Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: /Z9S91IoZGMqwB/5H7UQPJJSMdxzOzTk9nJzBYEZCx4=
Subject key identifier: B8:20:B2:14:30:21:9C:47:40:86:E1:F4:7D:61:62:5B:0B:20:F8:88
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 019D341AB6B8477E68D3EBF3CA948F7078FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: A4
Signing time: Sat 28 Mar 2026 11:00:58 +0000
Manifest this update: Sat 28 Mar 2026 11:00:58 +0000
Manifest next update: Sun 29 Mar 2026 11:00:58 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: CrlcyFNgiwlxxOPyGeBHvdkW6jdoNLMKdng4llMjkAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:b6:b8:47:7e:68:d3:eb:f3:ca:94:8f:70:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: Mar 28 11:00:58 2026 GMT
Not After : Mar 29 11:00:58 2026 GMT
Subject: CN=b820b21430219c474086e1f47d61625b0b20f888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:1b:7b:77:51:cc:c3:0a:fb:ce:bd:e8:0a:
01:7c:2d:eb:5d:13:3b:d3:9b:e9:2a:d1:3c:93:05:
81:8a:08:c5:6c:fa:5c:8c:cb:36:06:82:5c:2e:ba:
9c:af:dc:fd:8a:c2:83:8c:32:8b:29:d2:50:41:77:
75:0c:df:74:9f:24:69:4d:6f:8f:df:22:1d:6a:ec:
ad:46:f0:c9:1c:30:cd:50:d8:3a:32:33:b5:a0:ff:
db:d7:80:ad:35:f2:53:96:f0:f1:79:9e:3b:47:38:
b2:e5:8c:d0:68:f8:39:54:be:78:14:8c:80:7f:40:
f3:4e:b3:b5:b0:60:68:1e:b1:5d:ec:40:32:36:d3:
73:24:5f:c6:5a:16:d9:d5:02:14:4c:93:6b:8a:b5:
a2:94:48:4d:fb:d3:d4:78:b5:27:2d:64:d5:b1:41:
d3:79:e2:1a:02:94:2c:30:87:55:1e:54:de:44:57:
f8:d5:a4:3c:3e:75:74:c6:96:06:76:6e:4a:07:7f:
2e:82:b7:64:5a:a1:b4:f6:81:12:29:fa:7b:23:6d:
6f:c5:87:44:ff:8a:f9:e1:57:f1:ba:0d:e5:3f:3f:
83:5b:fa:33:1b:36:96:c2:a7:63:8b:37:d6:be:75:
b6:37:bc:40:26:b7:81:16:09:fd:d7:d9:de:4d:33:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:B2:14:30:21:9C:47:40:86:E1:F4:7D:61:62:5B:0B:20:F8:88
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:34:83:dc:34:c3:80:7d:71:65:cc:21:fd:27:0c:1d:f8:
c5:8b:62:dc:30:53:57:2d:b6:46:01:5f:fc:a9:14:cc:eb:ea:
a2:14:62:4f:ca:fb:37:25:85:b6:6b:29:2a:89:2b:01:9a:84:
cc:0d:d8:57:1a:ae:a3:bc:34:33:fe:8b:50:3b:c8:c1:7a:c5:
7b:d8:4c:2a:30:85:ba:52:a1:a6:eb:c2:99:9a:76:6a:de:e0:
33:98:1b:e2:b2:51:cb:b1:af:22:78:2d:da:7f:44:46:8f:58:
65:6b:8d:8c:25:75:ab:9a:2e:82:e3:72:c7:e7:b6:de:48:aa:
3c:28:8b:d1:48:2f:ec:31:50:1b:ca:3c:ba:bc:82:8d:be:8e:
9d:5b:c0:4f:51:b0:a2:67:a9:94:c3:d6:f7:7a:ea:06:6e:22:
de:39:4c:46:4f:07:df:87:06:f4:6e:70:65:e1:f1:77:fe:86:
74:4f:54:50:4d:c5:0c:0a:ff:3b:8b:22:28:d3:3e:59:79:94:
c4:10:e4:88:97:9c:e7:0c:fe:5a:57:e0:99:df:ac:ff:69:80:
a0:8b:86:c7:34:b3:d6:42:e5:7e:9c:8e:8f:08:74:18:a2:1f:
8f:65:9b:28:8d:23:07:5f:ff:51:84:2e:37:5e:65:0d:3a:2f:
14:4b:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:14 2026 by rpki-client