Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: 8xPPseAbibgaaeiupTUdHKIkJV3f46I+kfzuFj0zsww=
Subject key identifier: 7E:7F:49:D2:6B:CB:FC:DF:7E:11:BE:70:B4:2F:E1:F3:42:81:46:6D
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019CAAFD7ACFCF75C831033F2A810C572876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 091A
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: 95LNelvbvLFUYAJ1gS_rBtJtHic.roa (hash: db9YjHMqlxf9CY0aL1oyvS+hqxV9ZfWgOQGqx8Y1J3w=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: Mlmu3DRaxWT/FS7WJX9TPLhqA5i5wWScm/Mwe1bJerg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7a:cf:cf:75:c8:31:03:3f:2a:81:0c:57:28:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=7e7f49d26bcbfcdf7e11be70b42fe1f34281466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:18:2c:e4:84:7c:24:eb:79:61:c7:f0:04:
ce:11:e1:f9:25:44:15:db:aa:8c:68:95:f3:e2:ea:
b3:79:a1:52:3f:db:31:82:ae:2c:d2:b4:29:8d:d4:
ed:d3:5d:33:35:19:cc:e8:3f:1f:0d:42:fa:34:86:
bc:d1:a2:08:28:70:24:1f:b6:85:40:92:f7:b2:ee:
16:81:53:52:26:b5:29:f1:6f:2f:c0:97:54:4d:76:
b4:8e:9c:66:5f:00:22:5e:38:85:ec:98:4e:13:5d:
5e:73:bd:87:b3:c8:36:53:f9:37:fb:c4:1e:13:a8:
32:66:61:ac:04:95:e2:f3:ce:0d:69:57:7a:c1:b2:
eb:da:0f:28:3e:ee:e2:41:a8:26:f2:24:96:6b:61:
02:d1:5e:a9:ad:1b:cd:c5:cd:2d:cf:e5:65:2f:98:
35:fd:27:e7:64:e5:2a:e8:59:cb:70:27:96:d6:9a:
1c:ae:28:8a:0f:ad:f7:22:d4:04:b0:94:cb:a4:74:
75:f1:40:53:ec:6f:8f:06:95:b9:cf:9c:d1:e6:ef:
52:fc:66:6e:6e:b9:79:8d:45:4b:13:49:07:4a:48:
3a:81:e0:98:05:cd:04:a6:dc:9b:b7:61:d8:10:dd:
80:13:e4:9f:7d:2a:40:2e:9c:a9:c6:9d:16:d8:f4:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:49:D2:6B:CB:FC:DF:7E:11:BE:70:B4:2F:E1:F3:42:81:46:6D
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0b:cd:c1:45:73:45:64:9d:58:df:c0:ff:f8:74:d5:30:21:
0c:0d:1b:d2:98:5d:bc:9f:80:54:b6:7c:f3:b1:8b:89:53:62:
9f:36:42:e5:2a:88:ef:2b:b0:c1:c0:c8:e9:28:4d:53:9f:29:
78:b2:d3:86:21:7f:df:9d:6f:19:b4:40:bc:e1:07:f0:9e:02:
95:a1:ce:e4:c0:87:51:a4:ed:11:90:e8:07:7f:fd:0c:75:57:
45:5f:72:da:d9:87:22:24:71:6b:2e:21:f1:1e:3f:58:da:e3:
13:ae:b9:ec:53:52:7c:09:cc:3e:65:3f:09:ec:b5:c6:99:0e:
4d:fc:2d:0c:48:a3:87:87:0c:8f:fe:ae:c6:fc:0b:6b:12:5c:
59:77:0e:27:89:90:20:01:af:85:02:fd:f4:a2:a4:68:78:7a:
e1:51:12:b2:3d:4e:e3:ad:3b:1d:0e:35:60:19:5e:f7:2e:d2:
33:00:8c:80:f4:b6:b5:18:3e:7e:a1:57:cd:49:b0:73:02:3e:
62:de:79:a5:79:a0:d1:54:16:5e:02:ad:7f:35:74:eb:c8:ee:
3d:ff:1d:40:a9:f8:57:eb:fe:aa:67:de:a2:8b:87:00:16:8d:
b7:b0:8c:0a:db:2b:a4:fe:bb:fc:59:88:a7:8b:9f:72:21:44:
12:a9:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:37 2026 by rpki-client