Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: Upz7ksD1W7K9MFoNzn3PZreSii3vohwXAsqHxKZ9LcI=
Subject key identifier: 2B:56:BD:49:6B:7C:00:20:60:E3:E3:0D:64:98:86:23:89:AA:07:30
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019D2704BE0ECC472162D5CD05B0B885FA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: LCy6JKiMX/qwjIYKlNf1ibo+2oRR66VzYsCODYdNDAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:be:0e:cc:47:21:62:d5:cd:05:b0:b8:85:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=2b56bd496b7c002060e3e30d6498862389aa0730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:49:6f:e9:c6:1d:ca:1b:7b:20:de:5c:ad:
ec:c7:9b:1f:d1:2a:c1:63:a6:71:5f:21:9b:f5:8b:
f5:d4:27:36:1e:7b:39:e2:80:52:ed:fd:42:a0:6f:
17:27:a7:11:fd:b6:46:5f:37:76:1b:84:10:c8:03:
9e:bf:57:d9:1d:41:b3:ab:7c:9e:ad:04:d7:1e:ba:
dc:85:20:e6:63:b0:8b:58:d5:21:0a:aa:fb:e2:2d:
c2:8b:ed:c0:a9:0b:e3:40:b3:4e:78:c3:df:81:22:
10:91:bf:b6:2f:16:6c:7c:f0:1e:18:a1:50:c4:ff:
ae:db:d3:56:df:7e:23:26:1f:84:7e:3f:a8:ad:77:
d7:47:5f:87:a4:35:74:0c:6a:b6:a2:32:3b:7f:07:
05:b7:c1:c6:5b:e7:ba:1d:bc:b2:68:14:3b:2d:77:
e4:07:15:fe:51:96:b2:dd:4c:62:1f:9a:19:b8:34:
9a:0f:f0:52:af:14:d3:84:d2:88:b6:b1:0f:6f:21:
8e:18:57:e6:28:18:d8:c0:49:43:df:bc:1f:f6:01:
f3:b8:5f:0c:e4:b6:cb:e3:59:e3:6b:07:2c:ad:06:
92:d4:9c:f6:38:61:c3:72:33:8e:88:20:4d:74:f7:
db:81:33:d0:ad:16:fb:88:e8:05:b4:b7:5c:8e:2e:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:BD:49:6B:7C:00:20:60:E3:E3:0D:64:98:86:23:89:AA:07:30
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:03:12:f2:7f:4c:b8:df:d5:a4:4b:38:42:86:ab:8f:7c:8d:
e8:80:da:6e:88:8f:67:98:fd:6f:44:5d:e6:15:15:fc:67:3c:
1d:4a:7a:f7:c8:e2:8d:f1:23:10:bb:3b:fe:8a:49:f3:4d:a2:
ad:64:85:23:64:79:94:61:c6:1c:46:d4:07:b6:96:07:94:c0:
1a:87:e7:7b:86:c0:9f:5e:b4:ee:2f:3f:c8:96:e5:3a:36:b2:
a1:cf:24:8d:cc:86:47:35:b3:2b:22:62:09:e7:7f:2e:5c:2d:
b8:d0:18:23:33:af:93:57:9b:f8:f1:dd:33:d6:ff:95:bb:35:
56:ed:f3:2a:89:f5:10:2c:6c:b4:17:49:30:6d:5d:f8:75:52:
44:13:ea:51:c0:3d:ae:04:f2:9b:31:8d:75:40:2e:48:62:77:
f5:ff:b7:91:47:25:8c:ca:5f:7a:92:40:83:f8:16:73:c6:d1:
b8:6c:21:cb:54:58:af:ca:44:91:e0:da:bb:6a:c1:c8:c0:05:
3b:89:56:b6:ea:5e:66:dc:5a:98:d4:47:84:f9:de:31:0b:59:
d5:95:a0:fe:60:99:00:7c:52:ac:98:7d:b1:ff:c9:88:e3:5f:
b5:a1:d9:15:0c:82:4f:dd:dd:8e:a3:b8:3a:eb:3e:83:0f:87:
81:0b:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:57 2026 by rpki-client