Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: PqprWDe8sZM8bYf/lI7P8fGIYqoD+ZgxQdCTY/ExM+M=
Subject key identifier: 9A:1A:F7:83:64:0F:B1:17:88:AA:8E:6A:DD:32:1D:2B:91:91:50:01
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019D98F4DB26A99ACF237F93EA8053057D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (hash: AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=)
2: p4r9vS1h1xzzjTxiGcnowDuodA0.roa (hash: Sr6fy0bEO4gM1AkbG+qMN/VCnyXUfZs5uUjs30p7en4=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: fQ5uQ6Q/1INO+wTvXs2bxg8/OWzRn5aI5fSv5VAMXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:db:26:a9:9a:cf:23:7f:93:ea:80:53:05:7d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=9a1af783640fb11788aa8e6add321d2b91915001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:42:69:74:00:16:c5:02:3e:34:81:24:08:
48:74:fa:fe:01:26:c5:98:2f:c9:f5:b0:0f:04:99:
5b:6e:fb:a2:4f:75:1a:6d:dc:77:71:69:b6:b5:cb:
8c:05:e4:5d:cb:f1:f5:de:67:85:4a:5c:e4:08:13:
e4:85:43:43:15:c8:6b:29:5b:99:48:1a:1c:c7:09:
09:4e:f0:7d:66:0d:c4:6d:43:43:b5:72:07:93:3c:
c6:12:94:01:a5:8d:a4:9a:ea:09:46:d0:57:c4:92:
a6:ef:26:0a:fd:57:14:c5:04:a9:55:2d:f3:85:33:
c6:53:49:cb:32:93:a1:3e:65:e4:6b:46:82:9a:95:
27:ed:39:ee:79:ab:75:0c:35:45:46:e6:95:9c:11:
8f:33:f4:0a:f8:95:2e:51:05:17:bf:d3:31:18:2c:
ad:e8:b7:ca:6f:13:47:3a:73:f7:53:a7:ee:f6:0e:
de:ed:d4:34:68:3c:1e:41:df:dc:80:67:62:4f:60:
55:ef:c2:88:5b:66:ba:41:95:7c:75:e4:5f:8d:36:
83:3f:ed:2c:54:70:29:1b:65:33:4b:5b:80:9c:6a:
91:dc:84:4a:50:e2:fc:59:d7:ac:9d:b5:fa:bb:6d:
f2:9d:a0:76:66:c0:1f:3a:d1:d4:c2:a9:59:08:a8:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:F7:83:64:0F:B1:17:88:AA:8E:6A:DD:32:1D:2B:91:91:50:01
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:5c:fa:bd:be:8e:65:40:15:be:d3:eb:57:a3:e6:55:ad:
46:14:e8:e1:10:36:6e:2c:76:b6:33:b7:28:3d:a6:c7:b4:6e:
a4:99:67:01:e0:e8:2b:f7:e3:23:87:aa:dd:81:e6:a7:a0:69:
b6:7b:4c:ea:db:95:55:77:5e:4e:f9:81:2e:8f:02:2d:58:b8:
6c:82:b7:7e:f9:38:6d:a4:9c:8f:ec:4c:6c:29:3b:e9:e5:aa:
86:e7:88:22:ad:7b:15:7e:e2:be:91:27:d2:5e:ec:b1:c4:bb:
78:bf:14:ba:f1:55:d7:72:b4:e0:f0:e5:e7:69:d0:3d:5f:fd:
d3:3a:a3:92:8e:ea:76:cb:61:1f:0e:9d:b5:2a:5a:98:7e:9c:
2d:fb:ed:80:41:8b:da:40:39:09:d3:4b:1b:95:d3:ca:09:09:
86:53:10:77:8d:a3:8c:bd:91:e6:ca:94:16:22:05:f7:d7:2a:
a3:3a:d5:c9:c3:2e:c4:b6:f7:5c:9c:fe:e8:cb:45:8a:85:74:
1d:79:82:79:30:27:80:16:55:a5:19:5e:86:a2:40:9a:e7:91:
b3:ef:f2:49:52:fa:a2:06:96:c6:d3:1c:0a:a0:9c:97:62:d6:
0c:20:26:18:09:11:bf:9e:3f:08:e2:5b:0c:53:4b:ee:d7:4b:
68:44:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:18 2026 by rpki-client