Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: wk1RLl55JyTv3/1qAFrgdsY2TUnVCNgkSS9bW9QLq7E=
Subject key identifier: B7:7F:C0:7F:CC:F1:CC:96:86:F9:48:F3:A0:B5:B7:21:34:2C:00:0B
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 019D27725CAC333550B37F15F1A0DC5B9C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 021F
Signing time: Thu 26 Mar 2026 00:01:39 +0000
Manifest this update: Thu 26 Mar 2026 00:01:39 +0000
Manifest next update: Fri 27 Mar 2026 00:01:39 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: JwVhPHtkNhx8zi118isAybT8EtIR1BqfbdT1LuE9ShE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5c:ac:33:35:50:b3:7f:15:f1:a0:dc:5b:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Mar 26 00:01:39 2026 GMT
Not After : Mar 27 00:01:39 2026 GMT
Subject: CN=b77fc07fccf1cc9686f948f3a0b5b721342c000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:3e:fc:0f:b2:fe:df:ed:fc:cb:52:39:90:
a6:ab:cd:ee:ef:b6:98:17:4a:14:98:e5:e6:60:db:
6a:0f:1c:ce:ab:63:d7:a6:47:01:cc:69:9b:ff:9f:
62:2c:72:a5:13:94:cf:35:8b:1b:82:3d:e1:ec:e4:
ad:8f:bc:24:ec:82:af:84:21:30:85:c5:36:09:fb:
fc:a7:ae:e7:da:86:20:9d:e4:8e:d9:87:20:76:1f:
74:68:fe:70:b6:b0:88:d3:cf:d8:36:d2:b7:e7:85:
af:bf:9a:f3:c2:90:3a:07:39:ef:62:8c:d7:48:c5:
72:90:60:70:41:67:bc:72:a1:3f:a9:48:42:62:3f:
8f:f8:7a:cd:37:7f:a4:b4:20:95:84:6c:e2:9f:95:
08:24:d1:9d:c0:2d:49:14:48:04:07:35:be:6b:e5:
32:bc:42:3a:f6:bd:2a:d8:ca:2f:4c:8a:16:f1:6b:
72:d1:29:bb:4b:ae:29:b7:f7:4c:77:d1:85:6d:3c:
ef:ca:55:53:45:09:b9:e0:72:11:7b:fc:cf:cc:19:
96:0d:f6:44:30:a3:9b:42:27:0e:26:fc:17:f2:ab:
ce:a6:bd:54:23:e5:13:c4:06:88:39:4c:ae:2c:a4:
6d:15:e0:1d:9b:a4:27:b4:9a:cc:ce:39:9d:af:ea:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:C0:7F:CC:F1:CC:96:86:F9:48:F3:A0:B5:B7:21:34:2C:00:0B
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:e1:d3:a7:e6:d3:82:49:54:56:dd:71:29:23:93:50:61:
51:9f:94:50:19:4f:27:e5:f5:be:fa:37:ec:58:99:dc:b5:f6:
37:17:ff:ed:ef:de:fb:11:1e:18:16:bc:58:66:6e:30:43:37:
e3:06:ea:9b:10:27:2f:58:f4:28:e1:2f:86:da:dd:aa:83:6d:
77:4e:b2:fb:e2:cc:de:d6:ea:31:26:90:3b:bf:ef:7e:8c:e8:
3f:d0:38:a4:24:58:ce:fb:ef:b9:98:b7:09:37:d8:8b:1b:8e:
8e:c6:07:f1:cb:9b:83:58:38:34:4d:84:8b:9b:34:54:ef:64:
03:ca:dd:18:af:b5:d6:f5:62:51:1b:1e:18:a0:22:e7:e9:ca:
48:37:40:13:62:a1:f3:f9:8f:05:1f:7c:0a:9d:4b:11:b7:3f:
47:cc:31:72:3c:ab:30:6e:d6:14:a4:29:6b:b6:5c:75:19:80:
9d:7f:ff:54:3a:82:b8:de:65:32:4a:b0:c7:3f:d9:66:f1:8c:
18:df:ea:92:70:68:2a:2c:31:81:36:3e:0d:a0:89:38:1e:64:
43:4c:7f:6e:fa:6e:ee:38:ca:19:b6:a9:0d:fa:c3:f1:27:95:
e1:43:1b:13:ac:74:8a:01:81:e8:48:15:11:5a:16:d7:17:4b:
83:5f:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:30 2026 by rpki-client