Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: Fxz9zm9FMU2G3OmOrimw8Xdvv5wHY2vVT65BAFKQv+0=
Subject key identifier: A7:30:84:17:76:7B:10:8D:DA:54:AE:7B:C5:A1:71:1A:8B:02:30:D8
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 019D37891D3112A1CC7DBA00BDF6C5E4C03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0CCB
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: 3lX2VYE/740m0BW4r6SHPg3XEN7SaS5f4DcZfsXAFhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:31:12:a1:cc:7d:ba:00:bd:f6:c5:e4:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=a7308417767b108dda54ae7bc5a1711a8b0230d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:47:4b:81:d7:94:3b:85:0b:94:70:a6:1b:
9c:47:c0:27:07:c2:c1:ad:06:85:68:01:e8:b3:84:
a8:e6:a9:b0:b3:46:31:30:c8:ac:6c:5b:d5:4a:1c:
3d:66:46:d4:51:55:25:21:e2:6b:20:8c:6b:17:78:
b8:dc:49:4b:21:e4:40:43:82:08:9b:f8:80:cc:c3:
13:81:96:f3:cb:a1:b1:82:41:24:bb:db:b3:c3:8c:
5d:df:e8:9b:f9:4d:4d:8f:0c:00:c9:05:98:b8:1d:
ba:3f:d9:03:36:44:e1:81:dd:40:af:62:3e:f9:b1:
62:fe:c4:6a:f4:f3:ea:51:a1:a5:84:89:28:45:a3:
00:11:b3:b3:81:1d:1a:ab:05:71:b7:a8:ec:f0:44:
1c:f1:29:d4:9f:60:bd:c2:a9:36:68:bb:29:ef:03:
e8:20:d0:b8:b6:4b:31:c4:9a:6e:97:99:8c:b7:98:
66:dc:78:53:4a:8d:ce:6f:56:ef:87:a2:df:57:97:
bf:2f:f8:8c:0b:fa:d3:e0:16:1d:01:ad:9c:7c:be:
7f:8c:a7:aa:bf:5a:46:4f:58:26:9a:63:c4:07:a4:
30:02:eb:eb:32:d4:db:c1:e3:70:6e:d6:a2:38:59:
dc:1b:b4:f6:98:18:2a:13:3f:4e:85:0b:ac:ea:7a:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:84:17:76:7B:10:8D:DA:54:AE:7B:C5:A1:71:1A:8B:02:30:D8
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:56:54:e9:02:2d:8e:20:e7:d1:d8:91:c3:48:27:b6:39:d9:
3e:6a:20:af:e1:8b:bc:5c:a4:08:5a:38:71:fe:07:ea:f2:af:
a4:98:25:34:cc:bb:fe:dd:78:ca:85:08:ca:b1:cb:6e:8d:ed:
9c:29:33:76:e4:2f:78:2b:30:37:7f:29:3a:f2:12:b9:70:9c:
cc:97:71:52:14:de:12:66:b8:1c:59:47:eb:81:18:14:f7:48:
18:00:26:6c:3e:9d:69:ca:e1:14:4f:0e:e9:8b:32:2d:6c:f1:
60:d4:69:7a:2a:b8:99:09:f8:6d:5c:20:da:9d:5e:c7:d7:97:
17:dd:9c:f3:4c:d9:31:b6:0f:62:83:f3:6a:ad:f8:6f:6c:11:
8e:13:95:e7:e5:4d:9c:4b:90:91:82:eb:9e:de:25:42:94:4d:
a8:04:0c:19:3d:3e:8a:bf:f0:5e:a1:a7:b4:ff:f4:56:b7:0e:
a0:da:fb:c0:ee:62:a5:bd:b3:6e:8a:9f:6f:04:b8:ab:8b:db:
e6:02:b8:00:7c:74:f3:5b:a9:82:11:11:a3:e4:1f:3f:28:45:
09:4d:5c:fb:d7:58:08:a2:a7:c7:8d:ca:b8:22:32:3e:cf:8c:
ec:fe:bf:77:98:2d:3a:11:af:e6:32:f6:49:c3:b8:36:4e:84:
5e:57:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:58 2026 by rpki-client