Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: j5qkRzI1mBKtVr2F01vjp9KrM3tjcDAVeQEevXkXiyM=
Subject key identifier: D8:91:81:77:CF:45:33:1E:03:DB:CF:1C:42:3F:C9:78:EC:9D:FC:77
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 019D9B19FF07E5E76DA73C142AA6D1ADE135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 0944
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: Y+H3Ttlt3G+LpSdlwm883GGUxWYciH5W/qLLhjoxNOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ff:07:e5:e7:6d:a7:3c:14:2a:a6:d1:ad:e1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=d8918177cf45331e03dbcf1c423fc978ec9dfc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:c4:74:f3:1a:77:fe:e7:eb:6d:77:69:3d:
74:7a:1f:1c:b4:ef:df:c3:0b:b5:0f:22:e3:e6:7b:
e4:f8:56:cd:ed:a1:a1:d2:4c:b5:e7:a0:1a:47:0b:
25:f9:a3:28:e3:0b:47:9c:0f:ef:f4:58:ae:36:ff:
e0:3a:e6:9b:e6:fa:01:f0:da:46:a7:6d:e9:61:01:
f4:12:75:0a:6c:d3:0b:48:c6:2f:71:80:b8:81:fb:
20:d7:7f:77:63:6e:fc:ba:5a:f4:fd:93:8e:7d:fd:
76:fe:34:7e:0c:af:52:fe:de:11:40:10:9b:17:6c:
8f:06:84:42:43:9d:12:ee:c1:cc:49:b4:81:b6:6d:
cd:93:11:b6:b9:93:2d:49:ff:35:47:70:fc:36:f3:
c4:af:ff:81:10:60:c0:32:9c:4c:32:a7:cb:e0:51:
af:b3:22:a3:b8:4f:ae:b9:7d:08:3c:9b:b7:d9:ab:
8a:04:07:3f:81:8e:5a:46:85:cf:f1:93:0a:04:4c:
60:b8:cd:43:7c:aa:76:0b:43:d9:3f:7f:46:33:40:
f6:0c:2b:b1:bf:b7:de:c5:d5:8e:f2:d4:60:fc:63:
f0:47:71:33:7c:91:66:00:5d:b2:3c:b9:df:60:6e:
6d:ef:d6:14:79:b8:be:2f:42:e3:23:8e:ab:13:2d:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:91:81:77:CF:45:33:1E:03:DB:CF:1C:42:3F:C9:78:EC:9D:FC:77
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:bf:b5:e0:1f:d6:8c:dc:9d:3d:2e:e0:9a:61:c6:22:1e:
3d:c5:05:e8:23:75:9e:ec:11:84:c9:b1:d5:1b:ac:58:3e:c7:
29:ff:31:41:92:8d:61:43:f0:a8:ed:e1:b8:7e:28:f2:cc:4a:
27:d2:55:62:2b:f8:f9:dd:f7:6d:75:41:28:32:23:2a:74:72:
1f:28:8d:21:30:b9:71:9d:da:5a:98:4e:bc:89:06:39:08:b9:
96:8d:f5:49:22:f1:f5:70:4f:43:54:c0:b0:3b:1b:32:75:21:
db:56:96:19:6a:7c:a3:47:b5:14:60:b2:f5:9f:b6:9a:a3:aa:
fe:75:4c:b0:d0:16:21:cd:c2:8b:6c:af:f6:95:98:10:62:61:
b3:17:74:46:f8:b6:18:43:ed:81:ba:f2:9d:15:b3:61:d9:f1:
92:59:56:94:62:8f:65:ff:97:79:ec:ff:2f:87:c9:63:04:de:
11:fb:5f:20:44:76:52:b7:02:91:8f:46:45:c5:c2:2e:be:c3:
a1:cf:23:66:2e:54:5f:f2:20:61:9c:af:0f:29:5d:6a:c3:43:
87:22:dd:c0:0a:ea:48:7d:cb:eb:45:43:2b:ab:70:fe:4a:59:
63:d8:2e:8a:2a:c9:28:1a:8a:81:b4:00:80:b1:7b:27:c9:42:
3b:39:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:20 2026 by rpki-client