Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: m3zscOn4BaN66JPx9R31H0aPWJ8uFSiPE2KLTMxu1jE=
Subject key identifier: 73:46:FE:56:81:39:C8:86:61:7D:D3:91:11:54:0A:B6:69:1D:22:1C
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 01A0D5DDB407D3C914B75CF8CB061B007BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 0407
Signing time: Fri 25 Sep 2026 00:01:11 +0000
Manifest this update: Fri 25 Sep 2026 00:01:11 +0000
Manifest next update: Sat 26 Sep 2026 00:01:11 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: 6u07sYykXKE552SYSaNovnJStkA713duQ9s29ADlY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:b4:07:d3:c9:14:b7:5c:f8:cb:06:1b:00:7b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Sep 25 00:01:11 2026 GMT
Not After : Sep 26 00:01:11 2026 GMT
Subject: CN=7346fe568139c886617dd39111540ab6691d221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:d0:e0:6d:f7:03:d9:d4:55:68:b0:d5:5f:
0f:b8:a8:ff:0c:a1:a5:ee:98:06:02:a9:17:72:e0:
8d:03:53:82:47:5b:67:35:27:85:78:33:1a:f0:93:
bf:4e:ff:b5:0b:54:48:58:56:a6:42:d4:9c:3e:85:
2a:e2:b2:4a:08:64:16:50:f2:ec:b7:38:1d:a2:be:
86:50:ac:cd:28:d6:02:78:9e:6d:35:00:9d:f0:ef:
0d:31:13:b4:a2:89:1f:b6:c5:0d:a1:a6:9b:60:2c:
53:b3:8f:6c:67:ea:bb:25:96:da:e3:1f:51:87:02:
23:0e:c5:b3:29:9b:0a:0a:5d:6c:bd:75:27:94:de:
d2:c0:45:89:85:d1:4b:18:8d:8e:04:1e:3b:5e:25:
1b:0b:ad:62:30:9b:b6:c7:19:a7:62:40:fb:89:70:
2b:f6:4a:51:c4:07:7c:75:0a:3c:83:54:49:09:36:
8d:e0:a3:da:a8:a6:a1:b6:92:52:f0:f3:26:66:43:
d1:37:89:54:31:da:38:f8:7e:4b:b9:fe:29:3f:0e:
21:c5:df:e4:dc:89:c7:e6:db:ba:0b:b3:27:8b:27:
40:ad:0e:53:67:08:a8:ec:0e:9c:06:a1:d2:f2:79:
ed:4c:b3:87:06:b2:fb:4d:39:e8:fe:fc:16:88:c3:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:FE:56:81:39:C8:86:61:7D:D3:91:11:54:0A:B6:69:1D:22:1C
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3c:83:80:37:11:20:4c:6f:0b:9b:44:1a:c1:38:aa:2a:67:
1c:71:1a:17:4f:cc:af:b9:94:9a:f1:2e:d5:79:d3:55:45:b3:
d7:95:6a:7f:59:af:ad:83:04:41:a9:cc:8d:bd:11:eb:44:dc:
6b:02:01:bc:44:02:d3:d0:60:15:2a:48:83:e8:52:9a:b6:92:
2e:bf:d6:a9:6f:a4:38:0a:75:97:02:84:e7:ef:87:2f:a1:62:
3c:3b:28:ae:b4:cb:b2:dd:80:bb:33:b3:0c:3e:96:84:a9:8d:
f0:96:38:58:91:7d:7c:91:37:a7:5b:5f:e6:3c:61:17:ac:9c:
73:af:9e:b7:83:72:b3:f7:95:14:e2:b5:68:7d:61:62:62:52:
fd:b8:85:d5:2e:8e:8b:49:0a:de:a2:ec:04:20:63:50:f9:86:
1b:58:6a:e3:e3:16:36:50:46:3a:3c:d2:73:72:ae:8f:60:82:
19:c2:a1:50:48:e8:0e:c3:52:b3:e9:c8:29:9b:02:7a:ab:4e:
74:e1:c3:7e:8c:f4:47:78:4e:a8:40:35:ca:f4:59:06:dc:d2:
a0:78:17:85:69:f4:c2:62:85:b6:33:2b:61:76:bc:83:c6:61:
c0:9f:c1:89:d4:92:9c:9e:ac:c0:c2:4e:a6:96:84:05:f7:51:
04:bf:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:44:02 2026 by rpki-client