Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
File: rbxC2eQutyb4mwpU4tK2dclLx_Q.mft (raw, json)
Hash identifier: J+WTP+rM8U7Z50vQhNE60JXyxaeyLWIpUfprM2bzB5M=
Subject key identifier: 46:15:8F:E9:32:0F:55:19:F5:16:BF:6D:EA:29:4F:6B:E0:22:27:E7
Authority key identifier: AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
Certificate issuer: /CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Certificate serial: 019D375238D3172D72CB6236D200162E09AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
Manifest number: 0243
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: rbxC2eQutyb4mwpU4tK2dclLx_Q.crl (hash: Ia8DI6CxG61Ix0n0Je+etPr/T/p5a5at3v8rCrwViWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:38:d3:17:2d:72:cb:62:36:d2:00:16:2e:09:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=46158fe9320f5519f516bf6dea294f6be02227e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:f0:e1:80:d3:c5:c5:e6:4b:83:41:d0:d8:
a8:4d:1b:59:bd:1a:4c:1a:7a:9d:cf:48:fa:da:04:
bf:07:27:b5:3d:9d:76:87:cd:24:96:c6:42:e8:a9:
5e:51:ce:da:f0:3c:e6:f9:7f:93:a3:3d:5b:4e:2b:
e1:ff:e0:63:ae:02:63:39:49:3d:8f:1d:f6:b8:49:
2c:34:b7:9a:9b:34:7a:af:37:57:ff:66:6c:04:d8:
76:8c:84:5a:e6:d2:0e:b2:42:40:55:39:51:e7:d3:
e4:0e:99:a6:ed:a0:83:84:3b:85:71:ea:fe:c3:d9:
83:81:78:66:8b:7c:51:7f:91:1d:67:02:d6:b7:1a:
92:a1:50:64:fd:c4:d9:90:a6:b0:44:6c:10:37:cb:
f7:97:96:c4:e1:1e:3c:e3:12:9d:8d:6e:59:a5:e8:
23:ce:26:cf:09:bf:c3:c1:fd:da:79:35:f6:21:50:
26:71:b2:d3:45:95:50:00:10:72:79:60:cf:49:21:
58:8c:ef:59:c1:49:c5:fb:25:94:8d:af:fe:b4:23:
71:75:c7:5a:6f:b5:fd:cf:41:3d:22:85:87:ed:49:
a6:cb:fb:86:d2:5c:9a:da:82:88:e8:b5:2e:d7:bb:
e0:c8:24:0f:fa:80:bf:0a:ae:c7:39:4d:b1:40:91:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:15:8F:E9:32:0F:55:19:F5:16:BF:6D:EA:29:4F:6B:E0:22:27:E7
X509v3 Authority Key Identifier:
keyid:AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:20:4f:66:23:53:5c:d9:2b:85:b3:17:b8:e6:45:1f:86:9a:
c5:21:24:23:50:18:8d:59:67:23:6b:8c:5a:19:6c:11:da:fe:
bd:27:7c:5c:d3:26:1e:bf:f9:2e:5d:7b:4b:f8:ab:7b:9a:de:
c2:b4:9a:d5:c8:df:31:cc:28:a4:01:05:41:b3:49:99:be:a1:
9a:97:b4:12:a4:93:8b:6b:d5:aa:fc:52:7e:a0:b5:9b:9e:81:
84:14:73:76:7e:6e:d8:35:28:5e:48:51:16:83:a7:79:00:fa:
c3:46:e4:49:f5:3d:e5:ca:fa:eb:f7:77:f9:cc:b1:24:34:4f:
a8:f6:b8:67:d4:b4:55:ec:be:fb:43:6f:32:58:3c:59:07:39:
3f:14:6c:4e:a7:f5:94:3e:1a:eb:a8:d4:45:c1:92:fe:c7:7f:
82:14:ac:d0:19:f7:c4:92:40:64:5d:d0:83:e2:3d:13:14:c3:
c6:6a:69:33:65:cc:83:bc:b1:0d:59:34:3b:53:94:20:02:5d:
27:3e:15:b3:bf:29:24:8c:ee:91:13:12:8b:39:6c:2f:6b:fa:
3c:2c:fa:c4:05:c0:c1:4e:45:20:46:89:8a:69:eb:39:12:3f:
d5:b0:d5:7f:4c:93:7b:0a:62:86:1c:79:59:23:fb:b9:d8:ed:
13:2d:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:38 2026 by rpki-client