Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: WzyPCS6uwDQoKyLSHNfBB1nq3QfEd/0B7Rj4/3CFizg=
Subject key identifier: 71:08:F4:8D:C5:05:84:B0:FA:0B:AE:4F:9E:00:FD:63:33:ED:D9:66
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01A13DEF0D416D4531EF7947F5B1617554EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 05:00:39 +0000
Manifest this update: Thu 15 Oct 2026 05:00:39 +0000
Manifest next update: Fri 16 Oct 2026 05:00:39 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: QzNPAGDyFimCzZhZAnG4sg65tMEGyyknQu7XMMMTkmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:0d:41:6d:45:31:ef:79:47:f5:b1:61:75:54:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Oct 15 05:00:39 2026 GMT
Not After : Oct 16 05:00:39 2026 GMT
Subject: CN=7108f48dc50584b0fa0bae4f9e00fd6333edd966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:49:83:5c:cf:1c:ff:c7:b0:72:43:95:67:
53:8e:5c:8c:af:fc:c5:32:6e:78:6b:87:67:0b:a7:
aa:3a:20:ca:02:21:d7:41:eb:eb:ab:e6:e0:bc:6f:
96:1b:3e:74:4a:aa:2e:0f:1e:65:4d:90:ef:b4:55:
47:fa:e3:57:06:e1:97:d0:a8:c4:64:87:ff:7c:a1:
d5:93:c7:97:29:8a:eb:67:1c:fa:a3:3a:be:df:3d:
74:95:59:13:8b:69:ec:3b:41:71:8c:6b:d5:8f:47:
75:b9:dd:40:df:fa:4b:b5:a0:a4:0d:cf:2f:d9:2b:
36:f7:8a:ef:d2:58:5a:07:be:ff:6f:bc:2b:c3:09:
e3:d4:5e:83:b5:2c:ea:3a:ec:d2:5c:cc:a3:23:cb:
83:45:49:d6:14:d3:12:00:cc:eb:1b:a4:ba:e1:b4:
c5:b7:2e:1a:d4:00:54:30:0c:dd:d3:f9:84:29:cb:
1f:3f:db:3d:52:86:23:c3:67:44:4c:94:63:39:82:
60:c1:91:f8:d6:e2:68:cd:74:dc:5a:6b:a3:8c:f6:
84:16:88:1f:e3:4d:8b:df:cf:d9:44:53:ba:47:9b:
21:ed:99:69:83:aa:8b:1e:e7:c2:67:ac:38:62:38:
14:74:02:55:d9:db:e9:29:ef:ba:c1:7c:b1:44:78:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:F4:8D:C5:05:84:B0:FA:0B:AE:4F:9E:00:FD:63:33:ED:D9:66
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f1:72:fe:67:60:74:8d:71:82:3f:16:6d:05:c7:36:11:29:
c2:a2:f5:32:c5:a5:c4:73:1b:20:5c:68:9a:3e:fd:62:f7:9e:
c2:7a:1f:02:75:4d:03:51:fe:6c:9f:5a:aa:d9:65:36:ad:61:
08:34:9f:3c:7d:c9:c7:5d:31:16:ab:a4:41:79:fd:ca:fb:8b:
dc:c2:e8:71:79:dd:c5:5f:fb:69:66:fd:4d:c9:44:38:f8:7e:
a6:e5:ed:a1:97:d5:f3:fb:41:6a:e8:58:b6:66:c9:14:72:ca:
64:f5:cc:57:8a:d1:2b:cb:b4:b9:35:f7:1d:a8:18:ec:13:de:
ed:9f:38:05:ac:4a:79:8b:4e:2b:2c:6f:be:f7:8d:bd:d2:de:
6f:95:5f:7f:5e:8c:fa:ce:8d:80:96:4f:62:89:a7:48:2f:5d:
0c:ec:c4:34:2e:d7:a1:de:7c:fb:40:97:6d:20:7b:4e:75:76:
f1:51:ac:9e:74:c3:38:b8:27:e5:97:97:4b:2e:a1:8e:7e:66:
26:86:21:0a:3e:66:a9:9f:56:8e:a2:72:99:e6:d8:2d:b1:c3:
ec:d1:f3:d4:27:fc:2f:b3:c6:8e:0c:6e:ce:32:fe:33:b6:20:
53:5c:6e:0c:01:cd:b3:ac:d7:fc:ed:a7:e4:ee:50:4a:9e:dc:
b7:55:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:33 2026 by rpki-client