Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: f9iaqezlXxyE0d58pYJ/r6oJL7MwAS69rnhc3z3gLPk=
Subject key identifier: 5D:DC:44:29:47:F0:3D:8B:5C:8F:A5:90:61:1F:40:C3:66:6F:A0:D4
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 019F90910FBCA94B545DB6C0F4629880B285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: 01DD
Signing time: Thu 23 Jul 2026 20:00:53 +0000
Manifest this update: Thu 23 Jul 2026 20:00:53 +0000
Manifest next update: Fri 24 Jul 2026 20:00:53 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: ear/j6K3tTCMX7FE/Iq4EzIXQvbdGHKsIBviFD7sUfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0f:bc:a9:4b:54:5d:b6:c0:f4:62:98:80:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: Jul 23 20:00:53 2026 GMT
Not After : Jul 24 20:00:53 2026 GMT
Subject: CN=5ddc442947f03d8b5c8fa590611f40c3666fa0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:9c:60:85:03:b6:ad:b6:08:52:e6:82:2d:
4d:6e:16:11:f3:c7:92:2c:4d:4d:ca:21:61:53:b4:
0f:a9:e2:3c:b0:60:99:9b:7a:14:8b:70:0d:4f:66:
ec:d3:5e:d3:9b:32:73:49:da:32:94:e1:a8:22:f0:
7d:55:89:b6:c1:20:3d:39:ce:a3:20:34:be:40:9d:
10:11:02:79:32:ef:b5:c9:d4:da:91:36:04:19:49:
09:3c:08:29:7d:e7:9d:42:b3:3e:72:52:1c:c3:f0:
75:8f:37:77:65:cf:2b:34:7d:c8:59:0d:65:e7:5c:
0b:c3:b8:ac:e5:3c:39:94:a7:15:70:02:45:8d:08:
66:9c:cf:20:07:4c:09:10:93:2e:89:6e:31:cd:af:
04:13:4a:62:ce:60:96:8c:0d:b6:ea:50:a5:c8:9d:
d9:8e:50:d1:33:53:8e:4f:4c:be:ae:7b:8d:cc:35:
61:ee:93:40:ef:e9:17:01:7a:ad:aa:65:7c:de:f3:
7e:f9:0f:d8:67:75:22:a7:fb:a5:64:63:f1:d7:e7:
7a:41:10:15:70:70:8b:3e:37:5e:a9:b7:01:b2:75:
bb:29:f4:b3:8a:33:ff:f7:9b:11:a4:08:a8:0b:23:
c4:da:1f:f9:4b:1f:b9:fc:23:0e:0d:ac:34:91:fd:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DC:44:29:47:F0:3D:8B:5C:8F:A5:90:61:1F:40:C3:66:6F:A0:D4
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:bf:a6:7d:64:c4:ef:4c:c9:9b:bd:18:73:08:80:66:d7:bc:
e9:be:d6:bf:e2:36:37:5e:a6:4d:9b:50:67:52:de:17:a3:bb:
ef:e3:90:30:1a:05:cd:43:43:fe:62:4e:09:44:a4:ae:1d:ed:
02:58:c6:06:b9:a5:51:9c:54:70:e1:ec:fd:94:73:b8:22:fd:
01:ac:cc:93:58:99:e3:0e:90:59:e0:18:66:c3:45:79:ed:a6:
e1:bc:f5:b8:b0:e5:5a:69:01:89:84:73:d2:aa:fe:65:c3:4e:
dd:1d:4b:05:2f:8d:85:42:49:d6:d4:46:80:bb:26:72:36:2d:
47:ed:13:dd:2b:6b:0a:1a:6d:1f:2e:4e:48:66:76:91:30:12:
af:ca:94:a1:aa:61:dc:ef:43:24:f1:07:a6:c8:00:8a:0b:9e:
d5:34:45:a3:78:82:33:a5:30:29:84:d0:eb:1c:2c:bb:3a:4e:
1a:2d:65:53:9e:ef:2e:ac:e4:9c:ef:76:7c:de:47:d7:3c:4e:
73:f4:3c:8d:42:44:d5:11:96:0a:d0:9d:a7:dc:84:72:e2:97:
52:9a:b5:df:29:13:84:2f:96:f6:64:76:79:d8:a4:23:56:4e:
95:a7:8a:48:2b:43:3c:e6:2c:7a:74:7f:b7:ff:3c:8a:99:b3:
b3:bf:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:24 2026 by rpki-client