Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: P6T/0QXumI2OQHA2igB8ZZbRvmjnfgzojbws8gDgkko=
Subject key identifier: 7B:87:F7:2E:58:B4:0B:D7:E5:53:71:C4:6F:98:D7:A8:B6:44:26:7A
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019D382DE0353DE67732081A48ADC8AF74C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: hhx6OpQLma57NXU/2IYHddPW1foCks/G0SVdS4C5e1c=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e0:35:3d:e6:77:32:08:1a:48:ad:c8:af:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=7b87f72e58b40bd7e55371c46f98d7a8b644267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:ba:78:bb:d4:83:48:30:a4:65:bc:84:c2:
0a:2f:38:4f:4d:41:7d:a5:0c:4b:4d:e1:37:5a:9f:
d4:9f:48:ff:56:76:27:9c:a4:ff:8d:83:cd:d7:40:
76:51:58:99:e2:c7:b9:f4:52:65:fe:0a:4e:8a:e9:
f6:17:96:47:ab:fe:80:86:dc:77:2d:92:6b:2a:d8:
3a:a3:da:b3:87:b4:60:80:8c:c1:f7:16:dc:ba:76:
2b:b7:e0:46:7b:8e:91:d1:02:2b:dc:37:47:84:0e:
73:a7:cd:5f:31:68:2e:d1:b8:3e:a5:89:19:04:1e:
8b:10:ed:67:92:5c:6e:19:22:44:b1:bd:e0:40:95:
82:b9:a1:30:26:d7:55:c2:01:d4:32:c7:fa:04:7c:
52:18:d7:a0:cd:d4:6e:83:63:47:7f:c9:b6:8f:48:
16:6c:72:4d:32:36:d2:73:a9:de:33:ff:18:a0:2d:
43:70:8f:bd:4d:98:87:ec:65:49:6b:5e:81:b5:10:
8d:5e:ca:c3:a2:56:e2:7a:f2:8a:29:57:35:7e:b0:
71:ff:7e:65:de:f2:32:c5:8c:01:d9:90:85:a3:23:
eb:4c:00:99:00:ee:d4:0a:a7:77:0b:d0:1b:65:bf:
ae:ac:9f:54:fc:97:30:5a:f7:75:6a:17:e1:8a:88:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:F7:2E:58:B4:0B:D7:E5:53:71:C4:6F:98:D7:A8:B6:44:26:7A
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:2f:6f:96:e0:ca:10:8e:58:17:94:04:42:e4:db:e2:62:
d6:f5:ee:bc:af:14:84:6e:4d:c5:a1:dc:10:bb:44:e6:65:54:
af:dd:e5:62:94:d7:31:fc:70:06:fe:8a:5e:84:91:d9:a7:33:
8f:38:82:0a:04:1e:fc:61:3d:c5:99:05:8b:83:67:d6:18:c0:
0e:44:e8:2d:cb:8f:95:6d:a6:9c:57:9f:28:5b:58:e5:51:35:
d0:9b:fe:7a:0c:b9:3f:ad:44:15:31:f1:f4:da:98:66:e4:d0:
23:c4:3a:19:38:6f:5d:9b:45:3a:10:f5:b5:31:31:4f:61:2b:
db:de:7d:af:bb:b8:e6:a1:6d:96:ef:bc:11:c0:f4:ad:15:87:
68:0f:88:44:c3:c2:d1:1c:39:73:a5:6a:79:00:bc:b9:79:5e:
c8:88:a8:fb:f2:77:1f:e5:7c:42:f4:27:46:32:4c:ee:34:75:
d7:db:03:ac:a6:1b:9a:8f:cf:78:99:1e:58:11:f1:67:a3:20:
a9:5d:aa:43:af:b2:c2:e5:1d:3a:ff:80:fc:27:44:88:d6:fc:
6f:4d:27:85:a7:b6:69:0a:00:cc:d0:3e:f2:e6:08:8f:bd:8f:
3f:5a:37:59:a1:50:30:57:0e:14:e1:00:91:84:a0:ed:62:bc:
ff:db:3d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:16 2026 by rpki-client