Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: vbRiCV5iSuFx2GNloGvbO9X1+30uF6dEIWhd42a8Pck=
Subject key identifier: 64:DB:44:25:B5:53:FA:0D:86:FE:A2:2B:31:F3:22:FA:F7:D8:1F:56
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019E1FEC7C6C6976D53674D2E955C396AA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 13FF
Signing time: Wed 13 May 2026 06:00:52 +0000
Manifest this update: Wed 13 May 2026 06:00:52 +0000
Manifest next update: Thu 14 May 2026 06:00:52 +0000
Files and hashes: 1: IVBEKag0frypxKB-vW5lFvDvCAA.roa (hash: 447CZkHLo9a1tRRUCz9HzrzeTGwsKjSaaw1dv0lgZHU=)
2: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: vF6s1PVVIxRZKDB1FINwb/QectjkglTaIu4hWbKrNr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:7c:6c:69:76:d5:36:74:d2:e9:55:c3:96:aa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: May 13 06:00:52 2026 GMT
Not After : May 14 06:00:52 2026 GMT
Subject: CN=64db4425b553fa0d86fea22b31f322faf7d81f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:98:69:4e:43:f5:27:da:be:61:ef:ce:e2:
16:b2:56:3d:d7:f7:2a:10:6d:63:19:57:95:e9:b3:
33:2b:1f:86:86:a0:78:ec:e0:e2:a7:4a:08:c0:5d:
7c:92:4e:5c:10:b5:38:7a:0c:02:c9:83:3c:6d:4f:
4f:0f:2e:d4:9e:16:07:00:52:d4:3c:fa:b6:39:32:
a6:74:3e:81:b8:7b:c3:14:3f:79:26:bf:3d:bb:d6:
e9:cc:14:ee:65:aa:3c:65:18:e8:d6:1c:9d:71:dc:
1b:87:36:c5:65:4f:e4:fb:23:af:5f:5f:7f:89:e5:
be:41:55:dd:9b:78:cd:7a:8c:35:0b:f0:4b:e4:d2:
bd:8f:de:61:db:98:60:20:8a:a7:81:82:4f:73:f1:
eb:5d:2b:83:4e:3b:3b:d0:a0:d7:b1:f9:35:31:c9:
8d:be:3a:0d:0c:18:22:62:64:bd:1d:30:e8:35:08:
ea:20:79:6d:6d:4c:48:f4:6e:7a:93:ce:29:6e:ca:
20:d3:aa:32:e7:42:80:0f:8a:64:26:9e:6a:4f:75:
c9:c0:5c:8f:4f:90:2a:71:0d:3f:33:14:95:30:2d:
5f:67:ef:dd:32:03:a2:b5:db:34:1d:9d:f7:a0:31:
17:9d:ae:ac:ce:d5:ac:03:ee:ba:df:51:c6:63:b1:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:44:25:B5:53:FA:0D:86:FE:A2:2B:31:F3:22:FA:F7:D8:1F:56
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b1:76:37:e4:06:f4:82:c5:da:4f:69:a4:f1:78:74:28:2d:
a7:a6:10:a1:2e:48:d5:a2:4a:c3:c6:0e:b5:2f:49:93:96:53:
17:ab:cb:9e:59:16:2d:c9:c1:e8:a6:c0:08:4b:2e:c7:2c:12:
7f:9a:4b:eb:42:89:02:2e:84:eb:b8:9a:3c:8a:80:f5:60:72:
20:ac:d4:e6:bf:ef:f3:f8:21:af:21:3a:da:72:57:b4:39:e9:
e0:9f:f9:18:9f:11:67:af:41:82:83:d0:c5:77:82:a2:bf:0c:
ae:16:6c:7e:a7:7f:e6:f1:f4:43:10:3b:95:3c:d3:01:a3:7a:
46:7c:98:f8:16:01:37:da:93:e6:4e:5f:cf:f0:9f:b9:0a:9a:
f9:58:c0:f2:2d:c6:8e:8d:f3:f5:a4:ae:5e:94:76:e9:8f:e7:
02:55:06:05:5f:dd:e2:2e:65:4a:ad:12:0c:c9:09:ce:05:67:
96:b2:bb:26:74:d1:26:22:24:6b:aa:c1:58:13:85:f6:40:f5:
7a:60:da:39:c9:7e:2e:eb:ca:fa:e7:2e:a7:f8:dc:c6:33:a4:
67:69:24:f6:8e:6d:6d:02:b3:9a:78:bd:31:59:6d:40:ee:31:
1a:17:c1:ec:c9:ef:b4:23:fc:87:07:82:62:3c:1f:3d:67:78:
74:5b:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:15 2026 by rpki-client