Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
File: 2XrorpgrkDNCQd8Rpbng-m30SCA.mft (raw, json)
Hash identifier: 7NaCqUl+j89Ak8eeCaGF1BetsWFKtj70oVyYC3nw0js=
Subject key identifier: 49:7C:6C:2F:FB:6F:1F:F1:42:1C:4D:E8:43:F4:63:30:1F:D0:21:E4
Authority key identifier: D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
Certificate issuer: /CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Certificate serial: 01A0CB59BEA46536579DC44AD3B3A9B4517D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
Manifest number: 0280
Signing time: Tue 22 Sep 2026 23:00:51 +0000
Manifest this update: Tue 22 Sep 2026 23:00:51 +0000
Manifest next update: Wed 23 Sep 2026 23:00:51 +0000
Files and hashes: 1: 2XrorpgrkDNCQd8Rpbng-m30SCA.crl (hash: c3+O8glBrarLDhliqcPoQeU/AIHQuRxbC6yn4A757XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:be:a4:65:36:57:9d:c4:4a:d3:b3:a9:b4:51:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97ae8ae982b90334241df11a5b9e0fa6df44820
Validity
Not Before: Sep 22 23:00:51 2026 GMT
Not After : Sep 23 23:00:51 2026 GMT
Subject: CN=497c6c2ffb6f1ff1421c4de843f463301fd021e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:a8:3a:f1:f2:a4:a1:f1:63:82:8b:0f:2c:
da:b2:0c:b6:55:e4:c9:29:ab:5b:9d:e1:9a:2b:01:
d4:93:6b:ab:65:68:14:33:f0:33:5c:66:e6:14:42:
bb:02:ce:f2:0d:29:1b:c4:42:93:78:cd:31:fc:f4:
da:73:6f:0a:38:15:c4:09:4d:6d:58:a2:da:30:f1:
9f:66:73:fb:f6:37:e2:0e:66:87:69:e0:71:46:74:
c8:09:c2:af:3b:ae:1f:54:78:5e:66:a4:b6:80:94:
47:13:1a:fe:ab:75:99:c6:96:79:d5:29:62:dc:8b:
25:29:5f:6e:91:f3:95:ee:75:79:f7:e9:8a:51:d3:
ae:f8:bb:06:57:94:ca:f8:da:fe:c9:98:f0:8c:f1:
69:a9:89:66:d1:3c:14:c9:c5:a9:be:a1:a4:b2:38:
2c:2f:9b:11:3d:6c:6a:ef:21:f2:2f:3f:e5:30:e5:
23:57:49:ce:d4:4d:99:f7:1e:17:6c:9e:81:dd:5e:
15:ca:99:80:1f:52:4c:d1:58:9e:a6:8b:9f:c5:e4:
df:d3:3a:22:11:c3:76:c4:9c:72:ec:bd:74:db:9c:
3f:86:02:9a:c1:ad:a3:87:29:f6:b9:b4:ad:6d:89:
d3:87:6a:f1:cf:1f:82:8d:4d:a5:e3:24:61:ca:74:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:6C:2F:FB:6F:1F:F1:42:1C:4D:E8:43:F4:63:30:1F:D0:21:E4
X509v3 Authority Key Identifier:
keyid:D9:7A:E8:AE:98:2B:90:33:42:41:DF:11:A5:B9:E0:FA:6D:F4:48:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XrorpgrkDNCQd8Rpbng-m30SCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bdfa9d-ff74-458b-9213-2c50cdc56fca/1/2XrorpgrkDNCQd8Rpbng-m30SCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:84:7f:aa:8c:e2:ea:e6:00:cf:19:5f:f3:3e:47:ed:e9:
af:e9:34:36:02:49:70:c8:83:87:ef:5e:87:57:c9:24:2a:d8:
c6:b0:7b:c9:b4:d9:7d:31:74:f8:94:97:4b:a7:a1:a6:9a:7a:
35:4a:50:22:a6:46:ad:95:3f:59:13:50:02:2c:32:88:79:5c:
85:ae:a6:73:a5:9c:07:21:00:15:b6:70:81:17:56:a2:94:02:
2b:ab:79:8b:61:6c:83:e9:04:55:11:ee:01:f1:43:b5:e1:fd:
82:eb:6b:15:36:67:d6:c2:e1:86:21:03:0e:7a:7b:8b:4d:94:
32:b1:57:5d:dd:04:31:92:13:cc:74:77:56:57:dd:98:63:82:
7d:54:52:27:00:a5:ae:ce:24:35:e8:41:f6:c9:af:54:19:73:
c0:7a:39:72:1c:dc:c8:8f:42:23:24:93:4a:e8:01:7c:bc:67:
30:56:ef:f5:01:ae:7e:5a:fb:77:f4:85:b8:90:6b:5b:bc:dd:
02:31:d4:00:7f:cd:80:57:63:12:61:aa:b4:2e:69:95:9c:57:
2a:1c:c7:35:71:6b:a4:45:e1:d5:e8:cc:a7:1a:ef:bf:f1:f0:
2c:49:9a:9a:f6:7c:0e:9f:09:f1:35:c8:12:14:e3:73:5c:89:
55:4d:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:37:37 2026 by rpki-client