Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: K6Tq2bnE7PgH+PeN0g4qTS9jNexx7xamLAi9WuaYCpQ=
Subject key identifier: 71:B4:44:61:26:6B:5C:F4:21:98:95:64:FC:74:80:1C:4E:5E:9E:E1
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019CAD22708F27D6F20E9E96CE712A27A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 133F
Signing time: Mon 02 Mar 2026 06:00:41 +0000
Manifest this update: Mon 02 Mar 2026 06:00:41 +0000
Manifest next update: Tue 03 Mar 2026 06:00:41 +0000
Files and hashes: 1: IVBEKag0frypxKB-vW5lFvDvCAA.roa (hash: 447CZkHLo9a1tRRUCz9HzrzeTGwsKjSaaw1dv0lgZHU=)
2: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: OvuVeuxq/ANsLoYxOVx/y6nGeEENYLDtZMcZXTraRJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:70:8f:27:d6:f2:0e:9e:96:ce:71:2a:27:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Mar 2 06:00:41 2026 GMT
Not After : Mar 3 06:00:41 2026 GMT
Subject: CN=71b44461266b5cf421989564fc74801c4e5e9ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:8f:16:62:6d:67:50:3b:c3:67:f3:d0:40:
db:53:73:88:b9:9d:34:84:97:a4:94:f6:e4:87:29:
28:b9:5d:4a:15:79:a5:0e:da:59:46:66:f8:b2:3f:
93:b2:9c:99:e4:8b:1a:4f:6f:fc:1f:09:b4:b7:45:
fd:6a:fd:8a:e4:b0:21:35:12:20:9c:57:a7:71:56:
3d:df:fc:d0:2d:61:ce:ca:48:1b:15:7e:0e:b5:34:
a0:a1:e8:e0:a8:9b:1d:63:f6:e1:8f:65:94:ef:cc:
80:f1:99:6e:a6:9f:d3:70:61:71:da:88:d8:fe:b7:
96:42:71:90:bb:02:f7:94:7a:c3:79:d5:3e:29:6d:
f9:1e:e0:93:a6:ae:5c:57:cf:d6:75:db:00:b0:8a:
93:3f:00:b2:3b:a7:d6:83:e9:80:35:35:f2:36:7a:
fa:bd:95:3b:d4:08:25:68:3b:69:56:7a:3e:29:cd:
91:e5:71:b9:31:64:6b:a6:5c:76:33:b2:d5:b9:ef:
94:31:7b:a6:14:f4:30:5c:ea:15:81:f0:df:f8:32:
ce:e3:8c:f8:04:c5:58:26:0a:72:ad:1e:e8:b3:bc:
88:ef:7c:a0:15:0c:23:cc:3d:81:49:cb:87:b2:6a:
d3:56:89:c8:65:41:7c:73:d4:44:cf:eb:9d:78:54:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:44:61:26:6B:5C:F4:21:98:95:64:FC:74:80:1C:4E:5E:9E:E1
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:29:7a:00:a0:3c:2a:5f:01:95:11:41:41:e1:cf:43:8c:
d2:5b:74:41:50:42:f1:6c:04:d4:5f:92:cb:d7:76:45:87:cc:
09:c8:3e:f7:7f:ba:4f:3a:06:ca:95:01:19:59:da:47:9c:1f:
d1:9c:41:6f:b4:59:8b:b5:9f:99:e2:33:45:c1:23:4d:14:ca:
58:54:f0:5d:66:5d:f4:6a:1e:f6:e8:b7:65:87:f4:fb:f9:83:
9d:42:82:83:51:c9:3e:82:6d:70:0a:9c:1b:c1:a9:06:b8:e6:
b8:44:dc:ec:39:4b:06:2b:25:7b:72:89:40:78:b6:34:d2:ed:
b2:44:57:67:d7:d3:4b:09:47:69:31:4c:d8:37:ea:da:3b:0b:
36:67:54:5c:c5:e8:e0:ad:e3:12:18:e4:bf:8a:e0:b5:97:09:
81:90:12:f8:b8:8c:37:f5:73:f4:bf:a2:57:8a:e2:0c:a0:81:
a5:ba:58:b0:2d:75:a4:21:1a:87:cb:e6:2c:d5:7f:3c:cf:14:
26:95:f1:c5:26:46:1a:75:0d:ab:74:ed:43:5f:6b:90:46:2b:
13:d0:b4:df:7d:ef:fe:a7:f8:a7:76:a4:c5:be:05:c0:53:f6:
09:a4:78:7f:07:4b:91:97:79:4e:5c:77:cf:bb:5d:ef:e0:be:
0d:93:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:36:49 2026 by rpki-client