
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: kbRo57I5s9lM1MGxF34YaLgF98wnARHq8tQgzozKXpo=
Subject key identifier: BE:AF:24:58:78:59:C6:35:C3:3F:3F:8B:11:C2:BC:D9:41:18:EC:EB
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 019CABD938908297BCCCD9FBD45AF32A125B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: IgRJWCecJMgq8OjH4WDDyy3+knSd0jpeqwPzFZ6xnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:38:90:82:97:bc:cc:d9:fb:d4:5a:f3:2a:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=beaf24587859c635c33f3f8b11c2bcd94118eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:3d:1d:b4:9e:35:73:f0:5b:cb:98:80:b8:
0b:5e:3d:50:e3:3d:07:81:03:dd:19:4c:61:23:5f:
75:27:82:91:bc:69:91:89:9d:bf:a0:44:84:67:72:
58:2e:f4:34:72:41:b9:d2:c8:de:00:77:67:92:78:
fb:d1:f4:22:87:b8:84:92:29:d2:e4:b9:8b:8d:0a:
d8:f8:1e:cf:12:07:14:e0:50:30:fe:1f:f5:f8:34:
c9:de:e6:98:1e:cf:75:d1:79:e1:8f:96:ae:74:8d:
f8:17:af:0d:4f:4b:16:1c:e0:61:cd:0f:9b:e7:70:
f4:6d:e8:0d:02:0d:cf:4b:91:7d:85:d9:c5:8f:3c:
ee:58:37:98:be:ca:a3:15:cc:ec:c6:00:20:02:c0:
21:bb:67:de:58:6c:68:a5:46:2b:a8:94:26:26:3f:
87:49:63:ac:be:c4:dc:a2:84:a0:80:c6:b7:fb:a0:
20:3a:7d:b0:1d:55:5d:0f:42:1e:dc:bd:9f:3d:ef:
d7:98:ca:ec:55:cd:53:d0:4f:0c:03:1c:e8:d0:a0:
36:ba:0d:38:f8:22:6e:26:93:f8:d1:17:5c:3d:bc:
e2:e6:c7:8e:4f:b7:45:1c:ac:ce:28:59:de:40:21:
b6:59:52:6e:fe:dc:ac:73:d8:2d:5c:01:24:a0:e8:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:24:58:78:59:C6:35:C3:3F:3F:8B:11:C2:BC:D9:41:18:EC:EB
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:04:91:a0:f1:a2:85:a5:5e:91:d3:f6:96:bd:d2:0f:63:55:
46:3d:86:a6:1d:47:d7:27:c1:ac:72:2e:8c:6a:05:96:13:4c:
7d:c9:21:5c:56:fc:d2:09:1a:98:2b:f2:cc:cc:8a:e2:2f:7b:
a1:a8:2f:21:18:97:c2:56:a5:b6:e4:9d:d3:b7:b2:1d:a6:be:
41:2d:cc:6e:95:48:4f:01:39:3f:75:b8:ab:15:1f:12:a2:51:
f2:77:de:ec:b7:4f:ff:be:b8:94:93:66:14:0d:de:c1:e5:ee:
ba:26:70:77:35:9e:64:ee:27:43:9f:13:38:2b:36:3a:4a:54:
7a:58:cb:44:35:b1:05:24:9b:8c:ac:ac:e3:51:30:5b:a9:0b:
dc:03:bf:cf:58:bf:b9:d0:de:77:28:21:54:8c:d5:df:d7:4e:
f8:e2:cb:44:f0:ec:fd:f7:0a:a6:2c:7e:ef:c5:1f:5c:5a:cc:
7d:42:71:c6:c9:7c:d5:fd:f6:4c:52:09:5a:ba:ec:e2:27:d7:
ca:b0:68:e1:f2:9c:ef:c1:e3:e1:d9:60:f9:5e:db:cb:a8:35:
ae:ff:82:04:9b:0f:46:ee:2e:70:95:6c:05:58:22:b8:f5:f4:
b0:ff:31:b8:aa:fc:16:60:95:fe:97:04:3a:08:48:40:88:19:
2c:cf:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:14 2026 by rpki-client