Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: yilBdwmq/YAfIzBZzcGUZ1N2kT3tQGi6bs0G4FvA6l4=
Subject key identifier: 21:79:A0:BA:E3:6A:56:8B:5A:5C:48:AA:A5:77:DC:BA:4D:C1:83:03
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019D39AEE09DCE2F04DA400A6931F79C5605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 13:00:54 +0000
Manifest this update: Sun 29 Mar 2026 13:00:54 +0000
Manifest next update: Mon 30 Mar 2026 13:00:54 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: SyUoZnMYrDpbOdWUqPfx30Iv5zLqyNqAKRyzkoGFinU=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e0:9d:ce:2f:04:da:40:0a:69:31:f7:9c:56:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Mar 29 13:00:54 2026 GMT
Not After : Mar 30 13:00:54 2026 GMT
Subject: CN=2179a0bae36a568b5a5c48aaa577dcba4dc18303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:dc:c0:34:c1:ca:72:bc:a8:2c:70:de:91:
cc:1f:49:29:c9:6d:11:87:0f:f1:03:92:32:2e:8d:
c6:ee:c2:3c:e9:b2:5f:49:e8:5f:49:10:81:1c:17:
09:41:e7:95:2e:f7:c9:a8:f0:55:2e:64:43:94:5d:
3e:85:59:fb:23:b4:5d:ab:55:b8:cc:fd:52:54:98:
3c:25:e1:98:fd:61:35:24:f1:f0:8d:3d:94:20:ad:
51:0f:53:fd:c7:36:f4:6f:f5:0d:db:19:78:22:fe:
4c:66:db:95:fc:51:a9:4e:58:d3:72:b4:5b:7d:90:
ee:ab:59:df:23:c8:22:6b:b2:15:61:46:1f:28:9c:
a8:46:36:25:ec:3d:3c:63:18:85:36:bb:cf:bd:2e:
2a:20:f7:44:b0:12:08:0c:b0:79:c1:b6:b8:67:18:
c0:cb:4a:ea:4c:c5:6d:c6:b4:e6:7a:4c:4d:ac:8a:
82:6b:d2:30:35:b8:46:c9:48:f7:a9:42:6c:04:c2:
9d:a8:a3:cc:cd:f8:ab:71:8c:99:b6:80:ce:b1:99:
f6:0e:38:3b:fd:9b:f2:bd:27:33:65:8f:e3:22:5d:
6d:d4:31:20:89:d1:48:d7:62:a3:e6:ba:d1:7b:ec:
8e:fa:80:76:6f:62:59:64:ad:68:6d:76:cd:46:02:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:A0:BA:E3:6A:56:8B:5A:5C:48:AA:A5:77:DC:BA:4D:C1:83:03
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:97:be:1b:8d:63:91:03:f0:43:78:06:42:62:34:8b:73:43:
17:72:fc:bd:40:36:7d:2a:8c:28:28:14:dd:05:c5:95:0c:29:
5b:a8:c5:04:05:95:01:e3:9a:c9:ca:05:db:33:96:9f:b6:00:
71:b3:48:ff:0f:1a:01:01:a5:72:bd:7c:de:62:aa:c5:f1:c7:
b1:c2:56:53:39:d6:e0:b4:8a:bb:8a:f3:e0:68:8c:27:7d:cf:
80:25:63:b9:5a:a4:44:2a:02:9c:47:81:d2:05:ae:91:0d:98:
b2:9a:55:4d:0c:9a:eb:30:b4:c9:b7:7b:93:6e:14:80:0e:6e:
38:32:e0:0d:55:78:2d:ef:6d:09:6c:14:0a:30:96:7c:1d:90:
47:c7:c6:13:c1:24:27:05:79:83:9c:b8:22:d5:d7:e1:5e:99:
5b:54:9d:f1:68:92:b0:38:22:47:16:ea:d1:37:c5:c4:4e:f4:
2f:97:24:4c:5e:a1:22:39:7e:31:f5:e8:1e:73:ce:ed:37:be:
15:6c:2a:63:45:96:2c:1f:c8:86:23:ad:0c:49:84:99:3f:b5:
ad:11:e0:08:87:a1:c2:bd:8d:84:5a:5f:cc:c6:a5:4e:ce:fe:
64:60:57:4d:30:4f:74:16:89:bc:ac:df:de:8d:bc:4d:74:ad:
4e:58:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:12 2026 by rpki-client