Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: DbhWL6a00XJnxNAC1pgU6apG2Wugvijs7peynzmePJo=
Subject key identifier: D0:E2:81:0D:4C:D8:0C:76:80:24:E1:9D:C2:06:BA:BA:FE:48:C3:15
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019D26961C64337B7D045794F4569B64D725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 095A
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: 95LNelvbvLFUYAJ1gS_rBtJtHic.roa (hash: db9YjHMqlxf9CY0aL1oyvS+hqxV9ZfWgOQGqx8Y1J3w=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: rz3sNwQeY1eHJhDd1BYE/y7bDZYqgWzvuSCk3YA8Ii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1c:64:33:7b:7d:04:57:94:f4:56:9b:64:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=d0e2810d4cd80c768024e19dc206babafe48c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:bd:32:f5:fd:2f:d9:e9:c1:0a:1c:8f:1a:
f1:59:ba:bc:5a:5b:06:2f:5a:6f:03:ea:32:41:a9:
46:66:6f:21:1f:1a:fa:7b:cb:d7:62:9d:7f:b8:4d:
4d:35:e2:b1:e3:bf:8f:58:58:21:1e:a6:00:ab:6e:
6a:84:fd:9c:ad:db:00:f9:d2:bd:28:43:68:51:98:
78:46:68:42:7c:be:e2:23:9d:4f:f2:e9:f0:70:36:
b8:a4:22:fc:a4:3d:05:91:e1:d8:b3:1a:f2:25:0c:
6e:40:66:12:b1:25:2f:8c:f4:15:83:ee:22:73:79:
c9:ea:44:b2:86:41:a9:20:42:6b:e9:87:12:a7:ca:
71:e1:17:36:9a:49:0a:ee:79:9c:51:e3:f4:f3:ef:
0e:cf:a7:e0:cb:94:36:c8:06:ef:76:74:7b:ac:d6:
f9:cf:20:af:88:ff:06:a2:2d:1d:94:8d:9e:fc:db:
68:35:b6:20:31:9e:b1:bb:bc:0a:90:06:44:70:07:
8d:ea:87:6c:67:0a:1d:7b:35:ca:8c:16:70:0f:a1:
98:5e:e0:34:c6:44:85:9f:04:8f:0f:14:bf:fb:67:
ec:2f:7b:b9:c3:b7:3f:ee:8d:b8:ad:c9:89:aa:23:
78:af:04:76:67:05:99:b2:96:b5:7f:b2:c1:b9:9b:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:81:0D:4C:D8:0C:76:80:24:E1:9D:C2:06:BA:BA:FE:48:C3:15
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:6e:e0:fe:28:a0:de:85:ec:f3:a6:67:3b:4c:c4:f4:9b:
83:70:be:1e:d9:c2:e8:e5:11:e8:db:f1:6f:a7:fc:ad:23:95:
7d:f7:59:9f:ba:c6:1e:2e:49:d2:78:07:67:49:2d:50:e6:80:
61:2d:6b:4b:b8:0b:8e:03:a9:15:54:38:8a:14:d5:d4:05:27:
2d:13:97:02:bd:c3:5c:1f:30:64:a4:10:8f:cd:4d:ac:88:34:
40:81:15:d9:91:07:e9:83:1e:ec:0a:5e:42:c8:82:9a:4c:fd:
2d:1e:27:50:e1:c8:06:b9:ec:5a:a6:8c:88:70:db:fe:73:b2:
ca:5d:18:b2:1d:87:d7:fc:56:08:97:94:3a:ac:08:97:01:2c:
4c:03:8d:d5:a1:a8:e8:9d:b0:f2:19:be:78:82:0c:4d:35:73:
17:7e:6c:f0:3a:03:c7:fd:9a:68:81:38:c9:26:59:0d:0f:a1:
a3:df:96:09:56:20:d7:3e:db:ee:70:69:87:47:85:44:e6:77:
eb:b4:73:04:fe:b4:e1:ad:d1:79:59:de:38:a3:29:3c:48:cc:
80:0d:e0:4b:7a:8d:0c:20:69:41:67:fd:6f:8f:98:1e:b0:34:
0d:a0:d4:b2:ff:3c:0e:73:10:bd:9e:b6:b6:2a:f7:7f:0f:e7:
d9:d0:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:48 2026 by rpki-client