Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: XvN2m1nNcZrnY4sZNgCh4twI9GLdAbzn3jBChz61EX8=
Subject key identifier: 66:62:0C:53:77:FD:71:10:6E:85:EC:02:7D:DE:EC:27:91:C9:68:1A
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 019D273AB46137D03DA52CA726128E45D7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: 0QHW6BS2yyw5qTyp4zcRaHP-17U.roa (hash: +rXufiuFMtIa08EoT1bUhTlLA23WdtsleKjffAHj7cU=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: bHihgns035pxttLiz7GuwxZw8mH2gdP8Dw0VUwW2mX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b4:61:37:d0:3d:a5:2c:a7:26:12:8e:45:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=66620c5377fd71106e85ec027ddeec2791c9681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:a0:95:ba:81:b5:e0:3b:c4:df:95:81:7c:
18:b8:b0:ff:01:60:6a:19:0a:05:02:01:20:78:e2:
f6:2c:97:b2:a3:88:35:a1:10:be:b7:c6:38:05:39:
43:c8:5a:93:b2:8f:c0:ec:a5:42:f4:96:f3:c3:f6:
06:07:34:7c:6b:79:f0:8b:c4:ee:2b:9f:53:1b:91:
2a:82:f1:fd:a1:96:a9:33:6f:76:d0:e4:cd:c6:8e:
20:f1:e4:6f:06:93:af:e7:79:dc:70:5a:0c:00:ce:
44:81:1a:a5:2d:8d:4e:03:1b:b4:a7:42:5b:1b:40:
d9:db:cc:82:4c:fc:49:54:d4:fb:16:a4:79:32:f6:
45:e0:46:69:e3:c2:d6:e7:60:0c:eb:22:2f:32:1e:
38:82:05:6a:e2:e2:dc:a9:91:e8:e9:cb:e2:28:1a:
f4:e5:62:ac:2d:65:22:64:b4:91:61:9a:f3:1e:6c:
0e:98:bd:00:e1:cc:29:a0:2e:93:ad:91:4f:ec:d1:
40:84:fb:47:8f:82:03:3c:25:b0:57:b7:1f:ad:a4:
df:d3:09:10:d5:a9:f2:74:9c:88:21:96:8d:c9:1b:
d9:50:ca:58:0b:86:7f:e4:71:db:1b:6e:b3:94:1a:
c8:9b:d8:3d:b8:ef:d4:1a:56:d1:82:0f:6b:c7:db:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:0C:53:77:FD:71:10:6E:85:EC:02:7D:DE:EC:27:91:C9:68:1A
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:b7:1a:c8:64:0b:87:56:7f:9f:aa:4f:07:d9:1d:78:3e:
0e:34:99:0b:ce:3b:79:34:e7:d1:cc:14:f1:5a:97:1f:4a:bd:
b5:3b:5e:af:c3:7e:91:20:2b:98:7f:07:af:59:60:8f:fd:d5:
f0:6b:c9:5f:51:05:2b:d9:cf:b8:67:d1:1d:7c:10:48:af:3a:
8e:d8:05:91:c4:a7:5f:5a:b6:9b:e9:4c:34:46:a2:3e:80:8c:
5d:a9:0b:73:08:fa:c9:e0:e1:2e:ac:cb:93:e6:e7:4b:e7:7d:
10:bd:62:79:8b:6e:e9:2a:9c:53:60:e5:c7:96:a0:36:ba:e2:
7d:a6:a0:a4:19:68:08:de:16:3c:33:2f:f8:ef:1b:68:62:10:
0f:f1:e1:c2:98:66:1c:b7:bd:03:d2:b1:4d:e0:97:bc:04:50:
f3:55:86:ed:88:7e:f8:61:61:a4:30:dc:f1:48:a1:da:cf:85:
38:36:88:a3:e4:23:81:d0:75:50:ee:c0:f7:d8:69:45:c6:c6:
4a:ea:00:62:5f:2e:90:10:6d:ac:d8:a3:80:51:33:48:9c:e7:
da:fd:31:63:67:62:f8:45:61:85:74:87:8b:70:4f:6b:b2:58:
ff:d3:1f:b1:20:89:a6:a2:c0:f7:32:c1:42:8f:34:52:93:00:
69:4e:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:38 2026 by rpki-client