Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: +kEzXCMf4k5bQgLPyKd9ACBIqONagm631qJOe6MwCFU=
Subject key identifier: 9A:AC:5B:2B:35:02:BB:70:C8:34:B5:E2:3D:7E:50:DD:56:DF:EF:86
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 019CAA8FD3B4370DD67846EB2AB41A939C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0C82
Signing time: Sun 01 Mar 2026 18:01:18 +0000
Manifest this update: Sun 01 Mar 2026 18:01:18 +0000
Manifest next update: Mon 02 Mar 2026 18:01:18 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: 74iOqSPZs0aqCX7VNMWn6jISncD3r0GehfurXAD7X0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d3:b4:37:0d:d6:78:46:eb:2a:b4:1a:93:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Mar 1 18:01:18 2026 GMT
Not After : Mar 2 18:01:18 2026 GMT
Subject: CN=9aac5b2b3502bb70c834b5e23d7e50dd56dfef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:3f:72:47:21:42:4e:99:11:32:81:eb:21:
c9:40:8c:ba:3a:b5:ae:c8:e6:ac:96:86:19:71:8c:
fa:4d:ab:64:1e:15:1d:ee:5e:f5:2b:36:88:d4:f1:
ad:11:82:66:b1:52:7e:2e:bf:90:a6:f2:bf:c8:5f:
29:f2:64:a2:9d:b0:e7:8e:6d:4f:f9:b7:dd:e4:b1:
d2:81:df:1b:94:0c:c3:48:3a:6c:9c:77:b4:2b:51:
f7:54:1f:e6:73:3a:71:bd:8b:6f:69:74:dd:46:5b:
72:e8:dd:e8:0a:02:71:5c:68:ff:90:a6:2b:00:c1:
58:6c:82:67:84:a0:49:98:09:ae:ff:de:5e:9a:08:
3e:e3:6b:c5:71:1b:81:27:4c:dd:36:d8:70:48:16:
dc:f7:7f:cb:90:e6:92:07:3d:1e:59:62:3a:d9:1b:
be:3c:a4:98:35:f4:97:5e:92:26:41:34:35:eb:ad:
b7:ac:0d:1a:7a:47:2d:4d:db:ac:2c:68:90:cb:8b:
fa:39:de:7a:e8:21:cb:ef:77:0d:83:27:4a:d0:ed:
83:e3:f6:78:30:bd:62:b9:38:5c:e7:18:38:d7:d1:
88:3c:35:27:eb:c4:28:7c:3b:2e:57:b9:4f:f4:14:
17:98:de:f7:b5:4e:4a:d4:e3:df:90:67:39:2e:99:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:5B:2B:35:02:BB:70:C8:34:B5:E2:3D:7E:50:DD:56:DF:EF:86
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:30:9f:9c:82:b6:2d:8e:1e:2b:87:97:0a:7d:bc:1e:40:
5a:15:5b:f0:3d:5d:b6:0e:b0:86:b1:91:77:87:8e:43:e6:b3:
a4:e3:c5:1c:71:dc:c7:bb:cc:9e:76:cc:19:58:3c:94:a1:64:
02:61:ce:a6:6d:f3:d5:2b:70:53:88:fe:35:80:91:98:58:2d:
b8:43:2c:02:a9:d3:86:73:94:cd:bc:80:1e:13:e4:f1:a4:43:
16:3c:83:6d:d9:bc:af:71:83:bc:7d:76:28:2b:39:04:02:47:
ff:37:9b:04:93:e5:1f:09:9c:4d:08:c7:9e:13:68:3c:87:9c:
4e:38:29:88:1b:66:3a:1c:14:ce:31:ce:46:1b:65:7b:cb:1f:
31:cb:71:34:4c:e8:2d:bb:32:91:b9:e7:fc:33:b5:13:b8:24:
d8:e5:54:84:c9:41:61:12:bf:94:0d:c4:67:c6:a4:92:6d:1b:
f8:5c:79:ce:89:64:99:9d:76:a6:b9:04:19:c7:f5:c3:65:df:
bf:02:7a:90:95:ff:f4:3c:4c:59:92:2b:54:04:81:bb:6f:85:
03:71:ae:6a:e0:cf:6b:4f:62:da:eb:49:cb:5d:f4:d8:7c:fb:
8c:7d:92:0b:52:94:eb:65:21:76:12:0c:15:2c:02:85:3f:f1:
90:1b:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:15 2026 by rpki-client