Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier: BZbRRMXUstSnwFxIkPhBVcqawTXKewA0slGHYC9MQEg=
Subject key identifier: F2:A9:54:C6:D2:2D:BD:0B:52:B2:1A:D1:8D:3A:FC:DC:03:A6:56:0F
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 019D25BA48D3D6AEF49C915E612E3398FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number: 2C
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: /AmVm/5otYcq6GU8/XFmHdC7ee9nYrmXfj6siTpSlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:48:d3:d6:ae:f4:9c:91:5e:61:2e:33:98:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=f2a954c6d22dbd0b52b21ad18d3afcdc03a6560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:d6:8e:22:6a:b4:b6:e3:af:39:37:3a:48:
1c:20:e7:c6:b3:55:5f:95:63:b2:9e:db:55:cc:7d:
a1:51:ea:92:8d:ae:c3:f6:83:53:66:30:55:e4:cf:
19:7d:b8:27:28:18:f7:9f:0d:b2:53:4b:e6:31:e8:
af:86:4e:0c:61:22:c4:82:78:aa:e5:ea:31:91:9b:
f5:62:52:89:74:8f:9f:1c:c3:74:2c:0a:29:ee:82:
7d:7c:85:c7:6a:66:fa:d1:e5:17:b3:a8:df:ea:55:
91:9f:c6:29:d0:1a:7d:cd:18:9c:a0:32:56:c1:02:
6b:bc:0d:39:1f:54:9c:a1:29:4e:ac:12:78:e8:10:
98:6d:f8:08:35:3a:62:a1:16:2b:81:cf:bd:1e:c2:
af:cb:13:f4:10:81:7a:7f:9e:55:21:28:bd:6a:ed:
f9:a4:ee:e7:41:61:b8:f4:b6:7c:df:4b:86:ca:22:
df:64:84:1d:78:98:84:e2:8f:50:b5:12:05:56:41:
f4:1f:2b:aa:6f:45:b9:f7:e5:77:1c:3a:f6:b9:33:
51:03:92:f2:88:22:b7:0a:18:9f:1b:a5:14:56:f4:
9d:08:9a:76:e5:59:3e:74:e8:58:12:d9:a9:b9:d1:
0d:0c:18:f9:9d:46:8c:80:ef:98:e4:1f:16:9d:40:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:54:C6:D2:2D:BD:0B:52:B2:1A:D1:8D:3A:FC:DC:03:A6:56:0F
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:94:4b:2e:0c:a5:a5:8e:4c:b3:08:20:6e:b2:6f:85:98:
d6:55:8d:2f:04:23:4b:69:ef:12:54:32:39:23:e3:04:16:f4:
82:d5:2e:4d:d5:f5:08:6e:6f:3e:b4:70:c8:a5:05:fb:2f:3b:
bb:c8:ed:ca:b1:45:a8:b7:35:b5:5a:1f:fb:6d:26:e8:6a:02:
dd:23:6f:bb:2d:45:c1:7b:ba:f1:e4:0f:25:b6:42:23:9c:85:
57:f9:ca:aa:a0:c0:a8:39:51:e1:2a:ac:27:c5:24:c5:ca:a5:
bd:22:05:54:33:e1:f9:09:ce:bc:8f:8f:e6:9b:93:b3:9b:fc:
0a:45:0a:25:ab:a7:f7:42:a4:d3:3f:06:ee:01:9a:95:89:09:
df:0a:62:5d:ca:10:82:49:a8:81:2d:f9:35:d7:dc:50:85:75:
97:0b:5b:40:30:a9:24:3b:7e:bf:c8:44:70:ad:8a:92:0f:f1:
11:fc:d0:c7:fb:8c:c2:e3:5f:9b:6f:ae:16:79:3a:98:99:f7:
52:ac:e8:5d:1d:44:9a:77:48:40:41:c8:cf:46:85:47:6a:89:
86:7e:0b:c9:66:e2:de:1a:5c:c2:8a:d4:9c:33:94:36:9c:df:
70:c9:f4:46:f1:3f:94:a1:55:bf:ef:b6:79:f7:33:b9:06:ee:
90:c6:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:23 2026 by rpki-client