Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier: 380zHy7AuSdjkosRufZlfUlgWaA4T5CuFnPKr00tqLo=
Subject key identifier: 9B:80:AE:46:74:23:52:D0:79:34:41:EF:A3:A1:76:32:54:A7:16:25
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 019D9818EF62B82C02F63ACF4CD2039FC9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number: 0CFD
Signing time: Thu 16 Apr 2026 21:01:04 +0000
Manifest this update: Thu 16 Apr 2026 21:01:04 +0000
Manifest next update: Fri 17 Apr 2026 21:01:04 +0000
Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: uaaa+Iw0kCN1E2MobfUBpbhvgNjrdUw9SGkCak74Nq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ef:62:b8:2c:02:f6:3a:cf:4c:d2:03:9f:c9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Apr 16 21:01:04 2026 GMT
Not After : Apr 17 21:01:04 2026 GMT
Subject: CN=9b80ae46742352d0793441efa3a1763254a71625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:7f:16:72:ec:ec:21:28:50:bc:a9:bd:35:
69:7f:11:17:ea:1b:82:53:d1:81:e1:15:c5:f7:ad:
67:b7:33:56:39:c5:f1:6b:72:56:2f:62:cb:56:f3:
59:21:e8:69:5a:2a:1d:0c:de:72:05:1f:eb:f6:54:
a0:1f:18:3d:9e:9a:03:ca:2c:a2:7b:f4:47:7d:33:
22:d9:59:39:7d:7b:bd:f6:da:93:86:df:6b:fe:3e:
b1:30:48:68:e2:91:11:a3:d3:18:1c:44:cc:40:d1:
cf:2c:c8:df:37:db:bc:8f:ef:04:e2:41:78:b9:08:
79:0e:59:84:b6:3f:55:28:52:0a:83:42:32:fd:af:
8a:24:15:96:95:56:07:49:5b:bb:15:ca:80:f6:6a:
8c:65:5b:04:1d:22:83:77:b7:c3:17:5d:d5:92:2f:
ff:af:e7:28:bc:19:7e:f8:d2:03:a2:93:17:7b:da:
ed:9d:b2:b4:11:a9:92:94:10:9c:ac:54:77:58:fb:
e6:9a:6f:a2:75:c6:29:fa:2a:39:82:d0:9c:34:c6:
b6:ad:82:20:1d:c2:7e:65:d1:b3:1d:4f:26:2e:79:
b1:51:ef:66:95:aa:ae:fe:f8:e8:05:a4:23:e0:88:
20:1f:eb:9d:b8:c9:94:8a:77:5a:93:99:70:ba:81:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:AE:46:74:23:52:D0:79:34:41:EF:A3:A1:76:32:54:A7:16:25
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d8:6c:ab:48:e0:4f:dc:0e:66:d5:f4:47:31:87:56:07:f3:
c1:01:a4:30:4f:37:61:35:e3:72:61:d0:e4:76:fa:04:21:8c:
fb:b1:1e:fa:85:8d:40:81:e0:7e:d2:9d:b2:ea:e2:4e:c6:72:
78:b0:85:3f:22:9d:c7:63:96:b8:e3:37:af:13:a8:ce:ec:46:
25:f8:cf:3a:36:12:4d:1a:90:0c:8f:eb:cb:be:26:2e:0d:bb:
85:1a:bf:29:d7:e8:d5:0e:ad:d2:d3:40:69:49:f9:aa:47:bc:
66:60:12:3a:77:bb:e6:27:e7:87:c4:c4:44:91:5b:8d:d4:9d:
4d:48:48:8c:cc:8b:b8:c4:46:1b:ce:8d:6c:e4:8c:26:d6:91:
ad:a8:20:77:05:45:a5:9c:a6:82:39:1b:77:f3:df:b6:6f:a8:
7b:a9:1e:50:aa:17:9b:ea:0c:94:72:80:a9:28:24:0b:2a:10:
b2:b5:40:d4:36:69:b5:bc:ad:14:61:73:d4:cb:75:36:5c:25:
73:06:91:86:8b:9e:23:38:b1:bc:70:6e:ba:39:da:db:b1:a4:
c0:3c:d7:15:18:65:8b:f9:35:93:d7:7e:a2:0c:8d:a7:e9:3c:
93:84:5b:2a:43:3b:52:d1:fd:89:3c:89:3e:cd:72:c2:9a:a7:
73:dd:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:34 2026 by rpki-client