Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: X8/UeIiF1ulDPlheuFELbnNL2ahEdCJ38G088JBCI7g=
Subject key identifier: AB:85:27:B4:1F:F9:FB:91:34:44:89:26:C4:44:79:0C:6E:61:02:B3
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019E30DFF0730E4DE29E8062B833AA93C9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 13:00:42 +0000
Manifest this update: Sat 16 May 2026 13:00:42 +0000
Manifest next update: Sun 17 May 2026 13:00:42 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: oxIN2rENeDF9xS3lVvBQEYbluCW+RqMx7wFBO67qGcg=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f0:73:0e:4d:e2:9e:80:62:b8:33:aa:93:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: May 16 13:00:42 2026 GMT
Not After : May 17 13:00:42 2026 GMT
Subject: CN=ab8527b41ff9fb9134448926c444790c6e6102b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:03:8b:d8:9f:ba:66:bf:8e:19:53:ce:a4:
09:62:e0:6e:67:80:ec:00:a0:5f:74:70:e2:7d:c9:
b0:c6:03:70:83:0f:47:66:1d:a3:c5:ee:bc:41:86:
91:0a:c7:a5:f4:c4:e6:ab:e4:32:ef:31:97:4c:e3:
c0:6d:0d:a5:6d:14:aa:0e:11:55:fe:58:26:9d:f4:
78:37:78:30:01:14:b9:fb:58:ba:45:1e:8b:9c:6d:
94:cc:a3:a5:f3:44:e3:d3:0d:5a:02:52:ef:db:0f:
e8:0c:24:63:21:ab:62:10:f2:c5:01:82:17:04:46:
aa:72:39:8f:11:4f:b4:fb:3d:f2:70:05:79:b7:8f:
73:44:21:97:f3:5e:6f:4b:cc:89:a9:46:11:7b:25:
c9:5f:dc:e6:04:5c:ba:15:15:5c:8f:41:fa:92:f8:
27:73:65:bc:51:e3:6c:5e:94:93:b5:b6:79:d6:32:
4e:69:cd:e5:b4:a3:c7:2b:f8:ea:84:88:39:41:13:
be:81:ab:5a:b9:d1:0b:4f:d9:6a:41:dd:54:3f:f4:
c8:83:21:40:12:2f:6e:be:2c:0b:ad:74:cc:33:23:
02:34:d7:f0:bb:b2:c5:6c:53:fa:fd:1c:9a:4f:cf:
1a:a0:9c:e2:2d:dd:70:72:27:5b:86:8c:8a:8f:59:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:27:B4:1F:F9:FB:91:34:44:89:26:C4:44:79:0C:6E:61:02:B3
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1e:39:c6:28:1a:40:f5:67:c5:ba:75:37:a5:a4:58:96:47:
54:d6:cb:5d:51:29:12:27:1d:45:a9:fa:64:21:33:75:7a:4b:
97:c3:ef:f0:b0:52:9b:8f:7b:3f:73:b2:3d:a4:78:8b:10:ff:
48:2a:c1:ed:a6:5c:a4:ac:5e:ef:20:a5:bc:a3:4a:bd:1d:04:
cd:f4:97:c7:f7:2b:a7:0e:3c:db:64:99:6a:e3:c6:91:fc:21:
d1:b6:86:8a:bf:a2:85:20:42:cc:b2:1a:be:c4:3a:3c:02:9f:
79:35:89:2b:3f:65:90:e1:27:ce:77:96:6c:19:d1:19:43:9b:
50:bc:97:fe:82:13:ba:d9:bd:d5:00:25:4d:83:15:aa:b0:c5:
6f:28:48:07:b9:fe:04:8e:6f:b7:a1:cc:49:49:4f:37:04:16:
61:26:3e:67:3e:e8:2f:4e:50:c8:54:52:cc:74:af:38:99:1e:
75:ea:e4:ce:6d:16:44:d1:65:dc:72:e7:ca:16:14:bd:a6:2b:
b7:f2:14:1a:fa:53:e6:f4:9d:6e:a5:62:00:9a:73:91:fd:5b:
f4:3f:83:a0:81:38:9c:bd:bf:7f:1e:48:e1:ad:53:23:ff:ad:
a0:cc:b5:b7:57:d8:31:8c:56:f5:b1:cc:70:48:37:ba:aa:86:
c2:15:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:24 2026 by rpki-client