Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: JVmFt2bFabywz0nII2DfAUG5MefYHHU7joz1rkCKFhw=
Subject key identifier: BA:70:6A:8E:B8:7E:BC:D2:B4:6A:A1:FD:A3:E2:E7:00:21:40:80:78
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019F8F7DFC535F8DCC4AE8453430623F987A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0DB1
Signing time: Thu 23 Jul 2026 15:00:26 +0000
Manifest this update: Thu 23 Jul 2026 15:00:26 +0000
Manifest next update: Fri 24 Jul 2026 15:00:26 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: hZordY74p99A7uzcnNQl0GeuixIm087gmuKhx0VQjkY=)
2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:fc:53:5f:8d:cc:4a:e8:45:34:30:62:3f:98:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Jul 23 15:00:26 2026 GMT
Not After : Jul 24 15:00:26 2026 GMT
Subject: CN=ba706a8eb87ebcd2b46aa1fda3e2e70021408078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:35:1f:46:1e:2f:0b:1d:28:b1:a7:b4:89:
c3:1f:2d:da:2f:7f:d9:3b:b3:a9:7b:57:dc:93:59:
5d:cb:66:b0:4e:c7:6b:81:37:05:c4:d2:35:bb:0c:
26:80:59:c9:a9:52:7c:fb:4e:bb:22:ab:3a:e8:c0:
31:c1:e7:b0:30:b2:a3:13:7c:3d:e1:99:17:0e:2c:
7b:b6:9e:95:3f:d7:00:13:d2:be:d0:f9:5b:d2:33:
a9:ba:34:d1:81:aa:c1:12:16:69:d6:fd:15:df:b8:
48:e2:6f:0e:29:d2:91:d6:be:24:a2:fb:d4:a6:21:
70:1a:f0:a9:50:87:05:47:02:f3:7a:b7:4f:66:d1:
08:42:f6:72:ed:c7:17:e4:d1:39:73:cf:1d:31:80:
83:fd:c5:c0:a8:3b:37:ab:67:e1:a1:28:40:da:84:
19:d0:07:cc:6b:74:05:ae:24:c0:fd:ef:d0:32:bb:
77:51:bb:6e:5c:51:78:24:9d:95:f7:ce:e0:fe:34:
f6:45:df:58:cb:5c:cc:3a:b6:a6:85:5e:e7:a7:fc:
37:06:33:58:18:23:ce:90:6d:20:45:07:4d:97:90:
60:be:76:b4:86:13:79:73:6a:8e:56:c7:ab:81:74:
9e:95:91:7a:19:c6:5a:63:d8:c2:31:51:9c:a5:b3:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:6A:8E:B8:7E:BC:D2:B4:6A:A1:FD:A3:E2:E7:00:21:40:80:78
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:96:57:e6:27:7f:67:47:9e:0b:72:f6:55:f6:75:ae:6d:a0:
fe:02:ae:d0:81:27:34:33:37:20:99:fa:79:87:25:05:a1:5f:
49:f5:02:12:50:5b:98:d3:5f:f1:a8:5c:f1:b4:e0:21:fb:3a:
70:99:13:55:54:01:3a:60:c5:d3:7c:94:90:01:2b:94:9c:22:
41:cd:09:61:b5:61:99:37:b8:91:91:72:0b:3c:a7:2f:ba:5e:
fe:f9:94:2d:bc:5a:98:a3:fb:7f:d3:db:2a:2b:18:ce:84:cb:
f6:99:11:bd:4e:fc:b4:4f:07:df:38:49:36:6d:5c:a5:93:2a:
13:e5:2a:3a:f2:cb:9f:3a:a7:57:83:b6:70:f4:6a:f1:2e:d7:
3a:f2:1e:47:90:58:2b:8d:63:06:45:fa:32:5a:45:15:64:19:
40:ed:87:d1:ce:06:8f:ad:96:64:c8:4a:e5:5a:5e:3f:d0:b1:
c1:fc:95:08:06:26:4a:4b:f3:ba:6d:0d:1b:5f:64:d0:38:b0:
e3:56:5b:22:36:94:a3:c4:56:55:26:0a:09:95:e3:ff:8c:1f:
d6:02:68:dd:f6:da:52:ed:fa:97:99:fe:35:6c:52:f0:a2:96:
ce:fe:2c:e9:66:ba:1b:b0:6d:be:74:72:61:b3:3d:2f:3d:94:
cf:be:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:04 2026 by rpki-client