Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: xrtsHBim9pOLh/z3s30s3KDKTgYE2fb7yEg9kmsMITU=
Subject key identifier: 94:F3:16:DD:96:BE:06:16:40:E0:28:9E:48:FA:70:8A:FD:CE:7F:01
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019E1CB57785BAD8A758E3B2DBCBFE26B969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0CF1
Signing time: Tue 12 May 2026 15:01:55 +0000
Manifest this update: Tue 12 May 2026 15:01:55 +0000
Manifest next update: Wed 13 May 2026 15:01:55 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: lfbb3+IA3qvCcSkGmzQG5vi1+znqWEwh3WLxcwRAymo=)
2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:77:85:ba:d8:a7:58:e3:b2:db:cb:fe:26:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: May 12 15:01:55 2026 GMT
Not After : May 13 15:01:55 2026 GMT
Subject: CN=94f316dd96be061640e0289e48fa708afdce7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:9e:78:e7:b9:82:1c:c9:18:0a:67:0c:19:
9c:29:40:cf:61:77:2b:4d:66:52:2b:1f:c1:64:7b:
5d:a4:14:4c:86:22:63:97:7b:e1:2d:9d:0f:3e:7c:
9e:eb:41:55:d6:9e:21:07:d4:7b:66:19:c6:71:67:
a2:a0:c4:3c:90:57:2c:b6:22:d4:3c:10:8e:76:f5:
cb:f5:b8:ec:d4:b2:e3:a9:0e:e8:b1:82:4c:1e:d2:
9a:f6:da:59:99:4e:78:d8:72:8e:03:94:bd:d0:f0:
72:9d:86:f4:87:f4:eb:eb:43:22:7b:d3:0e:86:13:
92:0f:38:20:e8:cd:8c:36:59:d0:1d:f3:7e:a6:91:
ef:dd:d0:44:48:54:1b:6a:d0:fe:79:cb:e7:68:85:
2f:c3:d0:3c:e7:09:ea:8a:f0:4a:f6:2b:6f:4a:4f:
b3:13:db:d3:fe:b2:ed:d0:f8:11:50:de:87:92:e5:
52:f5:4b:fa:37:69:a9:3b:7e:27:19:aa:8e:0f:c3:
a0:8a:a1:02:81:af:28:bc:be:9d:96:a7:ef:80:ee:
45:fa:b1:65:e2:86:17:f4:1f:b0:ef:e2:02:b5:b3:
bc:e1:06:38:dd:2c:a9:1e:0e:33:31:0c:9a:23:75:
8c:1a:60:57:7c:e8:89:6c:37:42:78:33:97:5c:ca:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:16:DD:96:BE:06:16:40:E0:28:9E:48:FA:70:8A:FD:CE:7F:01
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:60:fc:11:b4:94:c4:73:fa:59:6b:39:b4:45:96:a5:d8:bf:
fa:ca:30:57:f2:56:73:c7:a6:6b:04:fa:a8:69:d5:54:58:71:
51:36:d5:8d:69:00:b1:a7:58:68:ab:fa:10:22:01:50:f9:2f:
41:50:83:04:cd:bc:d6:e0:7c:d8:62:ff:20:9b:1c:f5:86:44:
f0:47:40:d0:db:a2:a8:d7:0a:6f:f3:c8:90:67:a0:05:c5:e9:
3c:4c:af:dc:83:78:15:7b:d4:1e:8e:0d:cc:3c:ec:d7:bb:29:
15:7f:42:2b:b7:f9:3c:43:09:16:ee:81:e6:be:30:68:dc:e0:
68:15:0a:ae:30:42:c1:48:23:d4:73:49:10:42:ce:a0:d0:02:
e0:07:fc:d3:ea:56:6b:a0:bc:78:dc:55:27:48:3e:37:09:da:
4c:c1:5e:95:d4:21:d3:bb:d0:7a:19:ee:9f:1b:06:80:b5:98:
67:5d:4b:22:f8:75:91:a8:44:c3:73:1d:a3:17:69:f0:6e:91:
ba:3b:d8:ee:70:8d:0d:02:b3:ff:8e:c8:16:11:ae:bb:58:90:
0b:28:eb:38:bc:68:01:e8:f8:f8:a4:38:01:4a:54:68:a0:cc:
d9:e5:91:02:1c:2b:7c:34:37:1d:ec:d8:49:e0:4d:a8:37:d0:
af:55:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:22 2026 by rpki-client