Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: B+79eFxhFOtCxewT5FUpWbqYGFWsOBjsvNDSeRQyfpk=
Subject key identifier: 4C:BC:C0:90:BA:6B:E6:62:53:7C:7B:8A:C8:AF:36:51:EA:73:BA:66
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01A001383B70D69FD050923772548A2167FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 17:00:57 +0000
Manifest this update: Fri 14 Aug 2026 17:00:57 +0000
Manifest next update: Sat 15 Aug 2026 17:00:57 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: vnlcafcK0pa8AV9Kf4xJbhwU3mgqB/MHOGKWy5uASUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:3b:70:d6:9f:d0:50:92:37:72:54:8a:21:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Aug 14 17:00:57 2026 GMT
Not After : Aug 15 17:00:57 2026 GMT
Subject: CN=4cbcc090ba6be662537c7b8ac8af3651ea73ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:5d:70:d9:f2:4f:e9:e8:04:5a:15:f7:e9:
41:85:1d:e5:5c:fd:1d:8f:07:10:0d:c6:c5:1c:52:
af:89:ca:5d:84:36:b8:ae:c7:1c:b0:d5:c4:44:a1:
c4:50:16:b0:28:b3:3e:d3:16:a8:88:83:8b:81:46:
a6:cb:ce:91:5a:64:12:65:f2:c4:ad:8b:79:a8:b6:
ac:34:9b:c2:e6:ee:4d:41:28:5b:f4:61:00:4b:b2:
02:b1:ca:b8:44:ba:86:b4:c8:19:57:0a:87:24:d2:
8b:62:a2:af:51:90:63:0b:e4:e9:48:2b:bc:7e:88:
50:5e:92:b2:29:0c:d2:4c:2e:3c:92:79:9e:1c:34:
93:e9:98:18:f8:9f:68:88:b8:a4:53:6f:a6:ff:e6:
b1:70:ed:20:75:13:36:6d:82:24:cd:79:0d:f2:f2:
04:71:f7:e3:9f:be:91:96:60:58:fa:ff:16:4b:75:
ce:b0:23:2c:bc:70:72:2a:f7:70:73:0d:6a:d0:1f:
bb:c4:a2:7d:3d:b9:cd:fa:97:9d:41:34:42:00:3c:
6a:d6:3e:21:3f:4e:6a:48:eb:91:02:82:fc:ea:16:
af:2b:d0:ad:45:99:b7:8e:f6:3c:bf:33:e6:49:64:
f1:29:a7:17:b8:f8:d1:ae:73:37:7c:5a:40:6a:d5:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BC:C0:90:BA:6B:E6:62:53:7C:7B:8A:C8:AF:36:51:EA:73:BA:66
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:17:ba:1e:d1:dc:9f:c5:90:12:5b:0b:43:b9:be:fe:f2:
37:15:20:62:ab:cd:cb:ae:d3:fb:c6:58:40:73:c4:1f:43:93:
23:39:a3:c5:30:b7:4f:ed:5f:92:e9:68:83:43:77:9f:66:67:
7c:4f:22:a3:64:9e:d2:c6:15:54:60:4c:81:8b:fe:03:52:c1:
ca:24:44:f9:05:a6:f5:50:dd:ba:95:89:c9:a3:7b:81:ba:01:
59:d8:3a:2c:67:ec:59:87:5f:1c:00:59:1a:43:7a:d5:cf:e6:
70:8a:56:86:07:45:09:97:41:c9:72:dc:aa:6b:29:39:64:c4:
f7:5b:14:25:78:31:f4:7a:65:f9:5a:9c:3f:0e:0f:fb:9b:92:
3a:62:a3:ce:78:b9:53:d7:34:9b:cd:00:ab:ad:62:ba:07:f4:
a1:a6:45:44:57:a0:39:5b:0d:51:57:43:3b:ae:db:87:bb:3b:
10:a3:42:8d:67:02:00:20:6b:85:d4:13:97:92:0b:b2:bb:4f:
a1:e4:fe:91:77:b5:a9:59:6b:d0:35:ae:7a:22:6f:c4:ec:6e:
e9:b8:e4:8f:9a:ef:13:ab:95:b4:e9:18:bd:e7:7c:cf:1e:a3:
47:ec:96:9a:fe:10:f7:8d:c4:11:a5:42:60:0a:09:5b:16:4d:
68:b2:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:19 2026 by rpki-client