Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: A+Q8BHfiOtTGSlDSnFsy01cqzF6uaGedKOrpDX4KhEU=
Subject key identifier: 88:8A:D1:B9:B1:4C:5A:9B:37:A4:F0:7A:D8:4E:D8:B2:6E:80:A1:B7
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019D284E3E392A69412652B9F331932B33B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0FAF
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: GbkvPI-kmfONtAuGoBOu2GW8-74.roa (hash: 2EzOh6hlkAJ6PDMBXoH3PL6bxWAgOzm9d8AoyksEql4=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: GSAppNT2C/dOozXHo9EzNILfkoKKL6qndm3zvRQs1Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3e:39:2a:69:41:26:52:b9:f3:31:93:2b:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=888ad1b9b14c5a9b37a4f07ad84ed8b26e80a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:8d:69:1f:7d:f6:84:5f:42:2a:36:d9:c6:
04:e5:d2:6b:78:07:f3:d5:c2:e3:29:ff:6d:01:1b:
e6:9a:a7:cf:ec:11:80:bf:7c:51:99:ac:c6:c0:62:
b3:9d:c3:b3:49:58:db:22:d5:93:af:fe:64:ef:bb:
56:ee:2a:7c:d8:26:7e:30:ad:b3:97:50:fb:39:0e:
4e:16:37:04:0e:45:59:1f:f2:20:1b:3c:da:3b:9e:
82:99:2b:91:4b:22:f0:ef:64:a0:2e:5a:ae:e9:a9:
4d:57:48:1a:56:ab:fa:ff:f1:b1:4d:a9:85:90:b6:
5c:47:b2:5d:59:be:ea:ac:cb:96:62:94:c6:83:ee:
e2:7e:47:5e:b6:4c:cd:04:0a:dd:35:a9:fb:8e:a0:
71:64:60:e9:bf:4b:5e:c6:11:46:b9:35:f6:0a:4f:
8c:24:6a:32:03:d4:a6:a5:28:a3:a0:8e:09:3f:8e:
3a:26:48:c3:04:a0:64:20:b9:65:07:c2:4f:db:9c:
12:10:77:23:c4:c5:39:fc:a0:f9:55:65:0c:07:39:
f8:a2:30:5b:dd:51:35:f6:7e:cf:d7:97:87:d2:74:
84:ed:ae:1f:c0:f3:c6:e0:ef:9c:f7:fd:dd:db:32:
27:76:36:d9:7e:fe:81:53:8f:57:c0:1d:d9:3a:90:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:D1:B9:B1:4C:5A:9B:37:A4:F0:7A:D8:4E:D8:B2:6E:80:A1:B7
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:8c:77:32:62:f4:93:50:20:ca:d6:c2:98:e5:3c:25:b6:
60:11:d8:3a:9b:49:e8:fd:8e:7c:f2:66:a4:6e:0a:11:7a:3d:
3b:30:21:a5:f8:65:85:3d:3d:77:88:65:65:7a:9e:ca:8e:fe:
43:87:25:ba:40:2c:35:ce:16:5f:0a:bc:23:92:94:db:ca:86:
41:30:57:5c:f7:79:33:9f:97:03:68:ff:a3:46:fd:ca:03:37:
c4:e5:b6:15:8a:76:49:b6:96:e7:50:38:11:d5:d1:b1:8a:d3:
6c:92:10:b2:11:cc:bb:bf:c5:b3:5a:b7:94:47:3d:95:9c:21:
a3:4d:33:a2:05:d2:85:8b:4b:80:1d:7e:2f:e2:d1:04:0a:52:
7d:72:ac:4b:ed:5e:dc:a1:94:3e:e7:d2:28:fc:bb:79:2f:66:
dd:ff:c8:68:07:7d:05:f4:7e:b3:8a:54:6a:5d:68:91:9b:ac:
eb:1a:dd:e5:0c:5f:71:a4:a2:93:00:9f:cd:70:55:b6:af:7d:
f1:11:0d:fc:59:4d:ab:06:5e:5b:e8:1b:4a:98:f5:1e:b1:35:
9f:38:34:be:87:86:e4:3f:a3:bf:27:f7:d9:fb:8d:d3:66:43:
5e:4e:79:e4:48:49:2d:36:99:2e:da:e4:2e:76:14:cf:3f:d8:
03:d8:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:51 2026 by rpki-client