Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: fsBTQFdUuOrvMt2UTMOXMqRrwwFT2S+YRGw+JgP5+I0=
Subject key identifier: 6D:AD:89:26:55:A9:93:5F:14:D9:39:EC:5B:1A:64:7B:24:FD:A3:67
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019D2BF2EEE0DDA85D92B9BA6C2C37741FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0C9D
Signing time: Thu 26 Mar 2026 21:00:34 +0000
Manifest this update: Thu 26 Mar 2026 21:00:34 +0000
Manifest next update: Fri 27 Mar 2026 21:00:34 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: FGrNhrK5lV6TagyiJ0IglmoY9SrHJMcqQbw8StjKx4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:ee:e0:dd:a8:5d:92:b9:ba:6c:2c:37:74:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Mar 26 21:00:34 2026 GMT
Not After : Mar 27 21:00:34 2026 GMT
Subject: CN=6dad892655a9935f14d939ec5b1a647b24fda367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:63:7f:02:98:ef:e4:cb:08:e7:c0:40:34:
3d:84:cc:82:e9:06:f0:4a:64:95:39:2c:48:19:c8:
33:b2:32:d1:3a:42:16:fa:06:53:2c:dd:0b:f9:29:
0f:d0:7e:89:cc:fe:f8:9f:99:1d:42:12:d4:be:e0:
61:0b:14:cc:10:5e:0e:b4:64:cf:fa:34:48:0c:23:
db:bf:e6:8c:d2:32:e9:a2:5b:db:4d:15:db:0b:5a:
59:90:00:1a:45:03:ef:a1:3f:9c:86:11:56:5e:02:
bb:1e:bc:05:0b:ca:41:59:49:62:a8:44:f1:54:f8:
f4:43:fa:83:cb:73:d1:56:65:c8:6b:84:7a:c7:a3:
33:37:07:1f:aa:be:da:73:5a:71:e8:de:51:e2:88:
b9:a9:9d:78:4f:06:2e:af:ff:91:78:f3:20:af:61:
d3:72:f8:4c:4c:0b:71:3d:63:86:70:93:40:42:37:
8e:68:49:34:79:7b:f2:46:8c:f8:ff:d1:91:e1:0a:
69:fc:b8:4f:d5:be:eb:d4:fe:a9:ce:2a:f4:83:43:
e1:60:8c:f3:34:1a:ca:e9:24:06:5b:b4:c4:8b:40:
d9:25:11:0a:5b:f1:a0:42:87:91:62:25:02:8c:26:
8d:12:27:17:c4:d7:9c:50:0f:ef:11:72:0b:88:14:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:89:26:55:A9:93:5F:14:D9:39:EC:5B:1A:64:7B:24:FD:A3:67
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:7d:76:b9:63:4e:4b:28:6a:b9:cf:55:0a:5a:15:a3:4d:
40:98:72:82:d9:c8:f8:7f:49:47:1e:76:5f:a3:c0:fa:6d:0c:
f9:a9:3d:37:4e:be:4e:45:0a:31:f8:c4:0b:c4:62:bb:43:61:
3c:cc:58:2a:bb:e9:d2:7c:de:3c:42:6a:12:76:0e:a8:72:0b:
da:12:08:81:dd:a5:93:6b:d7:1b:dd:22:32:da:ee:af:2c:53:
ce:bf:02:65:8e:c4:63:e9:4f:28:56:0e:3e:a6:7d:45:23:8a:
03:66:3e:c3:05:b6:b3:0e:a8:e5:4f:f4:70:3d:81:d6:2c:24:
8a:98:43:0c:80:f2:2e:e3:3c:1e:32:82:e1:76:b0:f6:72:ca:
97:47:db:d4:83:38:d7:22:80:d1:94:22:2f:de:38:cd:1e:04:
bd:15:de:60:d1:f4:80:cb:5e:7d:5c:4b:ca:82:41:9c:13:43:
a2:58:7c:53:2d:9e:11:2a:62:3b:e1:ce:e7:eb:48:17:a0:6c:
7b:3b:3b:d1:7e:cb:5b:d7:d6:2c:0d:f6:6e:06:95:c6:cd:6d:
f7:c0:04:b3:c5:45:33:de:4b:02:81:1c:84:b2:19:7c:53:14:
2d:27:60:ef:4b:e3:50:24:bc:f1:d5:7f:99:31:b0:c7:e6:a9:
3f:9b:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:15 2026 by rpki-client