Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: bHGxKoJTH3zUV3bFuQ4AfjvvI3a1hF1hMhp0KZIwOTk=
Subject key identifier: 4B:5C:F0:2B:36:A4:72:82:FC:7E:FE:3D:BC:CF:F8:4C:7D:2E:FC:F8
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 019CABA207D75EAC38C5D4317B9E8B3D8B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 08C8
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: CxPpzPB23YnYXR1y+0eMVuUd7OqP3zo0IpXcDsPgRtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:07:d7:5e:ac:38:c5:d4:31:7b:9e:8b:3d:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=4b5cf02b36a47282fc7efe3dbccff84c7d2efcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:21:03:9f:75:3a:4d:10:51:26:23:b0:21:
32:c3:86:bf:16:83:00:fc:33:27:de:8c:e9:7a:f4:
4a:0e:bd:9d:2f:26:50:0f:f4:10:dc:4c:93:b7:75:
a9:18:41:f7:d3:fd:40:c6:f1:b4:b6:d6:20:6f:8a:
d9:13:79:10:66:e0:32:57:3b:f9:f8:72:78:b8:85:
f7:27:98:57:0c:f3:fd:4b:c6:0a:59:80:04:4f:1f:
34:f5:3c:8f:c1:33:ce:4d:8e:ba:49:ee:ea:61:5a:
c5:99:ba:e8:83:89:7e:44:4a:1b:37:ca:6e:d7:07:
03:a0:e6:72:44:89:44:38:50:66:0f:0d:a5:2b:fb:
f5:8d:b1:c7:61:77:10:02:2c:92:b3:12:7c:39:59:
69:a3:d9:aa:b0:30:c5:d4:98:63:85:d9:99:00:55:
27:c1:8c:02:56:89:55:7e:38:85:6e:a4:ef:ac:b3:
24:21:72:42:bf:1a:4e:e0:63:e1:3c:42:43:62:81:
65:c5:10:ab:4a:0d:91:6c:76:79:e3:92:c1:ca:2c:
93:ba:ed:58:6b:78:10:19:6e:56:40:2a:ba:da:9d:
9a:3d:0a:29:e4:d7:19:21:4c:e2:7b:6d:66:70:dc:
48:98:b2:85:bd:d6:be:be:8f:42:68:ed:ea:a3:ea:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:F0:2B:36:A4:72:82:FC:7E:FE:3D:BC:CF:F8:4C:7D:2E:FC:F8
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b7:4e:3c:10:5f:8b:47:ac:17:2a:b1:9d:86:ba:3d:ff:fd:
36:b2:3a:cf:89:eb:e9:f3:56:d2:99:59:a1:8c:ad:fd:29:b4:
fb:38:8e:fe:d0:e2:8d:9d:fa:89:0b:89:3a:93:9a:74:37:36:
6f:b6:de:28:df:4d:47:af:99:03:14:c6:53:69:99:a4:a8:5a:
3d:28:b1:d6:ad:31:a2:64:03:8f:a7:f8:6e:14:5f:de:47:1a:
c2:0b:df:7d:a9:c7:5e:cd:8d:67:df:e8:b5:42:0d:5a:4e:a9:
2d:8a:f3:3d:73:2f:2a:9c:d3:29:8f:57:e9:8d:44:5d:c5:01:
e8:4a:b8:2e:9c:e6:31:76:ad:48:2e:35:cb:41:5b:fa:cf:90:
b0:76:2e:b0:a6:c2:f7:4a:09:4b:4f:0a:5f:f9:df:bf:93:5a:
fa:d3:01:7b:29:d0:d1:b6:1a:9e:31:ee:65:80:6f:87:ed:5a:
0b:50:ac:44:14:a0:da:a2:a1:2d:87:74:fd:16:bd:64:d4:b4:
b2:d5:0c:20:6c:29:64:18:e3:7b:59:37:62:66:28:8e:a2:b8:
96:04:a3:a8:3a:a1:e6:6a:0b:e3:da:e6:70:dd:ac:5f:e5:30:
ac:1e:88:69:50:e7:db:c4:fb:cf:52:c9:b6:e8:32:53:71:f6:
02:3b:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:44 2026 by rpki-client