Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 89i0Y5TlciqChOWnR2iLboPSTbY/GtJ2LCjvfBO/Wno=
Subject key identifier: 9A:0D:92:BA:09:A5:F9:24:34:BC:7D:65:4B:61:70:FF:BD:27:8C:D0
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019D2AE073199692B72FF74764D1AC2ED1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:00:45 +0000
Manifest this update: Thu 26 Mar 2026 16:00:45 +0000
Manifest next update: Fri 27 Mar 2026 16:00:45 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: rnvtwmXW+HJ55KVg2q8Lo9+XLvn9RB7Z8XW/zmkLkHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:73:19:96:92:b7:2f:f7:47:64:d1:ac:2e:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Mar 26 16:00:45 2026 GMT
Not After : Mar 27 16:00:45 2026 GMT
Subject: CN=9a0d92ba09a5f92434bc7d654b6170ffbd278cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:c5:d1:7b:22:df:59:b0:d6:b7:3e:fe:27:
b8:57:1a:b1:5d:0e:37:b4:6d:61:d2:f3:e5:14:59:
f3:17:15:e6:a5:b2:b6:af:94:f9:0f:5a:b1:0b:5a:
be:01:3f:f0:b9:40:01:75:fc:f8:6e:d6:54:55:52:
57:78:02:76:ae:fb:6a:eb:f6:1f:ef:1d:f6:5b:50:
f3:0e:ab:79:75:3b:8a:45:2f:61:15:3f:2e:55:5b:
51:bc:96:1d:c5:13:c6:22:36:30:71:f1:77:da:74:
82:df:da:23:39:32:e6:7b:f8:e0:f5:fe:0d:60:bb:
27:56:be:a2:4b:20:f2:d8:d1:82:65:d2:26:cc:d0:
1c:6e:0b:ad:3b:91:cc:6b:a6:ed:b2:02:d8:17:83:
6b:52:ef:8e:44:51:01:17:d3:74:52:e0:bd:cf:5b:
39:2d:a9:c7:6e:91:22:f7:ae:5d:29:e1:fc:8e:76:
9e:f0:73:4d:45:94:44:cc:e0:14:cb:ad:17:b6:10:
b2:50:2d:b8:fd:2a:6e:59:f3:6f:42:eb:6b:d1:54:
6d:16:cc:ca:1f:7c:fc:f4:45:87:4a:02:a4:fd:c4:
0e:21:b0:51:58:cd:17:61:f3:92:a4:7f:d2:12:4c:
25:fc:00:b0:b1:f8:da:e8:e2:59:e5:d1:11:20:b2:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:92:BA:09:A5:F9:24:34:BC:7D:65:4B:61:70:FF:BD:27:8C:D0
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ab:c7:d1:d6:05:7c:ae:fb:92:4f:db:2f:57:1a:9a:29:b6:
48:37:81:7d:5b:88:96:b3:c8:b9:c5:3f:ab:13:94:6e:bd:cb:
32:30:c1:eb:e8:61:a7:f8:d7:a5:df:4f:1a:c0:72:3d:bd:39:
df:f3:41:e0:61:54:31:f8:14:0b:e5:dd:f7:b5:2f:85:fc:cf:
90:05:35:dc:ec:de:ef:af:c1:95:82:92:c8:31:e0:f9:fd:97:
97:31:4e:51:1f:76:08:06:6b:51:30:f9:fe:9e:bd:06:24:0f:
7d:68:c0:68:17:df:91:17:cd:89:07:1f:99:07:27:c7:ab:c4:
92:8a:af:8a:bb:cf:0f:bd:94:d7:2a:7b:41:f5:2d:39:03:33:
df:da:eb:e4:94:93:93:74:df:7d:07:32:13:9b:b4:63:51:0f:
6b:ae:fa:d7:ab:a2:1c:91:b0:e8:ed:5b:8f:08:ad:9a:05:2b:
e7:3d:bb:c2:31:2c:a1:e2:49:a7:ae:c6:59:df:56:79:b2:e4:
a2:7b:32:1b:9b:e9:02:d8:b6:c5:d5:30:8e:00:62:e4:fa:80:
f2:98:2f:ef:65:c3:df:b5:d8:a0:22:73:4e:f5:12:e4:a1:56:
c8:3b:66:a4:5e:55:de:37:c0:44:5d:69:27:b2:d4:dd:be:45:
80:ac:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:00 2026 by rpki-client