Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: yYfNK4qWyREqZ03aT5TUC00mjIVIPmq/+erVllFg7zE=
Subject key identifier: 9E:17:F8:9B:F5:FF:8C:FA:41:37:41:6D:32:10:B9:D8:C8:17:45:BD
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 019E1BD92F4BA33B76A3299F66CCF08A294B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: 011C
Signing time: Tue 12 May 2026 11:01:18 +0000
Manifest this update: Tue 12 May 2026 11:01:18 +0000
Manifest next update: Wed 13 May 2026 11:01:18 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: UxTE8+v62AlEuC8ZVEjr8nVM1bZ3jw7+Lj8oPIudO8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:2f:4b:a3:3b:76:a3:29:9f:66:cc:f0:8a:29:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: May 12 11:01:18 2026 GMT
Not After : May 13 11:01:18 2026 GMT
Subject: CN=9e17f89bf5ff8cfa4137416d3210b9d8c81745bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:c7:68:84:94:a0:6b:77:fa:5d:92:cf:5c:
64:23:92:b7:2d:c2:82:91:1f:35:28:b7:e8:7c:d5:
21:bd:ed:87:4a:32:2f:c9:ef:d6:dd:c4:ba:48:8b:
2a:2d:71:29:77:e0:dc:95:19:dc:29:78:59:0c:e9:
ca:e0:69:f1:c3:62:48:fa:c1:a8:5e:d2:ff:cc:95:
04:df:f9:7c:6d:ef:f3:2f:50:f4:a6:58:7a:98:68:
15:86:11:7b:11:98:ed:6c:65:48:93:d6:b2:f8:40:
80:6c:d6:b6:bd:49:53:c8:44:49:de:13:88:1e:b1:
37:6b:91:83:71:ac:d4:51:49:15:3a:d1:cc:7d:7d:
bc:bb:ea:6f:31:cc:2d:b5:a0:9e:45:95:1a:91:3a:
be:33:f6:2b:e3:ad:f0:24:bd:5f:7b:76:eb:cb:3e:
2b:67:63:38:be:5e:47:9e:64:33:27:3d:6f:78:b1:
67:27:57:c9:27:46:ef:f6:7f:cc:b7:ce:79:aa:af:
85:57:c3:bd:f5:b1:57:3e:9c:60:de:cd:0c:6f:66:
95:a6:0a:5e:31:81:9e:71:13:68:8d:43:19:c7:5e:
ce:21:5c:07:f7:24:d0:4d:bf:1d:f6:11:00:03:b3:
ff:98:04:e1:81:71:21:ed:43:fa:b3:e6:83:53:71:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:F8:9B:F5:FF:8C:FA:41:37:41:6D:32:10:B9:D8:C8:17:45:BD
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:95:80:aa:b5:a3:3c:5f:d8:71:5f:ac:48:6b:62:59:28:
46:4c:6d:ad:af:5d:e2:4a:af:f6:80:f5:dd:37:fd:e3:c6:a9:
6f:0d:2a:69:98:15:aa:18:95:12:af:64:5c:63:b0:d2:44:0a:
b0:6e:52:cf:cf:71:ea:4b:6e:81:7f:76:23:11:3b:68:d5:70:
1a:73:5d:71:ce:98:9f:d6:5d:b6:b1:9c:7a:5e:bf:00:41:a0:
9c:28:cb:f5:a4:c6:44:b0:5f:8f:51:34:f1:8f:9f:43:d1:03:
63:76:4a:12:22:f8:e8:31:1d:81:ae:c3:90:d6:0d:f4:f3:95:
f3:01:71:6c:09:20:95:04:3f:e1:19:56:31:6b:e8:84:95:03:
8e:d7:f3:cf:1f:49:fc:d7:c5:4b:88:77:81:9f:50:7a:f6:14:
20:f4:f9:5e:b6:9c:d2:b4:76:a0:8e:ae:05:e8:ad:c2:74:bf:
60:8f:5b:9b:9b:1e:73:ed:3a:d3:88:6c:4b:bb:49:4f:8d:18:
e1:8e:c1:c3:f7:4a:66:62:e0:48:52:a7:56:d8:c1:1e:3f:30:
9c:68:79:ac:2e:ae:ba:87:14:17:83:60:85:f5:71:f4:8d:5d:
e6:96:3d:a7:6c:37:a0:53:27:8c:d1:a8:1f:e5:65:c9:a5:d9:
a7:f6:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:05 2026 by rpki-client