Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: EfLgrjQuSHpffYvBF4j0vLRm8tHjlVnsElCGC8UijUw=
Subject key identifier: 47:2A:B7:1D:68:A3:8E:60:4D:77:B2:3A:27:0E:B9:37:B8:53:07:54
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 019FAA509CE08FC67CAA78FDCA0644A9B143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 0A55
Signing time: Tue 28 Jul 2026 20:00:37 +0000
Manifest this update: Tue 28 Jul 2026 20:00:37 +0000
Manifest next update: Wed 29 Jul 2026 20:00:37 +0000
Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: sFlASW5NHNfSWkzt6cQF6agINYKuYcIm08LPMNNvTJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:9c:e0:8f:c6:7c:aa:78:fd:ca:06:44:a9:b1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Jul 28 20:00:37 2026 GMT
Not After : Jul 29 20:00:37 2026 GMT
Subject: CN=472ab71d68a38e604d77b23a270eb937b8530754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:13:0b:ba:bd:ed:ef:df:23:70:52:08:28:
21:2c:04:68:8a:6e:ee:34:91:ab:06:33:98:cd:a3:
a2:77:f3:4d:8f:c9:c2:e0:c0:ca:c7:8e:69:c5:8a:
71:dd:15:07:5c:98:40:01:86:61:c5:5a:cc:e0:f8:
9a:78:4a:f9:11:2e:eb:67:eb:50:4e:cf:e3:a9:cc:
b9:fb:f5:cd:71:5d:f9:e6:c6:6c:5d:ef:eb:e5:e9:
a5:4e:5d:31:59:ae:18:a1:c1:68:36:71:8d:3f:40:
ee:c4:8b:0b:e5:e3:58:c8:34:a1:b7:3c:54:9e:b0:
4b:fd:52:35:8c:c9:32:ef:c8:92:32:f9:b0:46:84:
b6:eb:1f:49:16:7d:4c:20:17:91:64:a9:88:6c:e2:
44:f1:7d:d2:3b:60:d4:b2:18:2f:e4:76:de:86:ac:
cd:64:7d:d1:1b:d3:59:88:71:d5:f3:67:7c:40:56:
70:2a:fb:62:18:7d:61:13:90:5e:fc:b5:5b:86:ad:
14:16:59:e2:58:1b:41:49:66:7d:4e:8a:cc:54:76:
56:43:1b:da:c6:e5:96:6d:bf:22:a3:79:a9:72:2b:
74:de:3a:5b:2a:6f:93:28:3c:a1:76:0f:9b:8d:6e:
ba:4c:cb:64:ca:65:84:8f:70:a1:fd:bf:75:4e:ff:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2A:B7:1D:68:A3:8E:60:4D:77:B2:3A:27:0E:B9:37:B8:53:07:54
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:ef:88:f3:76:77:c1:ff:9f:54:8e:b9:cb:8e:1b:4b:21:
1c:14:00:fa:e5:d6:fc:b3:2d:d9:a7:34:3b:fa:dd:f9:c9:fe:
a3:80:c1:56:34:5e:44:c4:a7:1c:56:a5:29:bf:1d:fe:c7:a0:
74:fd:33:05:10:15:bd:a1:11:1a:6f:e9:3e:b6:bb:40:cb:fe:
f5:e2:74:bc:33:6e:18:34:f6:a9:8b:e2:25:81:22:0b:c6:e9:
57:06:e1:94:45:71:04:9a:63:52:a9:ba:6f:49:6d:55:3b:b1:
6a:3d:2b:cc:9c:c7:27:d3:52:ed:6b:48:65:2b:03:9c:07:c8:
67:4b:a2:30:b8:78:1a:f0:4a:71:a1:8e:a6:2c:2e:8a:59:8d:
9d:53:74:24:31:80:78:48:e0:f7:71:a8:6c:31:1a:15:a2:27:
e4:c0:f4:0a:c2:b4:89:c6:a6:ca:86:f6:88:99:57:af:4c:30:
69:7e:72:b6:4a:3e:45:92:c2:fb:03:b5:1a:bd:b8:1e:95:bd:
2c:45:8f:9f:53:10:a8:eb:d2:da:13:5c:12:63:a1:36:94:a7:
73:d2:9d:50:cc:80:e9:5d:c6:a6:2f:82:61:fb:50:0e:05:46:
be:6c:ec:28:d5:82:fd:c8:d4:01:8c:14:c9:91:7d:5e:b1:ee:
ac:bd:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:42 2026 by rpki-client