Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: cPZWY6GmshdzFg69cDsapFPPwcrAnHtebuW2zImVpVM=
Subject key identifier: EF:E5:81:5D:8F:5A:99:F4:6A:E3:28:AB:89:82:A9:50:DB:73:47:9E
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019E1D592FDA0E62D055374D4E44C2CB1E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0D1A
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: L68BwnvLeiLuS4DTkuJV49/QSpyA1ZXu8xaevp548zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2f:da:0e:62:d0:55:37:4d:4e:44:c2:cb:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=efe5815d8f5a99f46ae328ab8982a950db73479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:59:bd:ee:d2:51:ff:24:f2:df:2e:96:d2:
7a:e9:58:9b:3d:33:c0:11:d3:81:d8:27:41:8e:85:
0a:2f:fb:90:4a:13:67:72:af:a6:8b:46:de:29:f3:
56:8b:cd:63:2a:73:a3:5a:ea:89:cd:30:71:c1:ed:
6c:e6:29:18:d9:9b:5f:41:cc:46:73:35:4c:62:4c:
12:66:fd:b8:40:8d:f9:84:de:c9:6d:c6:1c:91:f5:
f8:0a:7b:b9:f1:72:de:0b:c9:69:3d:2c:82:24:42:
c8:de:bb:f9:3e:ac:16:b7:5d:51:07:1d:f8:00:e1:
72:33:2d:86:4d:a7:e4:62:d2:75:76:08:88:b9:f5:
da:94:9e:39:d9:e7:1f:2d:17:5e:e9:a6:8b:8c:e4:
50:e0:6b:71:92:b0:06:0f:f5:c5:31:c9:dd:46:84:
09:30:9b:4e:07:21:ff:00:19:fd:e7:a2:48:4f:5f:
44:7e:4d:5f:0f:57:dc:3a:74:3a:03:0c:31:f4:42:
a0:e8:76:82:1e:7c:7f:7a:56:3a:52:7a:ef:51:26:
e2:78:1e:51:1a:28:2f:07:62:c0:39:c3:78:68:e9:
c1:29:39:0d:f3:69:46:bf:62:1b:9d:62:4c:e0:a5:
51:51:fb:51:aa:6a:3b:7c:2a:e1:81:22:95:81:f0:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:81:5D:8F:5A:99:F4:6A:E3:28:AB:89:82:A9:50:DB:73:47:9E
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e5:53:75:af:ae:66:e0:49:7d:59:12:7d:72:84:0c:c7:6d:
e9:e4:a5:d8:27:cd:1d:16:f7:9b:c4:e3:4f:9b:a3:2f:1e:52:
de:4a:24:5d:24:02:00:3d:52:4e:2b:98:92:79:36:4e:19:66:
70:2f:70:b0:6f:51:87:92:42:9e:71:0a:6b:a2:19:8b:6c:75:
b0:98:fb:5a:86:ae:f7:2e:e7:6a:4e:ae:bd:52:8d:99:fc:63:
f8:29:5b:9a:e7:82:09:2e:10:47:7b:85:a4:d4:e2:0a:48:d4:
09:d0:a6:10:91:b2:7f:e0:fa:39:92:ec:9a:18:03:ae:d1:bf:
67:1c:42:70:13:30:e9:a3:06:e8:64:c7:28:d7:4b:c5:52:cb:
da:6a:8b:26:3f:3e:d8:0f:ca:62:62:b2:69:c1:9c:d5:d6:35:
c3:a7:e7:26:e4:e8:32:ef:56:70:ff:1b:61:db:5f:da:4d:33:
46:d9:26:0d:8b:c2:cf:f0:9b:cd:a8:9d:0c:a9:fd:d2:d8:a4:
ad:d1:1d:8c:7b:0f:52:9f:06:cf:8d:77:03:b5:23:bf:50:99:
71:83:b5:15:8b:c6:39:7c:ec:77:28:e6:65:eb:79:f5:bd:9a:
41:06:13:ba:c9:18:9a:95:a9:9b:e3:a9:12:6c:7b:10:90:76:
a1:f5:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:19 2026 by rpki-client