Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: IRBzNc1HTd+4/+qN/aqEFMVFYp9ebPugBsyp+DzGeVA=
Subject key identifier: 91:19:FB:49:40:9A:32:2B:BD:4F:49:5E:BE:3D:23:9D:71:29:BE:FA
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 019D273A868A6C0E7844B6A0DA890CCD77D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 0908
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: Z4jRlmfLeiYnuLfOLW3ahmCZjBdvoQocDfrKyo1ZAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:86:8a:6c:0e:78:44:b6:a0:da:89:0c:cd:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=9119fb49409a322bbd4f495ebe3d239d7129befa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:97:72:29:9c:c9:e1:e2:3e:1c:41:eb:6a:
b1:af:3d:3e:6b:38:e3:a3:47:21:b6:e6:be:04:df:
b3:9d:f4:e5:02:22:0a:68:6b:3c:5b:50:8e:8e:04:
16:1f:70:35:8a:bf:ea:44:b4:80:a0:27:9c:1c:27:
72:1c:fc:6f:98:74:c9:be:73:70:30:a0:82:3f:a1:
40:bf:92:0d:ab:71:9d:05:d5:a2:28:75:44:76:c6:
f0:9f:45:ca:41:b4:cb:d9:be:d4:c3:04:31:09:35:
5f:ba:1d:9c:ab:30:ff:43:9d:bf:b7:28:12:b9:c1:
30:b0:5f:2d:2d:d3:8b:37:c5:1e:b7:2a:04:f5:ba:
85:c7:df:22:a8:1d:a1:26:d9:a9:2c:31:82:55:8f:
c1:bd:93:27:3f:b2:ce:4d:c8:af:fe:2e:79:5c:34:
73:3c:82:ec:18:fa:32:d0:17:57:7b:a2:26:63:41:
62:10:ee:27:ef:0c:87:c7:db:ad:e5:a2:73:93:6c:
7f:42:a1:e5:70:ca:73:a2:d1:e0:c9:b6:73:dc:89:
91:46:44:02:32:c1:f7:39:74:e2:83:4c:0b:15:67:
40:5b:62:b7:7f:0e:7f:3f:66:ea:bd:a1:28:62:ca:
1b:16:6e:4d:65:33:f3:ab:f1:d2:e2:c1:53:13:20:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:19:FB:49:40:9A:32:2B:BD:4F:49:5E:BE:3D:23:9D:71:29:BE:FA
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:39:89:12:c1:4f:e6:c5:85:8e:fc:38:ce:c8:8c:e9:56:cc:
d3:de:66:14:f0:26:43:ba:dc:8a:08:11:c4:f0:5b:64:44:b3:
36:03:c2:f1:a4:12:c7:27:ed:ec:f8:9c:f4:21:1f:31:54:19:
88:9d:33:b0:9b:40:27:24:c0:65:da:c5:99:f7:24:51:2a:23:
ab:8a:a7:f7:1a:de:aa:d5:82:55:a9:0a:da:e2:78:ee:65:bf:
28:9b:65:fb:29:bc:33:36:bb:c7:43:33:d5:f0:4f:79:14:0c:
0a:ce:09:92:15:e8:55:fa:1a:8b:d4:08:fa:35:92:f4:7b:ad:
8f:ca:74:e1:ab:26:d6:83:ee:99:c1:ad:0a:9e:6b:3c:1b:15:
ea:82:0a:89:2a:5f:2d:1a:e5:ce:5b:5c:9d:6e:5e:e5:39:fe:
68:72:18:7d:6e:ed:75:56:85:ce:0b:6c:13:3d:1d:45:09:20:
b8:d0:35:aa:4a:f1:0c:22:62:eb:37:3e:1f:9d:7d:e2:1b:64:
3e:82:f1:e1:66:db:c5:ed:8a:82:3a:9f:67:03:1a:b2:e1:d3:
a5:02:b3:45:77:b6:9e:d7:20:f9:16:27:18:10:9c:43:86:9a:
31:6a:4d:07:f1:e4:76:18:c2:eb:35:72:76:ec:c1:f1:b1:7c:
96:6d:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:23 2026 by rpki-client