Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
File: rbxC2eQutyb4mwpU4tK2dclLx_Q.mft (raw, json)
Hash identifier: 6rdH3CNvUdFS5roWPrUBqFZZOsqZX3Cx9LI+nawopw4=
Subject key identifier: E5:3D:2C:FF:EA:06:36:5E:48:83:31:A7:79:A4:5B:15:9D:B5:34:F1
Authority key identifier: AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
Certificate issuer: /CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Certificate serial: 019D29CE23ABC33489532A0E41CFF6DAC41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
Manifest number: 023C
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: rbxC2eQutyb4mwpU4tK2dclLx_Q.crl (hash: Sea1eUfJ6U52qSa4yt8KudACJrl5DrXBfJ28hSTT4SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:23:ab:c3:34:89:53:2a:0e:41:cf:f6:da:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=e53d2cffea06365e488331a779a45b159db534f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:d6:d8:5e:44:bf:f7:38:16:b7:99:56:7a:
d5:24:b2:a8:24:bc:9b:83:6c:ea:70:e6:a1:d0:58:
1d:8a:74:e9:e0:7a:10:13:67:c4:6c:af:7f:2d:c2:
1d:5a:9d:8c:6a:5a:21:70:73:b8:0c:0b:89:1c:66:
4c:e0:7f:eb:f1:56:e4:99:d8:72:3a:b5:71:73:c2:
ec:b9:3c:2b:15:c9:92:22:1d:06:03:c0:b9:1c:c6:
30:bc:42:a9:d0:44:f6:53:38:b7:80:6d:7f:dd:e4:
8c:33:8c:91:8b:3b:49:62:0b:ec:65:21:b6:d1:c2:
6b:eb:d9:1b:9b:8e:8d:a8:ee:d4:1b:c8:cc:b7:b6:
da:9f:b9:a7:c5:1d:ad:26:7a:07:b2:5c:0b:83:71:
1d:c1:d9:39:89:b3:e3:ee:89:05:e0:90:5a:e5:68:
22:e7:a6:44:c2:17:72:22:1b:23:c2:e8:67:41:16:
77:8a:a9:e4:8b:b1:23:4f:dc:ac:e9:a3:7f:2c:a2:
b1:32:c0:1d:cd:96:76:7e:4d:99:da:35:32:86:2e:
43:7e:a8:af:87:b4:23:0e:04:7f:4c:5b:8f:62:b6:
c0:bd:a1:8f:79:c9:76:e2:5b:ad:f1:60:b9:5e:0f:
c3:84:a1:98:7f:6a:85:6f:07:90:bc:ac:31:b7:18:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:2C:FF:EA:06:36:5E:48:83:31:A7:79:A4:5B:15:9D:B5:34:F1
X509v3 Authority Key Identifier:
keyid:AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:31:8a:1f:67:6f:71:0e:a7:a5:89:82:e3:ee:98:36:6d:
6a:7a:5e:2f:dc:ce:9c:c4:94:25:72:51:db:48:cb:2b:25:e7:
a0:fa:c4:0b:b3:d3:eb:6c:1c:44:df:93:57:01:51:c7:c5:45:
d0:db:80:a4:7c:24:3f:8d:87:57:05:f1:9b:b0:bc:a5:16:95:
80:21:89:48:64:05:03:a6:a3:20:1e:c3:23:58:dd:3f:c2:8d:
d0:ac:95:df:9f:3f:89:c2:99:c9:87:2f:57:6c:5d:77:1e:1d:
c0:9a:40:6e:59:eb:0d:4f:bb:dd:89:2c:e1:57:a4:88:3f:55:
d6:31:b9:61:02:4e:65:ab:f4:80:74:8e:7d:e9:14:51:69:8a:
5f:33:15:59:e1:76:e1:84:47:6d:43:dc:44:60:37:8e:66:07:
72:b1:91:c2:d9:1c:3a:44:f5:cc:c6:ff:a6:21:5e:c6:43:6d:
85:8b:7c:76:52:f5:ec:d3:d5:86:d3:d4:52:e2:67:0e:f0:24:
16:84:6d:24:de:e6:22:70:4d:f3:34:0d:93:26:b9:c6:f9:2f:
f4:8c:b8:09:a4:92:bd:08:c3:bf:4f:d9:81:39:a3:b9:23:96:
74:98:c3:d1:e8:a8:c3:54:b9:46:7d:40:1f:3d:2b:d9:ed:71:
80:70:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:21 2026 by rpki-client