Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: k7aQp3xdGAOTRXawt/mN8yyEBciKOHHncBmrigzpOJ8=
Subject key identifier: 41:BB:91:ED:6C:26:EF:3E:FC:7F:A5:60:37:18:A1:C1:A1:06:BB:A5
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 019D38659B04BD27D9FD5915CF351EB833A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 12C3
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: LEVr5zJjjFZ02oRNF5hRS0Y3CQ0u+dt6xZ9pKNNgxUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9b:04:bd:27:d9:fd:59:15:cf:35:1e:b8:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=41bb91ed6c26ef3efc7fa5603718a1c1a106bba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:79:ed:69:8d:4f:d2:7c:91:e8:69:48:a2:
7d:34:13:eb:45:ed:fb:1a:e3:95:59:66:85:8a:ae:
b1:15:2f:19:37:27:a5:ec:e9:92:e0:b7:3a:98:18:
66:1f:09:74:9d:14:f8:5d:44:0b:7a:2f:9f:33:f1:
1e:cf:94:d1:6c:fb:b8:de:e4:cb:69:2b:41:f6:2f:
5f:41:c4:18:83:80:d8:b5:fa:d4:18:e9:03:51:83:
a4:6e:32:1a:a3:c1:04:b0:05:17:fb:81:1f:44:27:
a1:af:bb:7b:8c:d4:5c:76:35:81:75:3e:54:c3:6b:
80:1f:e1:c2:48:d2:3a:33:db:ef:4e:50:1c:e3:21:
81:26:e5:cc:c5:ce:a8:ec:c9:bd:7f:ee:d0:6f:66:
97:fb:2f:42:1b:9e:59:92:c5:bf:08:c4:90:fc:79:
72:39:06:99:fb:c5:d2:84:51:ec:ac:58:77:15:65:
3f:d9:a0:95:b3:25:74:31:03:2a:3b:0c:d4:62:46:
7c:59:e3:2f:6c:26:f8:94:91:e9:27:c7:27:57:9c:
13:80:45:19:9b:41:36:da:5e:ab:b0:6b:52:77:1f:
5f:e9:c2:0c:5b:46:d2:9b:76:45:db:f5:a7:6e:ac:
8e:94:d6:87:7c:9c:cf:91:81:ff:3c:13:61:e0:1b:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:91:ED:6C:26:EF:3E:FC:7F:A5:60:37:18:A1:C1:A1:06:BB:A5
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fd:e3:6c:49:d9:86:27:ea:91:4a:86:20:ce:26:bb:a4:07:
fd:85:2b:57:9e:2d:88:2b:ae:47:1d:58:76:4d:3f:d0:60:8b:
09:da:49:44:07:70:fe:15:72:fe:f5:62:96:3e:67:af:86:d2:
f3:91:63:62:0c:64:a8:08:d3:13:73:43:9c:35:90:51:85:33:
c5:f2:0f:3a:0e:57:cd:9b:15:72:09:03:50:8c:14:66:49:8f:
56:5c:1d:d6:0f:26:9e:6d:92:e5:7f:31:97:a3:00:48:b3:66:
ca:fc:d2:37:fa:e3:ba:d3:ba:c0:db:bb:1f:01:7b:4f:ef:af:
5c:9f:ea:fb:f1:f5:91:38:95:49:c5:61:7e:e5:f6:bc:fd:ae:
60:60:a0:00:e9:95:8d:2a:5a:75:ed:53:b1:d5:23:d1:56:75:
f5:13:3f:e5:f8:d0:cb:af:97:cd:cb:86:70:df:d4:38:bc:78:
79:e2:62:62:87:50:7c:a2:5a:07:8d:17:81:7e:11:4c:9b:46:
d8:c1:f5:4c:42:7b:80:95:a8:2c:29:30:51:02:86:cb:e4:70:
e2:cf:92:3b:24:0c:50:d2:99:d7:99:48:f9:4c:2d:a3:0c:57:
9f:16:52:67:1f:4e:ff:3d:26:b2:10:a0:69:0d:3b:87:bc:e9:
a3:19:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:08 2026 by rpki-client