Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: BzyfXsQMDJZHViteER759sHDgpBgyfi3GLPWqm/i+kg=
Subject key identifier: 4D:24:99:B8:6F:A6:F3:F8:AB:F7:FA:3F:C9:62:F4:97:56:72:00:74
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019D27047C18FB36318959EBF9721909712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (hash: AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=)
2: p4r9vS1h1xzzjTxiGcnowDuodA0.roa (hash: Sr6fy0bEO4gM1AkbG+qMN/VCnyXUfZs5uUjs30p7en4=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: 4Y++yYb9c+C2g5iCqchMo8V6ddn22kgsmBJ+4J9KKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7c:18:fb:36:31:89:59:eb:f9:72:19:09:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=4d2499b86fa6f3f8abf7fa3fc962f49756720074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:d7:a1:c8:83:98:78:a6:84:59:b6:97:70:
8c:f0:bb:6a:5d:b3:a2:82:10:43:93:01:aa:44:10:
56:10:54:d2:8a:6a:ed:43:2c:6a:ab:d6:35:02:59:
cb:ad:34:9b:40:a8:86:2d:ca:74:26:0e:33:d9:8a:
06:7e:2a:c9:56:c6:45:8b:ff:97:73:a7:9e:4f:70:
a3:57:66:15:b5:2f:fa:8b:69:e3:28:9b:87:35:7d:
1f:a7:4a:b5:6b:04:a5:2d:ac:4d:4f:b8:88:47:7a:
5c:2b:b4:68:61:4b:7f:88:45:9f:61:b4:09:19:3b:
64:d5:81:bd:b2:5a:d4:fe:40:74:b8:4f:8f:49:af:
ed:8d:3a:67:88:ed:54:d0:81:e6:f2:6e:6b:53:fc:
75:c5:1f:70:be:74:3d:49:03:a9:2e:48:86:9a:a8:
4f:4b:ee:32:38:a4:c2:30:21:72:ef:16:a0:d9:1d:
bb:b0:b0:8e:d9:4b:87:ae:f0:35:c3:8e:5d:16:a0:
05:8f:1a:7c:ca:0d:2b:12:15:fb:76:23:b2:c0:b2:
0b:d1:4f:b4:2a:35:c8:6f:29:3d:85:b8:66:54:0e:
b7:21:60:00:a7:d4:9a:b9:8f:4a:5d:e4:54:6e:e7:
12:1f:a8:f4:2c:bc:3d:5e:e1:d0:fc:ca:8b:24:71:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:99:B8:6F:A6:F3:F8:AB:F7:FA:3F:C9:62:F4:97:56:72:00:74
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:de:ab:36:ec:e0:4b:0b:67:97:de:3d:4e:72:b4:12:54:ea:
b1:1f:0f:37:0c:a7:5c:78:7e:cc:94:ed:25:cb:07:1d:e0:f3:
79:f8:02:dd:79:4d:36:76:b4:99:c6:99:b3:0d:af:02:96:11:
0d:01:b3:8d:54:fa:7e:49:d6:81:c9:6b:75:3d:d0:7b:72:4f:
22:e3:a0:ad:a1:96:19:7b:da:8d:cb:ff:dd:3c:7c:26:7f:47:
9c:9b:fb:1a:f4:9a:3e:e0:49:12:13:9c:d3:1b:14:9e:39:90:
27:b0:10:b3:7c:fc:e7:87:37:59:0f:a8:78:db:6a:15:22:00:
1b:55:99:85:4a:63:e3:7a:fd:55:ff:de:1d:ae:7f:fc:ec:be:
0e:6d:33:3a:b0:24:2d:18:ad:1e:56:e3:d1:82:ad:74:61:b5:
41:2e:fb:7a:99:f3:50:25:b2:2d:e6:01:63:ba:c5:28:86:49:
72:76:ea:ee:47:4a:62:6d:24:b6:9e:a5:b2:a9:6c:1d:12:cb:
e2:06:e5:a0:30:5f:86:85:81:b8:62:74:b7:86:48:77:ec:fa:
ee:e3:7a:77:4b:4d:ae:0a:1c:49:54:b2:e3:86:49:be:e9:16:
6a:7f:ed:02:4a:1c:6a:aa:41:74:dc:56:1b:3a:a1:8d:d1:91:
da:0b:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:33:34 2026 by rpki-client