Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: Q5acJ8JkpFASO86IYGkWgdONtFymp4e2aC1JSKwWAUM=
Subject key identifier: 27:CB:51:C4:84:A7:28:A7:9E:80:F2:34:96:C0:45:4D:5A:B7:A9:29
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019D2AA9D8BED91A6DAD8CB65192A4269ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 1380
Signing time: Thu 26 Mar 2026 15:01:07 +0000
Manifest this update: Thu 26 Mar 2026 15:01:07 +0000
Manifest next update: Fri 27 Mar 2026 15:01:07 +0000
Files and hashes: 1: IVBEKag0frypxKB-vW5lFvDvCAA.roa (hash: 447CZkHLo9a1tRRUCz9HzrzeTGwsKjSaaw1dv0lgZHU=)
2: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: wuMTzE8rsi0wvPeoFjVIzK7BODV9AA0mZA1cIA3nhy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d8:be:d9:1a:6d:ad:8c:b6:51:92:a4:26:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Mar 26 15:01:07 2026 GMT
Not After : Mar 27 15:01:07 2026 GMT
Subject: CN=27cb51c484a728a79e80f23496c0454d5ab7a929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:14:2e:a3:a5:ac:4d:ce:bb:0b:ee:e3:82:
20:65:97:93:df:3a:38:46:45:7c:98:b8:06:1f:98:
72:5f:df:07:16:3c:d7:2e:b7:92:4d:0b:c8:27:f3:
8c:c5:42:a1:01:b9:a4:19:af:70:e9:8e:d9:e9:49:
ff:02:41:6c:15:fd:ed:dc:ea:84:19:b7:0d:8c:33:
7c:08:dd:52:0d:79:d9:a5:b5:ac:cd:b2:32:bb:33:
51:b1:af:c6:84:42:18:df:97:5c:c0:ff:a3:5a:7f:
57:46:c9:0a:6a:c1:4e:8d:95:1e:bf:0e:3f:43:30:
f4:81:0b:0f:fc:a7:64:01:67:42:cd:e7:b4:e9:3b:
bd:69:b2:3f:36:5e:04:d5:dd:6a:f5:3f:67:4d:0e:
09:3a:68:9b:9d:12:d3:e0:7c:cc:b9:5d:d3:53:65:
38:93:62:4c:ad:80:f3:d3:13:70:2a:c0:36:c1:13:
cf:82:e2:be:79:73:c7:9f:c9:b7:98:1e:71:88:79:
98:88:49:05:ea:3f:34:4a:2f:bd:95:80:d3:99:92:
a9:df:d3:46:7e:0e:ac:8a:d9:64:3f:50:4d:6c:a3:
ec:a5:47:e7:3b:4a:aa:b3:39:e9:23:01:48:9f:e6:
bd:61:9f:8a:2c:cf:b8:b7:0a:fd:c7:b8:bf:c5:b2:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CB:51:C4:84:A7:28:A7:9E:80:F2:34:96:C0:45:4D:5A:B7:A9:29
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b6:77:c7:65:66:b5:f1:cf:07:14:59:81:87:6e:81:91:4b:
a2:35:41:84:9e:1b:e6:73:71:d4:ea:7a:d4:4c:b4:b7:0b:48:
c8:be:9f:0e:a4:76:ff:d9:dc:54:71:cc:cc:9d:23:94:0d:58:
4c:b0:40:25:98:29:0b:83:6c:41:64:7b:e5:34:54:48:79:53:
79:f5:07:b7:e1:d4:fe:af:74:21:48:67:b6:92:24:20:99:d0:
6f:df:a8:f1:ea:9c:21:43:2f:a5:ed:47:14:66:1b:c2:ee:fb:
11:4b:3b:99:f9:b4:c7:60:ea:90:da:70:46:d8:42:72:c9:70:
de:1b:6a:bd:2e:e3:73:87:1b:87:4b:8c:45:55:f6:ad:10:f0:
8b:5e:b4:b9:d1:9b:46:99:78:d8:76:fe:3f:bf:4b:8e:e8:79:
32:1f:94:2b:6c:c5:6b:c9:0c:2b:f8:68:6f:51:63:35:d5:f4:
68:30:3f:3f:2a:88:a2:15:46:59:e5:c2:73:7e:19:78:e1:b0:
61:80:e4:de:9b:05:51:35:84:a9:4c:91:e8:45:33:13:aa:61:
2c:6a:f0:b6:9c:07:cb:fd:32:6b:99:2c:ed:63:07:ba:5f:f1:
e6:1f:85:31:d9:51:f1:b8:01:36:2a:96:c8:72:5a:2d:30:f9:
a2:e6:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:22 2026 by rpki-client