Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: UQLgMKvJynDo2t4/PMB2uviz72k9Zp3AAbilXrdIPCI=
Subject key identifier: 9B:C9:26:C9:7E:48:B2:6E:E5:16:2D:53:94:31:63:A5:70:BE:9A:BE
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 019D38D2C46290B11F248C560AB8BF5AAA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: h4F/TOsa4PxCgGk3eVA9fj+pWHnHCgLw6V4f0OvmPhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c4:62:90:b1:1f:24:8c:56:0a:b8:bf:5a:aa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=9bc926c97e48b26ee5162d53943163a570be9abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:3b:38:fc:8b:d0:2e:93:0a:c5:10:48:9b:
84:49:a9:76:c2:84:17:50:d4:b3:02:c0:e4:a2:da:
28:10:f9:be:de:9b:d0:69:26:b5:b3:27:a9:68:cb:
99:a4:43:91:b6:9d:e8:66:25:77:da:57:3e:04:17:
70:7b:40:d3:34:78:06:fe:3b:32:87:5d:93:4d:db:
75:1e:c8:ca:ca:62:3e:e4:40:d7:ef:1e:83:7a:cc:
6a:c2:bd:fa:1d:e8:0a:89:f0:8c:d7:9b:03:2a:80:
3d:24:dc:da:5e:d7:d5:7c:f9:c3:c4:fd:49:8f:82:
7a:60:d9:f9:fe:37:94:32:fa:3b:2e:e4:7c:0f:ce:
f8:90:f8:f1:32:7e:9c:fe:0a:d8:7f:a2:e2:37:67:
64:53:de:67:7f:34:c0:44:96:63:48:a8:ce:0f:f3:
64:89:02:19:17:b2:6c:08:4c:1a:b6:1f:c6:da:74:
d0:53:06:20:be:b6:0e:d1:6a:43:6c:cb:aa:42:da:
1c:26:71:ae:e8:2b:61:44:dc:a6:59:68:e7:e5:85:
f9:c5:7d:49:c5:df:11:83:f5:ee:da:27:f2:d3:0f:
5e:79:59:e9:51:bc:19:5c:29:74:3e:28:2b:2f:6c:
10:a7:f3:15:05:4c:e0:33:91:04:f5:07:47:5a:e2:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:26:C9:7E:48:B2:6E:E5:16:2D:53:94:31:63:A5:70:BE:9A:BE
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:cb:7e:c8:cd:d0:c6:9d:d7:64:4e:fc:ca:7e:0e:fc:35:
28:27:62:d8:b8:68:4f:05:63:ac:69:7e:fd:49:59:05:dd:7c:
63:44:0d:7d:3c:d0:e3:ae:0b:06:75:e2:7a:23:97:99:c9:86:
91:8d:21:c4:fe:62:17:3b:08:3a:2f:8c:64:7a:fc:1f:06:df:
f6:73:4a:ee:84:d4:3c:4b:c7:76:08:39:0e:23:b8:6b:4f:94:
c9:2d:98:f6:47:2b:8a:2c:1e:da:33:1f:38:2b:de:42:da:01:
f8:e0:78:aa:09:87:c6:60:22:e8:13:e8:c3:ed:3c:5b:a5:ca:
39:ad:97:c3:f2:29:82:be:ac:3c:a4:85:c1:6f:78:fb:93:8d:
fb:9b:dc:1f:24:73:03:d0:2b:1f:99:33:5a:cd:69:cf:67:35:
97:bf:5e:8e:3f:01:2d:3f:11:53:de:d0:1a:8e:90:5c:54:1f:
bd:7b:05:c5:23:90:4f:39:30:a4:09:b1:c0:ca:a1:73:7b:1c:
e7:2c:3c:46:f2:54:a0:ed:6b:cf:1b:a5:0a:08:54:c4:6f:f4:
d8:8c:f0:ba:3a:c8:27:9d:9d:60:94:ab:ed:fa:67:59:ce:30:
39:8a:fc:e1:ee:2a:a4:d6:f8:81:f6:b7:11:b4:f0:a3:6f:b1:
ab:2d:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:30 2026 by rpki-client