Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: eUQ7jxGLHajGjfw4eCc944l+FQpuzkZyPad6aTIcmJg=
Subject key identifier: E8:C3:DA:CE:46:5C:A5:10:03:D2:CC:7E:25:7E:FF:4B:37:5D:FE:99
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019CAB6AC9B03D5D4AF8398462996ACC851E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (hash: AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=)
2: p4r9vS1h1xzzjTxiGcnowDuodA0.roa (hash: Sr6fy0bEO4gM1AkbG+qMN/VCnyXUfZs5uUjs30p7en4=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: INBXUWcgsiXwtHoCvt2ZftMr9q3WqGl94aWa6WYtB0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c9:b0:3d:5d:4a:f8:39:84:62:99:6a:cc:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=e8c3dace465ca51003d2cc7e257eff4b375dfe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:5d:a0:1d:0b:44:f0:46:4a:cd:bb:15:13:
17:87:c5:39:9b:79:5f:e6:61:3d:32:73:02:ea:37:
49:6c:5e:18:3f:10:83:2a:60:e4:87:48:36:09:9e:
8d:65:65:53:26:82:be:95:73:30:0e:99:00:63:e4:
88:27:f7:09:6a:b8:53:98:5a:28:21:ec:19:de:6b:
29:c3:c9:22:3d:5d:fc:2d:c7:74:ce:30:9f:46:ec:
be:ee:ff:b1:95:c1:c8:e7:50:7c:3d:a6:6f:01:08:
61:df:15:95:69:93:ee:f9:60:84:a4:dd:6b:f0:4c:
5c:4a:d6:bc:a7:ae:a5:6c:e8:49:e6:46:cf:f0:7b:
c7:0b:d1:66:1b:75:fe:b2:58:57:32:f6:08:e0:e8:
90:74:99:f3:d2:77:80:e4:2a:1c:c4:8b:71:73:16:
9e:3b:f0:37:78:53:ae:85:b8:df:4b:fa:8d:3c:5b:
01:0b:db:70:5f:82:c2:83:08:87:13:5c:53:59:ba:
9a:81:cb:cb:2a:87:38:f1:16:ff:f6:63:e8:a6:a9:
5c:6c:74:b0:b7:21:77:ca:4b:27:d1:1b:0e:e7:7f:
9c:a8:24:4c:44:63:16:12:3e:97:fd:9a:05:a3:aa:
6e:b3:78:2e:a8:8c:f8:6e:45:86:9a:2f:5a:73:98:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:DA:CE:46:5C:A5:10:03:D2:CC:7E:25:7E:FF:4B:37:5D:FE:99
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:f8:58:a7:cc:4d:73:2f:14:f2:9c:09:5d:89:3a:11:60:
0e:1b:e1:05:45:f3:73:b7:2c:49:fa:70:97:33:dc:71:d0:ec:
43:35:0e:b9:e6:e7:55:14:e8:e4:0c:a2:cd:8d:e3:d1:cd:87:
f5:9a:69:11:31:fe:de:59:2f:c4:6e:52:96:e4:67:21:43:61:
c8:65:3c:a5:bf:f4:84:fa:6e:4f:fe:a8:48:bc:65:73:1c:03:
37:21:f0:b0:4c:df:a9:ed:a5:24:6b:09:22:d9:b2:1b:95:b5:
2d:42:40:5f:6c:90:21:9f:d0:49:5a:fe:87:4c:02:07:87:b1:
bb:75:b3:06:38:e1:b2:c6:90:e5:4c:69:1f:94:a0:7e:66:5e:
82:74:7c:bb:e0:c4:fb:e3:75:9b:82:a2:cc:9c:7c:77:33:4d:
dd:e3:59:8e:fb:f6:c4:aa:ec:9e:c8:c8:54:f2:22:2d:fb:9b:
e8:56:8a:91:ef:e4:57:aa:1c:1e:54:62:f0:77:e1:2e:20:83:
c1:56:f8:d4:91:62:52:15:b5:9d:e2:0e:73:a6:57:da:39:f5:
9a:b8:a8:36:ff:d8:21:15:24:bb:ad:8d:d1:5e:21:c6:79:83:
a3:5d:ac:73:ee:0a:2b:1a:d2:29:42:15:aa:58:ff:26:e5:15:
17:a8:9d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrasmwPV1K+DmEYplqzIUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjYwMzAxMjIwMDI4WhcNMjYwMzAyMjIwMDI4WjAzMTEwLwYDVQQD
EyhlOGMzZGFjZTQ2NWNhNTEwMDNkMmNjN2UyNTdlZmY0YjM3NWRmZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiFdoB0LRPBGSs27FRMXh8U5m3lf
5mE9MnMC6jdJbF4YPxCDKmDkh0g2CZ6NZWVTJoK+lXMwDpkAY+SIJ/cJarhTmFoo
IewZ3mspw8kiPV38Lcd0zjCfRuy+7v+xlcHI51B8PaZvAQhh3xWVaZPu+WCEpN1r
8ExcSta8p66lbOhJ5kbP8HvHC9FmG3X+slhXMvYI4OiQdJnz0neA5CocxItxcxae
O/A3eFOuhbjfS/qNPFsBC9twX4LCgwiHE1xTWbqagcvLKoc48Rb/9mPopqlcbHSw
tyF3yksn0RsO53+cqCRMRGMWEj6X/ZoFo6pus3guqIz4bkWGmi9ac5g0SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjD2s5GXKUQA9LMfiV+/0s3Xf6ZMB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpf4WKfM
TXMvFPKcCV2JOhFgDhvhBUXzc7csSfpwlzPccdDsQzUOuebnVRTo5AyizY3j0c2H
9ZppETH+3lkvxG5SluRnIUNhyGU8pb/0hPpuT/6oSLxlcxwDNyHwsEzfqe2lJGsJ
ItmyG5W1LUJAX2yQIZ/QSVr+h0wCB4exu3WzBjjhssaQ5UxpH5SgfmZegnR8u+DE
++N1m4KizJx8dzNN3eNZjvv2xKrsnsjIVPIiLfub6FaKke/kV6ocHlRi8HfhLiCD
wVb41JFiUhW1neIOc6ZX2jn1mrioNv/YIRUku62N0V4hxnmDo12sc+4KKxrSKUIV
qlj/JuUVF6id6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:26 2026 by rpki-client