Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: 1CwRAg6f7m0enzXjZED10ijf+ZfXn6RmxWDMOWIIbgQ=
Subject key identifier: 74:34:A7:8E:84:A7:E4:B8:96:AA:4B:CE:31:C0:ED:31:AD:06:B1:E4
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019D37F741885E07F37739DA485089ABF0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 0963
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: 95LNelvbvLFUYAJ1gS_rBtJtHic.roa (hash: db9YjHMqlxf9CY0aL1oyvS+hqxV9ZfWgOQGqx8Y1J3w=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: N92IU8CXoqtdHnYiGJ505SwUO8ffIrrR8XwhFQFNi2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:41:88:5e:07:f3:77:39:da:48:50:89:ab:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=7434a78e84a7e4b896aa4bce31c0ed31ad06b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:a9:04:d7:14:d6:ce:05:f8:6d:3e:8f:5b:
63:39:13:81:25:53:be:0f:45:5c:df:7a:de:1e:da:
9c:d9:29:e2:3c:6b:56:8a:9b:31:04:5d:1a:2b:38:
bb:30:bf:e3:a9:53:64:56:87:34:1f:b8:22:3d:59:
15:b4:8d:1a:e3:a7:5b:30:49:cf:27:be:cb:21:70:
a8:40:17:8d:58:4c:f5:06:eb:a8:50:c6:e1:41:05:
63:3b:d8:75:9a:ac:94:20:68:5f:e5:31:0a:49:ec:
eb:61:40:67:7f:35:f6:2e:9c:94:f5:d1:fe:6a:df:
e9:2c:a1:39:a2:19:b0:31:31:fa:b5:42:7f:bb:6e:
03:e5:f0:b1:31:33:2a:fa:67:27:3b:20:ca:1f:50:
a7:42:29:95:ea:77:08:54:e3:24:1d:52:d5:ab:02:
0d:05:35:93:69:cd:40:fd:1b:b7:70:57:8e:b4:48:
a0:bb:9f:0d:16:b4:15:80:fa:65:af:20:38:d1:af:
9e:88:be:d8:31:cd:ca:23:aa:cc:8d:43:ca:92:08:
a8:e7:8f:a0:00:d6:ef:9c:4c:50:76:42:67:5c:5e:
62:b2:a3:43:63:8c:e4:e4:55:bb:00:43:33:a9:e1:
12:9b:38:d6:8f:37:b4:28:f2:e6:0a:3c:de:81:c4:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:A7:8E:84:A7:E4:B8:96:AA:4B:CE:31:C0:ED:31:AD:06:B1:E4
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c3:df:f9:38:c9:f5:ff:bf:22:fb:c7:7e:b2:c1:78:41:77:
cf:2a:d3:0f:00:c3:f1:ca:17:26:50:c2:a7:33:25:80:d5:4b:
db:ec:6f:1b:70:43:6a:a2:12:d2:58:d7:06:d1:f7:7a:d7:83:
32:26:19:ce:03:9c:a4:a6:9b:ff:14:8f:27:c0:ac:e5:30:9c:
2f:ef:d5:fa:f6:a3:ac:b2:d5:fb:0d:d5:73:44:81:4a:fa:e7:
4f:9a:72:07:13:f4:a1:19:09:a9:ca:88:6e:c5:72:cb:9c:53:
95:9a:29:0f:80:ce:e4:40:71:23:a8:ad:8d:54:63:a6:3f:07:
b7:91:d2:3d:03:89:18:70:a5:53:e9:00:3d:98:18:a6:ea:96:
9d:62:d4:0b:55:2b:af:18:1f:6d:94:af:75:6f:bf:03:8f:f6:
9b:02:62:4a:5b:01:19:72:10:b8:d3:58:f9:34:1e:c2:f9:c0:
7f:48:d9:4c:b9:fb:3c:47:58:00:ae:34:c2:7c:d6:2d:07:73:
90:c7:4e:fb:f3:6b:9d:fc:3c:2e:b9:96:90:82:9c:33:d9:9a:
d7:52:a4:6f:da:72:c8:1b:0b:e0:5a:f2:14:d7:16:6f:c7:41:
e7:58:80:a8:44:3d:ad:71:b8:f2:f7:5d:f2:6c:a8:10:62:ba:
89:47:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:38 2026 by rpki-client