Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: AdrALf6h5OBJQuAWkOF7UlOKiKbmAQUU1IoBr0w2Lmk=
Subject key identifier: F7:B0:B0:62:3D:8E:27:5C:63:E8:6F:32:66:B6:08:F7:9C:4C:98:A8
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019F8F47A6C030FA99649DEEAEB7E6680B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 14:01:05 +0000
Manifest this update: Thu 23 Jul 2026 14:01:05 +0000
Manifest next update: Fri 24 Jul 2026 14:01:05 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: DL2FKaeDPpTSN1HctEnXSsxk8Y8pKfZlL91LlhuMl6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:a6:c0:30:fa:99:64:9d:ee:ae:b7:e6:68:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Jul 23 14:01:05 2026 GMT
Not After : Jul 24 14:01:05 2026 GMT
Subject: CN=f7b0b0623d8e275c63e86f3266b608f79c4c98a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:9e:33:cc:32:56:f7:2c:9e:7f:0f:a7:ac:
96:d1:3c:25:30:6d:63:19:b2:4d:05:b8:50:0c:cf:
3d:af:c5:26:2e:4a:7b:78:74:d7:db:7f:07:7a:09:
1a:72:23:94:be:84:ba:29:2b:fb:f4:c1:9d:0a:96:
c3:c1:77:f6:47:eb:9d:76:cf:fa:3b:b3:f8:17:90:
67:b5:73:03:17:31:c1:16:dc:fb:38:1e:10:db:3c:
54:08:fd:b5:e9:fe:db:60:18:7c:10:ad:b4:5c:57:
81:13:8f:5f:25:35:a5:3f:16:95:be:14:a1:b6:00:
34:46:3a:23:b1:c0:7c:d3:bf:d1:47:b7:8e:81:c1:
45:53:dc:29:38:f2:67:f7:c8:de:ba:31:c4:ae:00:
17:1d:1c:97:09:0d:ef:d6:76:52:8b:a2:85:30:44:
2f:86:2a:c4:7f:31:06:2f:f7:f1:49:5d:1c:65:5e:
58:6f:e7:a5:16:a8:9b:eb:16:42:6f:17:6c:0a:a3:
f9:19:7b:37:60:2a:c3:c3:ed:93:9c:41:90:bb:44:
73:1c:69:e5:e9:cb:c9:e4:41:be:9f:f9:42:33:95:
67:b0:27:ae:df:7c:d3:03:c8:fa:fe:ae:11:e5:c0:
63:07:87:ec:a1:7e:38:b3:e3:4c:87:bd:8d:a8:d0:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:B0:62:3D:8E:27:5C:63:E8:6F:32:66:B6:08:F7:9C:4C:98:A8
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bf:34:ba:0c:c8:2b:65:fb:d2:64:31:da:83:83:6a:5f:11:
2d:6d:7d:09:37:c6:10:dd:6a:a4:43:ab:76:0f:43:6e:9f:3c:
7f:2c:a2:fe:47:44:a2:c0:bd:fe:b1:55:40:b5:dc:fe:c9:c1:
83:a0:f2:f2:ed:45:11:b9:da:71:45:06:d2:9c:32:72:aa:d7:
7b:a1:e9:f7:8f:37:cb:90:fc:aa:59:90:83:06:c6:fb:9c:65:
37:da:31:5c:13:36:d4:4f:f2:80:f0:42:ad:1d:5f:24:52:d3:
80:e8:39:7f:48:ba:75:8b:db:49:ed:ef:4f:2c:95:fb:64:d1:
52:c1:36:1b:a0:3b:8a:ab:7b:49:54:fa:9e:75:84:81:07:85:
76:26:a6:35:63:f8:26:87:7f:79:10:df:32:10:ed:8b:f7:07:
31:45:52:21:2e:0a:df:05:d0:f0:93:6a:c8:6b:51:5d:84:21:
70:f8:ef:b3:71:ed:5f:23:e5:5f:27:88:9e:c4:83:70:48:49:
4f:c7:44:b1:fb:54:9f:c6:06:55:9a:b1:41:de:60:d8:f7:60:
33:4a:4a:ac:41:e5:ce:99:ca:16:56:d4:91:92:23:1d:40:8a:
72:b5:e9:53:8c:d9:96:90:1f:1f:50:ab:e2:71:42:70:2c:fa:
ce:ed:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:39 2026 by rpki-client