Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: f4ncAX7a3Q2yN/N4eXz90IQCEuX98/GmN7VMpyAMCHY=
Subject key identifier: B5:CF:49:95:77:9B:C9:E6:C2:EE:40:E8:85:41:BF:19:D5:9B:D5:CB
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 019D37F711BA4EF0A16791FE747C34895F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: t7FaKjdfCxKyMr5COWiaXFC5C40fxlwc22ec0d1/W7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:11:ba:4e:f0:a1:67:91:fe:74:7c:34:89:5f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=b5cf4995779bc9e6c2ee40e88541bf19d59bd5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:c9:e4:38:fd:0c:4c:fa:cf:0c:d8:b6:52:
6f:4f:b8:5d:29:87:f1:ba:9a:21:27:d7:e0:e1:49:
e1:9d:d9:a3:28:a0:fb:f2:de:3d:68:05:a4:b8:ff:
50:1e:c8:10:d3:63:ce:7b:9b:c6:26:28:be:1d:fe:
c3:fa:31:3e:95:d7:60:8a:c1:f3:24:0f:30:4d:6b:
67:5a:82:82:77:10:a0:cf:c5:fb:b6:81:16:c3:58:
4d:14:0c:34:5a:c3:3a:57:91:72:ae:86:5c:9e:e9:
f8:89:ad:94:00:08:87:b9:78:f3:01:61:06:39:f6:
48:e3:25:c0:1c:64:74:2d:b4:49:65:e3:76:9b:ad:
7b:cf:c0:b6:4f:98:4b:92:fb:e0:1e:04:43:65:c5:
82:95:3a:7d:7c:5e:38:2b:ef:e9:fb:a6:e1:d2:6f:
78:5b:4c:24:b1:92:ed:a8:9a:cd:28:84:d8:ec:66:
10:7a:39:34:ce:90:67:4b:f7:54:0a:92:4e:47:24:
c5:d8:a1:05:dc:30:a7:62:9a:d0:3b:e5:24:a5:74:
7a:5e:fd:b4:fa:7d:ac:27:10:b2:a1:8f:e8:3d:4f:
a3:5e:72:0a:a0:da:7b:c6:c3:cf:ea:d5:72:9b:4e:
5f:3c:28:3d:fc:b0:2e:4f:b7:e2:d5:e1:36:de:15:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:49:95:77:9B:C9:E6:C2:EE:40:E8:85:41:BF:19:D5:9B:D5:CB
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2b:9f:ae:85:0f:17:38:3c:53:a5:2b:75:8f:2d:a1:f8:f0:
c7:62:5b:45:0e:e5:08:6e:8c:c3:57:c1:2f:28:d2:8d:e2:d2:
be:a2:ec:56:53:a7:57:52:74:2e:a3:fe:41:8b:9a:fd:71:c9:
af:9e:8b:4c:10:7e:70:eb:64:ab:61:ab:ff:b7:01:9b:31:b4:
f1:b8:1a:47:98:a8:17:46:28:f3:b2:27:d1:2d:95:28:d0:44:
03:ca:03:96:bb:53:ff:b3:a1:5d:2b:d7:f3:28:a5:4f:17:6e:
ff:0f:13:b9:7f:ba:61:0e:8e:99:62:8a:33:cc:9d:52:a4:5d:
82:2c:d9:e6:64:c1:66:7b:52:b9:48:35:16:78:03:8f:10:27:
96:2e:e4:74:c5:76:fa:5d:2b:34:fb:0c:98:d7:6e:1c:62:bf:
d0:26:e3:b8:1e:37:eb:cf:38:89:00:3d:5f:e4:f8:bc:37:c1:
95:b5:a9:bb:79:f5:c7:52:d9:93:81:8d:ce:c4:6d:6f:5b:1d:
f7:66:56:0c:07:28:7a:ac:c9:5f:42:7e:1a:b7:12:38:73:15:
5f:30:d1:5f:ca:a4:90:17:dc:b7:aa:c2:ac:96:2d:57:35:d6:
44:26:2b:71:e3:2f:b7:0c:51:a3:09:09:3a:a7:86:eb:f9:e4:
40:c0:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:03 2026 by rpki-client