Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: vcqD8ybqE8nxwcnBa8Lj/Y0h8zTJ3PGbaOywfD64JbY=
Subject key identifier: 48:FC:DD:30:01:87:CC:22:43:3E:04:5C:72:3A:7B:FA:2A:5C:C3:37
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 019D28F2044FEB88AF3BEB8BDE613EB19838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 12BB
Signing time: Thu 26 Mar 2026 07:00:42 +0000
Manifest this update: Thu 26 Mar 2026 07:00:42 +0000
Manifest next update: Fri 27 Mar 2026 07:00:42 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: Fi3nt30myILJTOczmltqJY651+lwAFBu+bKu+t3FdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:04:4f:eb:88:af:3b:eb:8b:de:61:3e:b1:98:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Mar 26 07:00:42 2026 GMT
Not After : Mar 27 07:00:42 2026 GMT
Subject: CN=48fcdd300187cc22433e045c723a7bfa2a5cc337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6c:20:46:6b:f1:67:78:f4:2a:01:89:9b:e0:
88:99:87:0f:4b:6f:a8:b7:72:5c:ff:fb:a5:ae:79:
49:a9:12:62:f0:cd:70:01:1e:e5:07:dd:26:da:02:
50:a0:09:16:68:d4:5e:d8:7f:9f:dc:0b:2d:97:54:
33:8a:f0:fe:9f:f0:27:ce:74:e2:9b:d8:04:41:5b:
f8:af:2c:50:12:a8:e0:c9:a4:e7:2d:16:55:29:27:
2c:11:22:f5:a5:e3:a2:e9:2d:d3:96:f2:c0:a7:b2:
61:f2:18:6d:8c:81:d2:9a:87:a6:16:0a:66:f0:12:
de:81:3a:24:92:19:29:69:af:a7:f1:ac:36:01:0f:
0e:7e:ef:cd:4f:f9:86:52:96:cf:df:bc:df:37:3a:
97:96:bb:20:7b:22:1a:85:b7:78:79:04:0a:6b:29:
64:18:47:93:48:4a:af:59:05:c8:86:47:81:60:0a:
51:8f:a7:73:a6:79:eb:46:e1:0f:9c:32:ce:75:b4:
30:48:d7:24:39:89:79:2c:c5:e8:ba:92:c7:56:c1:
3c:90:5a:8c:a2:45:9a:66:36:4d:1e:9c:ba:11:a0:
8d:96:d4:7a:3f:96:12:93:1a:65:33:09:77:56:11:
45:3c:75:f2:7b:09:1f:b4:c7:5f:3b:50:5d:0b:96:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:DD:30:01:87:CC:22:43:3E:04:5C:72:3A:7B:FA:2A:5C:C3:37
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c7:a4:99:1a:75:b7:39:bf:2e:14:e9:a0:fb:03:6b:77:f9:
25:cf:69:44:49:27:b7:87:d5:bd:1e:8e:43:2a:49:ba:f7:83:
2d:33:71:28:5a:44:14:87:8a:dc:6c:5c:7a:56:74:ad:d5:0b:
33:f9:e2:36:19:30:12:4f:19:19:8d:83:16:26:08:cc:50:55:
c8:8e:e1:ff:60:e2:87:15:a0:b9:19:b8:a2:d7:bb:08:40:d2:
a2:7e:91:b9:89:d6:8d:0a:03:86:da:f3:bb:42:cd:d6:b1:77:
f6:70:4a:0b:82:eb:a7:7f:ca:3b:63:85:a9:ab:c7:5a:10:f8:
2d:14:5b:99:65:66:a6:13:81:86:6f:6c:41:a2:fe:1b:aa:8e:
58:bc:10:b0:df:e9:5d:e3:7f:58:63:47:b0:b8:4b:c6:5d:8d:
12:03:1e:78:56:b9:04:af:13:77:d5:25:3d:57:0e:04:21:a7:
bf:35:45:92:13:df:8d:09:67:71:e8:f6:c3:cb:d9:21:bf:2d:
6f:f8:20:29:6c:7d:1a:bb:b6:44:6e:0a:3d:f1:b0:54:04:c3:
d4:3f:31:57:47:a1:3f:b8:a7:36:29:a9:dd:44:7a:dd:71:c9:
ad:3c:40:c8:5e:3c:57:44:b5:84:76:20:c7:76:ee:f2:2f:0e:
79:e7:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:30 2026 by rpki-client