Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: adnl8NtI+8tpQ8m9kNE4Y44lKNN4G/VtfehPopdJekA=
Subject key identifier: 69:38:2B:72:1F:3F:70:F2:47:56:3B:99:AF:1C:F5:05:3B:16:1D:F0
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 01A0404DEBAE2C6F0190321829A938E81BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: 0238
Signing time: Wed 26 Aug 2026 23:00:43 +0000
Manifest this update: Wed 26 Aug 2026 23:00:43 +0000
Manifest next update: Thu 27 Aug 2026 23:00:43 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: 6j3NlNS0UUFlkkwHOzvWa+7DUnnERfqI1eKc8GuoYNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:eb:ae:2c:6f:01:90:32:18:29:a9:38:e8:1b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: Aug 26 23:00:43 2026 GMT
Not After : Aug 27 23:00:43 2026 GMT
Subject: CN=69382b721f3f70f247563b99af1cf5053b161df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:48:b1:d2:3e:ca:a1:2b:e9:a5:79:25:86:
8a:78:70:e9:bc:92:43:b3:1a:e6:bd:04:56:5e:0c:
01:49:bd:7f:3d:a7:ba:a3:f1:9f:51:46:d0:6a:a3:
46:bd:1c:3b:e8:79:96:70:f3:73:2e:08:b0:1f:0d:
2f:82:1c:1f:db:c2:ce:b4:42:46:1b:9d:00:6d:c0:
d6:c6:63:46:5e:55:64:ea:a4:f2:12:f2:78:ae:0f:
ec:61:1e:eb:12:db:23:4a:e3:81:eb:fc:60:0c:21:
84:de:c0:91:89:64:39:c5:5a:8e:23:6f:7b:b8:10:
9e:db:71:ed:d9:b9:43:d0:03:0a:ef:54:f3:2a:00:
f3:70:59:9d:ff:97:e1:4c:02:f8:bd:a4:ee:16:23:
78:13:b1:75:9a:45:46:40:bd:b0:76:88:8b:64:60:
30:33:cb:76:05:64:b3:44:e1:48:1a:b9:5e:f5:32:
fc:d9:40:93:61:e5:bb:0f:e2:79:40:9e:3d:96:0e:
42:d1:c3:2e:ec:42:e7:1b:ca:88:ea:9d:74:09:ea:
fd:b5:a7:27:1f:9b:07:4a:67:2c:f3:66:39:44:a3:
f3:f5:91:fa:0f:f0:d3:41:21:3e:fe:85:fc:bb:d1:
bb:44:24:43:78:21:70:f6:90:e7:3a:b4:a6:8e:a3:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:2B:72:1F:3F:70:F2:47:56:3B:99:AF:1C:F5:05:3B:16:1D:F0
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:65:7a:5c:f3:6e:38:2b:b6:a6:90:da:44:f7:85:69:1f:
cf:66:2a:e4:0c:0a:b0:35:e8:51:0a:fa:c6:4e:64:fe:d4:ea:
ae:9d:e3:dc:7f:ea:0a:e5:1e:91:fa:80:9c:1a:ca:b2:60:36:
db:e2:98:11:b2:d2:2a:83:b1:d7:15:19:7b:84:60:dd:55:7f:
ce:f3:45:57:25:20:9e:2c:79:ef:d0:2b:46:11:7a:2c:90:c4:
db:ae:fb:ed:8f:93:c3:fb:f2:b5:ba:ba:11:4e:d7:8c:ba:6b:
20:16:3b:c7:1a:eb:1f:32:72:79:3b:0c:ad:c1:65:25:30:32:
f3:a3:81:c4:b3:5b:bb:66:fa:48:2f:c9:0a:9e:16:45:84:05:
3b:d8:ac:50:6c:7a:e3:65:a7:6e:55:bb:f1:cd:e0:05:9a:ef:
b9:e9:08:99:f2:6f:00:8c:a9:6d:01:fb:20:c8:ff:11:06:6c:
39:37:e2:d1:40:9a:99:ce:0a:e9:1a:8f:13:6f:e4:84:1d:81:
0c:48:b6:4a:f4:8c:1a:7d:51:b0:38:48:48:d8:26:ec:4b:80:
62:fa:29:d9:a5:9b:c4:dc:a4:90:b5:93:a0:84:2f:76:d9:de:
d0:32:32:ea:8a:99:87:56:ff:2f:50:b2:2e:e0:15:df:ec:d4:
e9:fa:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:30 2026 by rpki-client