Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: ydmvrPr7FQkbH7BiElMpeoYzNzcRRfADDbSy5qOVCv0=
Subject key identifier: BB:8B:43:56:53:0D:EE:36:FE:5F:96:47:2E:90:69:AF:5A:FA:1B:44
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01A0D984171D9FDB6FFC033CE03B06EAB41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 17:01:47 +0000
Manifest this update: Fri 25 Sep 2026 17:01:47 +0000
Manifest next update: Sat 26 Sep 2026 17:01:47 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: VYme4pTJZ+zByUHjrBu5xW69z6G7RHNm1qcCcCDkK8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:17:1d:9f:db:6f:fc:03:3c:e0:3b:06:ea:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Sep 25 17:01:47 2026 GMT
Not After : Sep 26 17:01:47 2026 GMT
Subject: CN=bb8b4356530dee36fe5f96472e9069af5afa1b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:d4:82:5f:fb:ce:b7:fc:f2:16:4b:89:9e:
f9:87:d9:09:88:25:aa:5a:5f:16:f8:b5:07:67:5e:
3c:a9:75:45:1c:1e:20:f8:98:96:87:f7:00:2a:8a:
f8:f4:b2:b1:ab:02:0e:64:d4:8b:01:cb:9d:ff:ae:
1d:3c:27:d2:b8:ac:ab:3f:e0:3c:aa:7f:be:ce:43:
78:b5:6d:0c:b0:8e:95:f6:cf:92:9d:6d:98:2a:cc:
ab:01:ac:8d:cf:de:b0:ec:1e:4e:6f:48:70:28:e8:
43:b8:45:b2:a2:27:45:ae:00:f8:85:10:08:03:30:
d6:b4:d9:61:17:47:71:d2:0e:a6:ee:38:b0:ab:5a:
66:12:aa:39:ec:3e:63:f7:1d:1c:d1:f0:bc:85:5f:
83:39:c5:9c:9c:fb:3b:33:e8:43:59:2d:88:50:27:
fc:83:86:3c:5a:f0:91:fa:10:89:cc:d5:7a:a8:3a:
7e:3c:92:26:e1:74:fb:12:eb:61:9e:0a:de:a6:5c:
ec:58:6c:4c:6e:54:02:f1:66:b4:8f:af:32:6b:6d:
be:1a:b6:bc:4f:52:ca:f8:a6:8a:4b:c7:8a:9f:6a:
bf:d1:19:e0:6a:c6:f7:af:65:e1:ed:bc:d5:fd:fc:
86:b4:40:ba:07:f8:0b:61:bd:db:4b:c3:d7:48:0f:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:43:56:53:0D:EE:36:FE:5F:96:47:2E:90:69:AF:5A:FA:1B:44
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6c:93:8f:1d:21:4f:57:db:89:6b:48:9c:d3:6d:05:7b:2c:
bf:03:c7:af:b1:37:03:64:ae:b4:96:35:98:69:30:12:4e:7f:
5e:bb:74:2f:e1:cf:8d:40:69:56:fe:b6:0b:ca:52:a4:11:d1:
96:af:55:51:ce:04:2c:64:65:0c:20:91:e2:74:c4:c6:cf:21:
1f:46:79:9d:f6:2c:13:e7:6f:9f:30:51:d6:7f:a6:22:4c:91:
dd:29:4c:d9:b0:ea:be:ca:49:21:da:6b:09:5c:ed:2b:11:d8:
f8:09:b0:46:28:02:b6:97:a1:f1:37:22:e6:f4:c9:cd:db:de:
d3:db:f2:2e:fd:41:ac:ba:c7:71:97:0b:7c:25:81:53:5d:23:
67:2b:8d:06:c5:3e:06:a1:0f:a2:ee:44:5a:1d:dc:ad:a6:43:
fe:eb:17:cf:77:4b:6e:d1:6a:f8:35:c8:bc:8d:13:1f:71:24:
33:0f:63:9f:da:bd:3a:9d:33:a9:1b:5f:08:5d:9b:93:6c:45:
64:30:db:f5:15:f7:2a:b1:18:5d:40:90:05:c2:18:22:e3:98:
74:c0:1a:92:01:09:f2:f7:27:7c:10:59:75:f4:65:80:87:f7:
76:0d:9f:62:56:c2:5b:1c:7e:b3:af:01:8a:d3:f7:cc:aa:1c:
f1:74:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:26:10 2026 by rpki-client