Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: iL4XvgfzE4nXvAOZQV3yZDmzeKK3Qt5XRZkZ/CH073c=
Subject key identifier: F9:A9:29:C9:88:DE:9B:BF:C1:4A:8B:A3:DD:FC:16:06:19:21:EA:5B
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019D38D32198A93F4E58C575349331C79694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: 2t+bDghmHEUK8gi4ytvgl2xLbqAvf4hcmqWPajlxGyI=)
2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:21:98:a9:3f:4e:58:c5:75:34:93:31:c7:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=f9a929c988de9bbfc14a8ba3ddfc16061921ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:88:d1:11:aa:6a:da:d6:8b:4d:3f:08:43:
7c:be:5f:ac:a1:1c:34:65:20:a3:4a:f5:41:79:e9:
b6:bd:74:df:c1:11:84:0f:a6:78:46:0b:5e:75:42:
6d:57:c1:1e:fc:ae:6f:8e:52:f3:8d:bc:44:e7:63:
18:6f:f6:46:15:00:6d:80:67:ce:33:1b:a5:e0:60:
14:af:8f:da:15:6e:2e:0a:d2:e4:59:25:cb:98:8f:
0a:98:e2:02:60:68:96:0d:b0:34:6a:0b:e2:c0:dc:
e7:2e:cb:86:64:ff:1e:b8:52:e9:37:5a:f9:d5:b9:
68:78:bb:49:ae:14:3f:7c:4c:ff:1c:45:3c:99:29:
d3:c8:d3:45:3b:01:b4:a6:f4:b5:6b:0b:49:67:b4:
7c:52:05:2a:03:75:57:68:a5:c7:09:7e:a8:6e:8f:
02:0c:bf:92:f2:af:c0:40:3f:c5:dc:ed:ca:b1:8b:
58:12:f9:86:d0:6d:d2:80:62:11:7b:cc:8d:ed:0b:
d6:10:02:7f:41:e9:91:54:3b:32:80:c7:dd:61:52:
63:b3:83:d9:4b:53:1c:b8:94:3a:12:28:fb:6a:4e:
f9:ae:26:72:78:8d:4b:4b:54:17:90:06:9c:8e:5e:
8b:81:dc:69:1d:52:05:a9:df:f3:46:22:88:c0:fc:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:29:C9:88:DE:9B:BF:C1:4A:8B:A3:DD:FC:16:06:19:21:EA:5B
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:76:6a:af:7a:36:bb:08:65:92:73:25:d6:0a:31:f6:b8:
d3:7b:ac:14:ee:db:89:a8:bf:84:f0:e7:64:ed:1f:bd:42:7e:
fd:f5:67:3a:e7:29:a0:d7:ab:83:c8:62:bc:46:8c:12:3a:ad:
49:09:81:0f:e3:0a:a0:9e:09:52:41:51:83:65:ba:01:14:20:
b1:54:e0:b6:cb:cc:0b:fe:6e:ee:ac:ea:41:0c:9c:49:51:d7:
71:4b:be:9d:e0:48:7f:48:80:a8:81:98:fa:b5:e9:6b:3f:3e:
26:3f:5f:81:de:14:60:5f:31:da:63:56:20:9e:06:97:3b:e9:
cd:f6:44:e0:ef:39:6a:66:40:1f:63:bb:6d:d8:b8:d4:e1:88:
f4:93:65:67:ee:37:2c:93:89:00:78:2e:83:c5:0f:a0:42:f5:
5f:6f:49:ca:2f:35:1e:a3:65:8c:72:5a:6b:5d:2e:30:48:be:
62:b6:50:04:23:74:7d:fd:3c:e0:b1:ea:c1:84:f7:a0:c5:06:
70:64:51:19:1b:9a:6c:09:80:fc:e2:a4:26:23:f0:99:8a:20:
00:e1:47:6f:d8:e2:6d:83:18:76:d3:9b:4c:9f:48:76:5d:3f:
6f:6d:8c:40:e8:6b:b4:26:05:96:ec:fd:45:37:93:ba:80:be:
b5:4f:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:29 2026 by rpki-client