:97:4c:b5:fc:c5:
47:96:dd:a6:32:af:af:ec:b3:50:8e:93:04:a7:6e:ea:b0:5a:
77:9c:86:73:f2:6b:09:d0:eb:86:35:fb:af:45:68:2d:d5:33:
55:70:bf:94:4a:c0:c9:a6:01:43:2d:db:92:ae:72:1f:80:66:
f0:51:0a:87:3a:9e:84:e6:0d:f4:18:80:de:1b:cb:ff:93:5c:
5c:e2:58:04:28:2e:24:39:61:7a:fb:f0:18:c1:e8:25:12:2e:
46:9a:6c:fa:bf:af:82:87:65:52:0b:08:cb:67:3c:a1:b6:88:
c8:d8:d9:20:e6:28:82:04:90:e5:01:99:71:54:76:d1:f6:66:
75:d9:03:4e:5c:b4:5a:da:a7:21:ff:0f:0a:85:03:a0:86:5d:
30:e9:13:f7:c5:9e:71:e1:66:50:dc:25:cc:3b:eb:18:93:4a:
aa:11:f4:c9:31:fa:1d:b9:be:f9:4b:82:c4:3e:cf:85:5b:99:
e6:1c:b1:65:53:1c:2e:88:ba:fd:4b:fc:14:1f:18:4d:d9:fa:
88:d2:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:01 2026 by rpki-client