Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: qc4Dig2IFIsK0uR3dCrU+oNX8gYQdrA7BZA2Ok6mkm0=
Subject key identifier: 2F:8B:B3:07:00:5F:E6:1B:12:5B:75:74:56:66:87:CC:40:AA:F2:F8
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 01A0C9D904124EE827A7767DE45E035F72F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 16:00:37 +0000
Manifest this update: Tue 22 Sep 2026 16:00:37 +0000
Manifest next update: Wed 23 Sep 2026 16:00:37 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: nd57grlmMhry7lKWvBffXyZppk/FM7i5PIdhTH3AGMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:04:12:4e:e8:27:a7:76:7d:e4:5e:03:5f:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Sep 22 16:00:37 2026 GMT
Not After : Sep 23 16:00:37 2026 GMT
Subject: CN=2f8bb307005fe61b125b7574566687cc40aaf2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:b6:e9:aa:25:20:98:7b:a8:5e:82:35:e4:
8a:6c:c3:4a:a0:0a:67:42:0c:02:e8:e8:a9:bf:25:
57:29:44:9e:23:30:33:fe:be:81:ce:c3:61:d9:22:
93:21:b7:c2:71:a1:42:2d:a3:45:71:f2:6b:0f:88:
33:22:d3:19:6a:8c:e1:91:21:de:da:9d:2d:e7:6b:
2f:29:f3:cf:ed:d3:1c:24:a2:5f:e0:a0:0b:96:ea:
7f:1b:01:02:71:49:1c:61:73:d0:56:84:18:ca:76:
e7:a8:b9:34:45:67:dc:75:e8:32:f5:61:fb:54:3d:
f8:9e:8d:4c:d7:56:5e:f2:17:72:fd:36:9e:47:cb:
cf:72:1b:27:82:f8:6b:7f:05:9d:5d:fb:97:08:66:
5f:ce:94:a6:81:4a:d4:30:95:db:30:50:85:a7:fc:
de:62:e2:8f:c0:99:2d:de:6c:b5:86:34:6a:a5:45:
a4:d1:29:8f:66:4c:62:de:71:60:3b:11:de:88:da:
ba:2e:82:7f:85:ee:cf:65:12:f6:09:42:0b:03:34:
5d:3e:c9:3d:50:69:43:69:cf:45:63:58:d7:14:82:
e3:a1:e6:df:d3:69:e0:fd:e8:72:27:ec:93:71:58:
99:a7:e5:84:bb:ae:3f:35:45:9a:22:37:15:0e:7c:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:B3:07:00:5F:E6:1B:12:5B:75:74:56:66:87:CC:40:AA:F2:F8
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7d:27:e5:f9:d0:5f:6f:57:0c:17:1e:1d:07:5b:7b:58:7f:
95:4a:bd:e4:cd:c7:ab:41:3f:39:0d:a3:4e:60:94:85:f8:cc:
d8:84:15:a8:44:b3:0b:7e:1a:e0:1a:ad:01:54:13:b7:d6:8b:
83:f1:28:a3:d9:ab:e3:10:f7:2d:af:f5:5a:17:cf:9d:7e:d7:
94:e0:a2:5d:41:9a:54:29:22:aa:f9:32:1d:ed:10:09:dd:63:
f8:f5:76:0b:68:ff:51:db:51:87:39:a2:f7:cd:4c:27:e8:04:
98:f8:38:30:90:7d:c9:85:ad:80:c8:38:6c:d5:ad:28:3f:d9:
b5:0d:f3:2b:68:be:c5:3a:65:3d:fa:85:e8:e2:89:c7:f9:0d:
c7:69:86:cb:e1:3c:9e:4d:dd:86:d1:1d:12:37:e4:17:a4:2d:
ea:5d:0e:96:83:5d:d1:e1:b7:01:b6:4d:a5:4d:81:9f:9f:87:
39:ed:ea:c7:92:23:44:8e:8f:25:32:5d:89:b7:a8:4b:85:f7:
d5:d4:40:2c:0f:c8:ba:4a:93:21:59:37:80:06:ad:2b:95:24:
27:8a:9f:d1:8b:be:09:05:d8:8a:cd:ad:bb:b8:e3:d8:1e:5a:
70:ce:f7:9f:19:c1:eb:67:b5:09:43:ad:2b:b0:b6:ff:ae:dc:
f7:ad:ea:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2QQSTugnp3Z95F4DX3L4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjYwOTIyMTYwMDM3WhcNMjYwOTIzMTYwMDM3WjAzMTEwLwYDVQQD
EygyZjhiYjMwNzAwNWZlNjFiMTI1Yjc1NzQ1NjY2ODdjYzQwYWFmMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseG26aolIJh7qF6CNeSKbMNKoApn
QgwC6OipvyVXKUSeIzAz/r6BzsNh2SKTIbfCcaFCLaNFcfJrD4gzItMZaozhkSHe
2p0t52svKfPP7dMcJKJf4KALlup/GwECcUkcYXPQVoQYynbnqLk0RWfcdegy9WH7
VD34no1M11Ze8hdy/TaeR8vPchsngvhrfwWdXfuXCGZfzpSmgUrUMJXbMFCFp/ze
YuKPwJkt3my1hjRqpUWk0SmPZkxi3nFgOxHeiNq6LoJ/he7PZRL2CUILAzRdPsk9
UGlDac9FY1jXFILjoebf02ng/ehyJ+yTcViZp+WEu64/NUWaIjcVDnyqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+LswcAX+YbElt1dFZmh8xAqvL4MB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH0n5fnQ
X29XDBceHQdbe1h/lUq95M3Hq0E/OQ2jTmCUhfjM2IQVqESzC34a4BqtAVQTt9aL
g/Eoo9mr4xD3La/1WhfPnX7XlOCiXUGaVCkiqvkyHe0QCd1j+PV2C2j/UdtRhzmi
981MJ+gEmPg4MJB9yYWtgMg4bNWtKD/ZtQ3zK2i+xTplPfqF6OKJx/kNx2mGy+E8
nk3dhtEdEjfkF6Qt6l0OloNd0eG3AbZNpU2Bn5+HOe3qx5IjRI6PJTJdibeoS4X3
1dRALA/IukqTIVk3gAatK5UkJ4qf0Yu+CQXYis2tu7jj2B5acM73nxnB62e1CUOt
K7C2/67c963qLQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:08:11 2026 by rpki-client