Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: KcBoKHBrKEKfyba/Q3hQbdaU367ZjpenpwsYRFjWwNo=
Subject key identifier: D5:66:5A:A1:69:16:8D:9F:3C:03:68:C2:7D:D5:90:A6:62:DC:38:37
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019E1E6CD3A3373EF796F236F19F35966681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 23:01:48 +0000
Manifest this update: Tue 12 May 2026 23:01:48 +0000
Manifest next update: Wed 13 May 2026 23:01:48 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: kHodBwrEEgqNeLHhKce4Lq2lv2G1+1bjVduUqHUoRds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:d3:a3:37:3e:f7:96:f2:36:f1:9f:35:96:66:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: May 12 23:01:48 2026 GMT
Not After : May 13 23:01:48 2026 GMT
Subject: CN=d5665aa169168d9f3c0368c27dd590a662dc3837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:d7:73:fa:bb:15:f6:0e:3c:10:bc:cd:ea:
37:1e:b7:80:1a:f1:f4:21:5b:8c:b7:d9:5f:15:91:
8b:0d:f7:97:6a:90:32:d1:70:8e:92:53:db:fe:7d:
98:ad:68:0d:fc:60:0c:c2:e2:67:89:c4:cc:d1:43:
b3:95:98:43:7d:08:e2:05:b6:b2:57:d3:7e:c9:a4:
41:be:d4:e6:3d:31:23:8f:64:c0:79:a4:43:6e:e6:
a1:f5:09:19:83:b8:b2:9d:c7:4b:12:6b:93:49:a4:
d6:70:e8:81:ca:57:a3:3e:5b:24:15:c5:01:21:3a:
25:a9:c8:31:4a:b9:7f:c3:01:74:ce:e3:12:ed:bb:
9b:5a:9e:72:3f:4a:03:bb:09:45:3a:b4:59:10:d0:
67:ce:f7:0e:01:5e:87:14:2b:81:af:25:bd:4a:08:
05:e2:1a:ce:ed:1e:a0:5c:28:e5:8c:ce:50:b7:a6:
6e:24:a6:1a:56:dc:48:d4:33:44:b7:ad:24:2b:18:
9e:e5:7f:f1:5e:45:25:57:fb:cb:21:8f:28:c2:7f:
4c:81:f7:e9:cf:47:0f:51:bb:72:f3:b4:e3:8a:4e:
25:a6:96:f1:ee:66:01:f4:93:98:27:69:57:89:03:
70:08:82:28:f3:8e:a9:6a:67:c6:f5:2d:97:9e:ff:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:5A:A1:69:16:8D:9F:3C:03:68:C2:7D:D5:90:A6:62:DC:38:37
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:63:a7:3a:c0:7f:d6:3e:ce:87:7d:3d:d4:6d:c5:1c:82:
58:fa:57:0a:43:93:af:80:0e:22:0f:04:93:be:8b:a8:17:f3:
4c:27:9d:e1:39:28:0a:82:1c:e0:70:b5:a3:a1:08:92:3a:9b:
bc:92:36:a9:24:56:b1:7f:f0:39:b7:64:17:9e:b5:2a:8a:a2:
58:9c:59:95:54:da:4f:b3:b3:59:aa:b2:a5:49:70:20:6c:53:
a2:1e:27:d2:da:59:09:36:98:e8:c1:6c:23:f6:32:ab:af:22:
32:5b:5a:bb:d9:b4:48:22:92:bc:4a:3a:fb:78:d4:2a:b6:bc:
a0:c7:47:ca:1c:65:21:03:cd:82:73:77:b1:92:38:8e:79:2d:
81:55:68:03:4e:ef:39:b4:e7:83:68:14:39:dc:eb:59:b7:75:
2c:5b:73:60:8e:e7:88:1a:b1:38:54:1a:d2:f8:e5:6b:bc:63:
5f:61:89:8e:1e:bf:a5:9a:ff:a1:97:c1:d7:14:ae:de:af:d4:
4d:6f:0b:cc:1d:95:34:0c:0a:b8:99:26:8f:e8:2a:ee:92:8b:
a7:64:e5:d8:1c:40:fa:04:06:97:08:c7:15:64:c5:70:92:1e:
ab:98:59:82:7b:45:d7:18:fc:91:0e:1d:eb:d9:3c:3f:3a:56:
71:6f:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:39 2026 by rpki-client