Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: TzcrxGleDv25XtfKA7AJUZQK9bbI9CrWWQrkF8PkoD4=
Subject key identifier: 9F:48:3D:A1:1A:60:F0:65:64:CB:3A:31:5E:6B:AC:3A:E2:B1:C4:7D
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019F9022D65C92161B35F59B18E8B48F92A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0DDA
Signing time: Thu 23 Jul 2026 18:00:29 +0000
Manifest this update: Thu 23 Jul 2026 18:00:29 +0000
Manifest next update: Fri 24 Jul 2026 18:00:29 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: gSik/BeCW1x4HDMr9Fi4HKu4CfP2zDt7jQUKXP472qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d6:5c:92:16:1b:35:f5:9b:18:e8:b4:8f:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jul 23 18:00:29 2026 GMT
Not After : Jul 24 18:00:29 2026 GMT
Subject: CN=9f483da11a60f06564cb3a315e6bac3ae2b1c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:e9:ce:ff:d1:90:2b:bf:5d:9c:ea:d3:49:
e9:f6:26:27:5f:ba:67:07:f0:94:a8:40:e1:31:88:
87:b8:06:db:69:28:b3:b1:fb:b9:de:fb:26:fc:64:
ee:6b:cd:0f:5b:ec:54:63:b2:7a:4d:70:b6:21:0b:
5f:b8:0a:fb:99:eb:c2:75:29:79:c5:d5:4c:9a:17:
b4:f8:35:61:e2:0c:49:93:e7:20:97:9b:5e:f8:54:
83:2b:64:b7:bd:b2:98:ee:8b:d9:0c:0b:17:c7:f7:
2d:82:7c:fa:7c:75:24:3a:e0:b4:b5:f1:21:7c:fb:
3b:3f:0f:ee:b3:d7:96:07:b2:57:5b:33:5e:2e:25:
e1:92:e7:6b:b1:17:0f:1e:12:5a:2c:e8:21:c7:12:
e7:44:fa:72:ef:f8:c2:75:a4:10:4b:4d:35:f8:03:
4f:a5:73:80:a4:96:e7:49:fe:cd:c8:64:b1:7c:d6:
31:8f:8d:c7:09:9b:1b:a4:36:3f:4a:9e:d7:d6:f4:
18:e5:85:26:98:3e:01:5f:70:28:e2:2a:69:82:ec:
91:b9:f0:c1:6b:42:6a:d0:91:7f:ce:49:9c:17:20:
94:14:55:70:59:86:73:e5:f4:ea:8e:ef:12:79:4f:
63:df:31:57:52:cc:c5:89:bc:2c:60:70:a5:f5:f2:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:3D:A1:1A:60:F0:65:64:CB:3A:31:5E:6B:AC:3A:E2:B1:C4:7D
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:55:d3:51:e2:8a:b2:35:6f:b7:91:2d:77:8a:80:40:3a:4e:
60:0c:1a:1e:5c:fc:26:ce:8f:a2:4f:94:02:6c:74:3d:b5:aa:
cf:f9:ae:94:30:8c:eb:f3:5a:9d:22:69:f9:3b:d2:eb:a1:ac:
74:b6:54:9b:91:e0:6a:78:b2:c8:f7:ca:22:92:c3:ee:69:d8:
f9:1b:25:ea:41:18:f5:aa:33:6b:00:e3:ba:7f:f8:75:83:df:
85:6e:f6:6a:ce:fa:5a:94:39:ea:f9:49:38:a7:32:1a:0b:45:
d2:24:90:d3:df:d7:86:2c:8a:11:90:48:a7:e2:05:25:35:35:
43:af:8b:9d:33:a8:2c:c8:a3:34:37:e8:1d:d4:1f:54:70:2e:
62:bc:f4:25:23:45:1e:b1:cb:a4:73:22:0a:c7:58:0f:3f:c5:
e4:33:70:3c:86:93:89:cd:d3:9f:39:a0:c5:70:5b:6f:6c:80:
67:64:ca:47:84:19:b6:a6:69:42:2d:75:a1:4a:b5:b5:52:0f:
02:b6:af:99:72:66:65:8b:61:e0:73:b8:15:06:45:31:24:78:
ac:2c:45:fd:49:1d:51:a8:3a:fe:af:ca:9f:2a:e8:55:f1:9e:
ab:70:b1:9a:c5:f6:4d:c0:e3:0d:fd:69:5b:6a:8b:1b:2c:1d:
07:89:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:46 2026 by rpki-client