Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: WfcawUq0wprXl7JIZEmi50lkqnw9y/t5UiNkoNtX6Ek=
Subject key identifier: 5C:6D:A5:4F:43:59:21:79:85:36:0F:E8:43:A9:6B:6D:DE:12:A8:2E
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019D31F559EABE72870270C90E88F3019CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 01:00:55 +0000
Manifest this update: Sat 28 Mar 2026 01:00:55 +0000
Manifest next update: Sun 29 Mar 2026 01:00:55 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: gbAGcCpAopSmiRuN2Ni7EQz3B39TYi89MI1WcGYFtOk=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:59:ea:be:72:87:02:70:c9:0e:88:f3:01:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Mar 28 01:00:55 2026 GMT
Not After : Mar 29 01:00:55 2026 GMT
Subject: CN=5c6da54f4359217985360fe843a96b6dde12a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:af:91:96:bf:62:b4:8e:02:27:31:7e:40:
5c:e4:77:c5:74:57:d0:58:72:5a:4f:57:6e:bf:2b:
e4:74:f6:3c:49:b0:17:bc:77:13:01:2a:4a:5a:31:
e4:7a:65:d4:1e:0b:1b:9a:6a:66:20:4b:46:5a:98:
bc:3f:7e:b7:ef:11:00:94:e3:05:56:10:0c:0c:25:
44:8b:6b:04:23:a8:3f:78:99:c0:0a:7f:22:d6:5e:
73:a9:28:f7:2d:ee:4f:9a:a6:ec:45:d4:19:78:fc:
05:e8:07:31:79:c1:cb:f7:c6:03:eb:9f:d8:48:aa:
95:d3:3a:e6:d7:c9:0e:ab:c0:75:48:d9:c5:a1:fd:
10:5c:49:4d:d6:94:9c:22:8f:e9:cd:61:09:66:30:
92:6a:2e:61:17:75:55:49:8a:02:86:4c:fb:d7:02:
39:51:4b:fe:75:2e:ea:35:9d:f3:38:41:f8:61:e5:
c3:42:0d:23:88:3a:3c:ac:cf:24:73:d5:ec:ed:4c:
44:90:a8:4c:9c:4c:0e:96:94:93:ca:5e:06:4e:ec:
33:73:b3:3e:46:8d:6f:45:51:fc:b7:79:b8:85:a3:
79:ec:f2:59:29:d8:04:60:18:17:dd:9c:4b:a2:47:
78:7b:bb:ea:07:ea:0b:4e:3d:df:58:37:79:52:e7:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:A5:4F:43:59:21:79:85:36:0F:E8:43:A9:6B:6D:DE:12:A8:2E
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fd:8b:46:f5:c1:6f:29:c9:60:24:ba:09:4f:4b:f3:7d:da:
5a:a5:d4:3c:1a:1c:66:18:9f:27:39:32:32:dd:9e:61:76:21:
44:99:74:96:50:7a:39:11:88:dd:1d:9a:36:32:31:01:14:c9:
b0:f7:f4:6c:09:59:81:38:11:e5:32:4d:99:5c:cf:4e:15:84:
58:4c:db:47:94:7d:23:42:e4:ed:1e:9c:a9:26:3e:11:ca:0a:
74:75:00:fb:22:73:19:9b:62:44:1f:2d:dd:28:fa:42:8c:55:
98:f1:2d:39:2e:50:13:2f:ee:ab:c9:df:f7:79:76:36:63:ea:
2d:f6:48:05:02:7c:c0:20:d2:8b:90:28:f0:5e:5a:0f:31:ce:
96:8d:9d:a5:13:63:8f:ff:8b:b9:9a:5a:ac:3e:7e:af:27:e3:
6b:a5:1a:8b:09:67:32:73:e4:11:31:6d:33:33:09:a6:f7:8a:
11:d8:05:68:9b:f1:dc:32:23:18:b5:0a:79:36:0d:3e:9a:b1:
df:50:53:65:a5:ad:54:ab:31:f2:ae:a9:78:86:30:fd:87:04:
d1:0e:4d:39:ce:c4:4b:5b:be:a7:69:20:e6:86:af:da:6b:0b:
55:7f:fe:e8:a9:15:65:86:ab:92:ee:9b:59:c3:1f:fa:fe:c6:
2d:ad:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:16:52 2026 by rpki-client