Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: umpamerb6j0vW4WLHxAZzSy/jcLaBqyjjWGIS6DNxoE=
Subject key identifier: 73:3A:83:E2:47:A2:91:80:48:AE:EB:4D:7D:25:52:C0:00:09:45:DB
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019D34BF945325C31F9C8BB709CE69137043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 14:01:03 +0000
Manifest this update: Sat 28 Mar 2026 14:01:03 +0000
Manifest next update: Sun 29 Mar 2026 14:01:03 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: UZFtXJ65BoB0SOkp53TKScqqfNou92OLQdm89DPX/oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:94:53:25:c3:1f:9c:8b:b7:09:ce:69:13:70:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Mar 28 14:01:03 2026 GMT
Not After : Mar 29 14:01:03 2026 GMT
Subject: CN=733a83e247a2918048aeeb4d7d2552c0000945db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:a1:60:d3:d5:ee:9b:07:a8:1c:c0:59:c6:
c1:62:53:d2:4b:d4:e4:9e:2e:52:38:d0:77:b7:23:
2c:2f:cc:61:74:fd:f8:b0:68:07:40:bf:ee:db:ac:
c3:42:35:a9:6c:26:11:9b:b8:8b:f8:6e:fa:ca:a8:
f1:e1:7e:cb:51:7d:81:06:9e:e2:a9:65:37:b8:ba:
81:2e:c9:40:cd:7a:13:e7:6f:68:78:e5:5f:fa:09:
9d:9f:21:3e:fa:e7:0e:e2:96:d0:ca:a9:f8:ae:be:
ac:1d:d5:9a:3a:c3:2f:71:52:a1:12:32:7b:1b:95:
34:13:0d:a8:a5:f7:2c:91:53:de:36:99:d9:96:fc:
9e:b4:30:40:4c:67:52:83:48:6d:8d:4d:e1:4b:e5:
00:c8:d7:0d:d3:50:b8:18:8c:04:05:8c:58:97:9c:
4a:48:70:d5:d2:d8:db:2f:9b:3e:79:7f:48:34:af:
6f:72:fd:75:f3:33:8e:c7:84:e1:a5:d2:28:87:ef:
03:0d:c8:e3:3d:a0:a8:23:d1:f3:b3:b1:d3:f4:2a:
1a:b6:03:02:37:be:9b:9f:02:8c:19:78:42:77:49:
35:25:76:c7:a5:ed:bc:2c:15:c3:a6:97:82:f5:c9:
7a:ed:24:3c:ee:5e:df:7c:ea:a3:d6:34:17:a6:06:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:83:E2:47:A2:91:80:48:AE:EB:4D:7D:25:52:C0:00:09:45:DB
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:c6:d6:2a:40:6b:e6:ea:51:0a:ac:6a:b0:8e:65:0f:3c:
f4:e2:e0:94:ca:4b:8d:dd:cf:b2:82:92:86:e2:99:9f:76:2f:
d7:4c:c6:07:2a:5a:60:66:4d:e1:31:9b:44:da:95:2d:aa:3e:
af:4e:b4:cf:33:7f:53:9d:19:53:53:8d:33:64:19:61:e5:40:
ec:eb:9f:07:99:26:41:78:72:f1:4a:8e:33:39:75:47:33:6a:
a2:48:c5:55:8c:38:ca:58:1a:49:d5:5c:1e:57:fc:ea:e7:22:
ac:9c:1f:f4:30:0d:fa:35:93:15:2e:bc:17:df:6a:c8:39:41:
09:de:5d:01:db:e2:27:c5:f9:2a:1f:39:8a:fc:c6:4a:4b:ae:
b1:81:74:5a:2d:09:7a:4f:5b:15:08:a5:74:41:f7:b8:8e:8f:
f4:7d:91:35:51:c1:91:f2:b8:2e:5b:0f:c9:7a:f1:3a:74:86:
59:44:df:19:29:4d:bc:d5:16:df:65:58:52:f7:29:1c:55:5a:
23:18:50:4c:c9:60:90:4c:78:48:3a:f7:eb:d6:04:a7:16:fc:
42:ff:a9:c9:d0:f7:d2:79:43:93:53:6d:36:78:16:17:9f:2d:
a9:36:ae:ba:a6:fe:eb:66:1f:b5:66:03:c5:d4:7c:60:b8:18:
0f:47:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:00 2026 by rpki-client