Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: EYJTlf36kCsj+k9jvVOULubNS5JwytV7/3DU26ON8u8=
Subject key identifier: C4:BB:18:3B:04:90:31:60:AF:D2:EA:E7:BE:39:6A:77:DA:65:CF:82
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019D389BC7CD9E3E9EE872E0DEC539E40E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: gswOL9KcuoJ9sUSGMx2jVZHpVr64KkQAIclgmNc/LFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c7:cd:9e:3e:9e:e8:72:e0:de:c5:39:e4:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=c4bb183b04903160afd2eae7be396a77da65cf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:f7:eb:58:5b:53:04:b5:fa:f5:82:6e:e3:
52:ed:42:23:e8:e1:8c:03:b0:1a:22:d5:2f:3b:e8:
bf:0c:7c:38:66:bc:cc:49:af:08:71:5e:27:e9:96:
47:a0:ae:23:d4:8a:af:84:2a:09:80:45:31:55:7b:
a3:59:c5:1a:87:6b:cf:7f:a9:2f:49:e8:6c:89:af:
cc:fc:38:59:33:42:e2:45:f3:fd:8b:bc:f5:4e:35:
9b:5c:91:36:ae:d3:4f:d0:e5:ec:29:bd:0a:f0:63:
3d:50:ea:22:13:0d:79:89:55:84:79:1d:ff:44:d0:
89:a2:b0:6c:09:85:65:ab:d9:b4:cc:f6:a3:ae:b9:
bf:8f:c9:c7:81:62:66:60:35:ad:65:ec:07:e3:de:
ab:9f:ca:66:20:7c:74:0c:be:d7:cb:fc:69:92:a1:
eb:a4:79:9e:30:c8:2e:c2:07:46:45:65:f9:98:17:
9d:b7:0c:34:fb:ff:57:40:15:2c:29:38:fd:91:cc:
40:a8:86:38:20:71:0d:7b:3a:0b:fc:05:6e:87:c9:
7e:a2:f4:3d:d0:75:2a:45:28:4c:c7:70:f0:48:5d:
1b:05:59:fb:c8:bd:d4:d9:9b:74:bc:46:1c:eb:56:
a4:94:78:cb:5e:1c:ce:e7:d0:47:5e:ee:7a:69:d9:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:18:3B:04:90:31:60:AF:D2:EA:E7:BE:39:6A:77:DA:65:CF:82
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:0f:4a:30:42:28:bc:de:2f:af:6b:37:cb:15:9c:63:24:
0e:7b:8a:79:99:2e:29:80:b8:fa:ab:dd:75:e0:50:e8:07:cb:
58:d5:7b:e3:66:c6:7f:fd:30:08:2c:b9:4a:5b:4f:18:47:bf:
2c:05:3e:d0:52:89:7d:9d:91:58:94:02:22:21:1e:b1:c0:da:
84:9c:4f:62:16:8a:c9:84:0d:bd:19:d3:77:22:1f:b1:30:fa:
49:10:17:56:c1:40:8b:35:10:ce:89:57:6c:a9:ca:ab:43:cb:
fb:6b:57:b9:bc:ae:36:99:9e:93:13:a7:a5:7e:35:6a:58:35:
97:c3:36:49:58:43:4d:31:92:4e:1f:46:44:28:5c:87:36:54:
9a:41:75:19:d0:56:a9:b6:bb:9e:48:06:9f:e8:6d:13:f6:ca:
e2:cf:20:01:36:c6:4d:8e:da:69:84:e4:7b:8a:42:8b:c0:50:
23:46:58:53:5b:6f:e5:f6:13:07:48:b8:be:42:73:b3:18:39:
71:ca:7e:68:2b:17:c8:ab:3d:50:f8:0f:17:15:5d:09:b3:e7:
f2:7a:9f:f2:51:11:cd:1a:23:1d:2c:c2:de:66:94:19:bf:6b:
c8:94:f2:06:35:9c:29:59:cb:71:cf:11:72:76:c7:43:87:1b:
86:49:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:19 2026 by rpki-client