Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: rT4r8o5npFHFDDYq7klF6SZHvGvVOmxcoaq4gQXGpE0=
Subject key identifier: 61:C7:82:E8:03:52:27:4A:27:3B:B0:25:C1:AD:B9:80:8D:F0:86:DB
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019DA41CEC23233CA084163E8F1D0A4427E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 099B
Signing time: Sun 19 Apr 2026 05:00:52 +0000
Manifest this update: Sun 19 Apr 2026 05:00:52 +0000
Manifest next update: Mon 20 Apr 2026 05:00:52 +0000
Files and hashes: 1: 95LNelvbvLFUYAJ1gS_rBtJtHic.roa (hash: db9YjHMqlxf9CY0aL1oyvS+hqxV9ZfWgOQGqx8Y1J3w=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: vSTyqS/1EeFz1DYL180M2BRY3bXk0lpt/rgbP6Vxc10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ec:23:23:3c:a0:84:16:3e:8f:1d:0a:44:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Apr 19 05:00:52 2026 GMT
Not After : Apr 20 05:00:52 2026 GMT
Subject: CN=61c782e80352274a273bb025c1adb9808df086db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:ce:0b:e7:8c:59:d8:75:54:45:64:56:93:
03:3d:d6:b5:5f:e8:27:ef:a5:7f:07:ae:17:30:14:
27:2c:f0:1f:af:db:ae:74:f6:15:70:f9:3c:83:0a:
f4:3d:12:81:76:3f:7d:c7:78:9b:04:88:90:b9:05:
0f:85:ea:50:4a:63:36:bf:e6:47:b6:8f:f7:6d:07:
62:2f:6e:7d:91:f2:47:f1:37:cf:0e:b7:3e:10:be:
da:c5:02:d0:e3:91:ad:bc:d0:83:ee:21:29:d9:5c:
fd:a0:4b:b7:b4:20:1e:21:b9:9d:7a:a8:6a:bd:9d:
9c:20:01:30:2f:e1:e8:89:f0:1d:6d:f6:c1:99:b2:
2a:d7:b8:9a:b2:fb:08:a8:09:69:16:6d:71:5a:f2:
e0:68:fd:30:4e:2c:b6:06:43:c1:01:1e:e7:cb:bd:
96:33:55:b3:ca:13:b5:43:54:d8:61:ae:cc:1a:64:
32:c1:9e:1b:0d:f3:94:7d:f4:42:e3:a2:90:ef:cf:
c0:48:c8:eb:ed:6a:94:73:62:c7:08:f5:d1:bf:d4:
bf:9a:de:09:c7:9e:33:a6:60:cf:9c:2a:ff:bb:24:
ad:6e:a4:ae:80:bd:db:21:5a:60:2e:57:e2:78:74:
d9:88:0b:03:63:3b:2b:da:38:43:2b:31:0e:26:9b:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:82:E8:03:52:27:4A:27:3B:B0:25:C1:AD:B9:80:8D:F0:86:DB
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:79:c9:dd:c9:1f:1f:46:87:99:fc:35:a9:e8:fa:07:ce:
53:fd:41:30:24:4e:a7:6e:73:d7:20:8e:c4:17:11:b4:4f:11:
03:1b:97:b3:5c:79:a5:16:4d:5b:e1:53:51:36:af:9c:1d:eb:
d9:41:6a:30:3f:c2:5a:0f:5b:3c:99:a8:39:f4:31:1e:dc:44:
65:06:98:ce:62:12:1f:10:f0:54:9c:1e:c7:f8:2e:aa:d4:f8:
f6:50:d6:9e:02:07:6a:a7:2b:6d:cc:37:1d:e1:0c:b1:d4:ba:
17:fc:e3:ae:ea:7e:a0:3c:46:b4:c1:d6:c8:97:d3:08:8c:00:
23:59:b1:32:74:cd:7c:75:ad:76:a3:0a:4d:eb:bd:0e:9b:54:
3e:78:11:7d:cd:d6:70:80:94:94:a1:69:1c:c5:48:44:2c:f7:
f6:4f:c8:6c:14:5b:64:54:18:c7:6b:6f:29:31:03:88:07:99:
db:d4:85:af:28:d1:8d:f0:75:20:b4:d3:ca:72:c3:53:b1:df:
c8:38:4a:b9:5e:3c:1f:3f:79:0e:39:01:c9:fb:77:4a:53:82:
c8:42:8b:10:90:a0:4e:f5:fe:cb:82:ba:50:57:08:69:9c:9e:
0f:8d:34:5b:d9:09:7d:1a:09:eb:3b:78:41:af:fa:59:67:ad:
72:ed:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:50 2026 by rpki-client