
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: 2zPyCoRPT69DHnyAO7fKMJZs3+91jHWMy70Ksd95VvE=
Subject key identifier: 19:27:82:FC:01:8F:57:C1:A1:C7:D3:90:FE:E0:E9:04:23:4A:19:CC
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01A0CEC89594D0ACA607A23BF481E2DEEE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0E7F
Signing time: Wed 23 Sep 2026 15:00:46 +0000
Manifest this update: Wed 23 Sep 2026 15:00:46 +0000
Manifest next update: Thu 24 Sep 2026 15:00:46 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: aWFEYf7Occ1E9LbfBZaTtfFErPTn4FilONNH/smVwOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:95:94:d0:ac:a6:07:a2:3b:f4:81:e2:de:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Sep 23 15:00:46 2026 GMT
Not After : Sep 24 15:00:46 2026 GMT
Subject: CN=192782fc018f57c1a1c7d390fee0e904234a19cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:68:6e:58:90:c1:da:f4:a1:27:e0:79:67:
1c:fc:50:73:49:84:f3:62:6f:b6:bc:71:73:5e:1c:
9e:ed:ab:b6:b5:68:3b:67:99:f8:60:63:b7:63:e0:
be:1b:74:59:d1:03:3b:ac:9c:b6:fa:a6:49:55:97:
26:ff:9e:d7:24:da:12:e4:66:6b:f1:0f:38:39:56:
6c:9b:02:bf:34:70:c3:e5:f6:75:15:66:af:22:c3:
44:d7:94:8a:1d:37:4d:81:34:f7:70:0a:06:e2:99:
ac:9d:7e:1d:8c:b4:a8:05:12:51:5d:0e:52:61:94:
ff:5c:80:4d:ca:78:b3:57:34:4f:e7:ef:c8:86:b8:
6c:25:fe:3c:f4:48:e8:0a:3b:ba:77:c6:80:f2:5b:
9b:8a:0c:09:ba:d4:30:8b:40:40:0c:ce:2f:6f:46:
99:2c:ab:de:19:d7:54:e6:71:51:93:03:53:1b:ab:
b6:55:f5:70:d2:8b:bf:f6:5b:91:ea:fc:cf:4d:e8:
44:e8:ed:6c:da:9c:25:9c:f5:7b:31:f0:60:ce:f4:
93:bb:5a:eb:50:c9:de:40:26:58:85:90:8e:43:8a:
fd:c6:d0:39:c2:f5:9e:18:9f:dd:2e:c7:5d:e6:d6:
15:35:e5:b1:ce:57:8f:34:25:4c:30:7d:44:74:ed:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:82:FC:01:8F:57:C1:A1:C7:D3:90:FE:E0:E9:04:23:4A:19:CC
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:da:ea:51:d2:bb:a3:61:e3:f5:55:79:4e:3e:48:cc:ce:
b0:dc:3f:de:b0:b7:3b:50:ac:6f:8a:0d:01:7a:48:53:69:19:
6a:25:d7:09:5d:7d:83:0f:ab:91:55:32:19:23:e8:2b:39:23:
e5:26:43:0d:3d:c0:cd:2b:27:1c:bb:56:ef:e9:9e:21:82:1f:
49:74:f0:be:90:7e:56:b6:99:7f:5f:af:1b:bc:5a:b8:7f:e8:
25:c4:7e:5b:b4:89:83:8a:98:4e:86:09:72:e2:4f:00:8d:7f:
d1:72:00:06:a4:08:f9:4d:02:4d:6d:b5:46:00:27:47:77:20:
34:50:d7:79:9f:ef:ef:98:db:ee:7f:a0:25:f1:cb:9e:01:9d:
02:1e:cc:bc:59:77:f2:0d:c8:10:47:48:0f:c8:95:1e:9d:72:
a0:2f:a3:f9:08:b0:4d:8c:a2:99:99:48:63:30:d1:7d:35:29:
fd:db:90:6e:2d:87:a0:37:12:71:44:a0:90:ef:48:95:c3:63:
8c:6a:66:63:30:68:e0:52:5c:ac:a7:2c:a0:f3:78:4c:e1:b1:
e7:2b:90:8d:3c:f2:4a:b8:01:95:3c:96:e3:8b:57:5d:96:04:
c4:7d:8f:bd:c2:77:10:bd:5e:3c:07:66:aa:b2:2f:59:d3:65:
25:96:94:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyJWU0KymB6I79IHi3u4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl
YTI5YzgwHhcNMjYwOTIzMTUwMDQ2WhcNMjYwOTI0MTUwMDQ2WjAzMTEwLwYDVQQD
EygxOTI3ODJmYzAxOGY1N2MxYTFjN2QzOTBmZWUwZTkwNDIzNGExOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKtobliQwdr0oSfgeWcc/FBzSYTz
Ym+2vHFzXhye7au2tWg7Z5n4YGO3Y+C+G3RZ0QM7rJy2+qZJVZcm/57XJNoS5GZr
8Q84OVZsmwK/NHDD5fZ1FWavIsNE15SKHTdNgTT3cAoG4pmsnX4djLSoBRJRXQ5S
YZT/XIBNynizVzRP5+/IhrhsJf489EjoCju6d8aA8lubigwJutQwi0BADM4vb0aZ
LKveGddU5nFRkwNTG6u2VfVw0ou/9luR6vzPTehE6O1s2pwlnPV7MfBgzvSTu1rr
UMneQCZYhZCOQ4r9xtA5wvWeGJ/dLsdd5tYVNeWxzlePNCVMMH1EdO1LWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkngvwBj1fBocfTkP7g6QQjShnMMB8GA1UdIwQY
MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt
MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk
LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMTa6lHS
u6Nh4/VVeU4+SMzOsNw/3rC3O1Csb4oNAXpIU2kZaiXXCV19gw+rkVUyGSPoKzkj
5SZDDT3AzSsnHLtW7+meIYIfSXTwvpB+VraZf1+vG7xauH/oJcR+W7SJg4qYToYJ
cuJPAI1/0XIABqQI+U0CTW21RgAnR3cgNFDXeZ/v75jb7n+gJfHLngGdAh7MvFl3
8g3IEEdID8iVHp1yoC+j+QiwTYyimZlIYzDRfTUp/duQbi2HoDcScUSgkO9IlcNj
jGpmYzBo4FJcrKcsoPN4TOGx5yuQjTzySrgBlTyW44tXXZYExH2PvcJ3EL1ePAdm
qrIvWdNlJZaUeQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:44:14 2026 by rpki-client