Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier: c+ixyRV6M7vtjMWLCLAF+3/VDsNHLPWs8HbJ1xUZWzg=
Subject key identifier: 9C:69:09:E8:81:73:4D:84:B8:38:03:EF:5A:32:A0:10:62:8C:A3:19
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial: 019D389C132A346B82B8101F8F5270B9EFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number: 0911
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: H/FqxXJmVsXTJGLhv9cOUqNWi1fCIx2Mj3jRVKbeJSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:2a:34:6b:82:b8:10:1f:8f:52:70:b9:ef:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=9c6909e881734d84b83803ef5a32a010628ca319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:80:2d:ed:63:3a:ad:fd:e4:b2:31:8c:4d:
76:71:69:95:d5:c1:5c:7e:5c:c2:3f:b8:60:0f:eb:
37:41:4a:1c:ac:8b:49:7c:a0:8f:86:07:2c:10:86:
5b:3c:58:66:aa:dd:d4:df:af:ac:dc:94:77:56:58:
7b:f8:11:97:bb:84:6c:7f:ee:1f:0e:7b:35:c5:dd:
3d:8b:0d:63:d5:c9:80:51:66:07:2c:c7:23:e5:0a:
18:80:84:5e:1e:43:fd:3d:bf:b0:04:86:fa:3e:99:
87:86:21:a0:f3:b6:41:ac:13:80:cc:04:d9:34:e6:
37:20:db:10:f7:8f:85:73:09:4b:65:bb:c8:ba:d1:
ad:b5:fb:96:41:fd:74:eb:69:7b:73:9b:3d:f1:f9:
20:30:17:fc:77:00:7c:b1:28:d1:81:de:0a:8f:33:
41:13:80:3f:59:94:9e:c7:1f:0f:ba:3b:54:4e:29:
cc:90:51:59:ab:28:ba:49:f7:98:db:ed:9c:7f:8f:
0b:13:de:87:b9:d5:a6:8a:53:ca:6a:aa:76:54:81:
ce:a3:4b:3c:d0:00:8f:aa:16:d0:10:c2:b9:f1:7b:
9a:4a:96:1e:79:46:4a:68:d1:c9:fd:8f:a1:6e:6d:
53:fc:e6:53:c3:62:ae:ac:5b:0f:2f:7c:a0:e2:52:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:09:E8:81:73:4D:84:B8:38:03:EF:5A:32:A0:10:62:8C:A3:19
X509v3 Authority Key Identifier:
keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:d4:ad:05:1c:86:ef:d4:c9:27:2e:72:29:e7:df:2b:ab:
23:9f:c5:e1:f3:9d:57:c5:ed:37:20:ff:ad:8e:89:34:a9:11:
4f:89:38:5d:49:f6:ba:49:f7:4d:ad:00:6b:e8:fb:e8:8c:6e:
2b:d7:e6:fd:10:01:a7:cb:0b:6d:1d:6d:c4:8e:fc:d3:7c:0d:
8a:6b:af:35:3c:ce:8b:4e:13:9a:6b:7b:2a:35:3e:c8:0a:50:
fa:05:15:76:7b:85:cb:5a:43:a9:50:f8:2b:cb:8e:32:4e:9e:
b8:d9:64:a0:e6:bf:20:90:77:20:79:57:f6:f1:15:fc:74:6a:
f9:7e:81:46:69:fe:78:b2:4d:1f:c3:78:45:dd:fa:2f:a2:c4:
6e:3c:79:de:27:5f:b3:31:7e:e3:f3:1f:17:e5:df:6e:8a:d3:
61:0b:fd:41:1f:7c:b8:72:71:12:9b:4d:22:f6:00:4f:1d:8e:
19:7d:86:c4:6c:ea:e3:29:20:91:bd:2f:e2:19:5a:e5:ef:3c:
ad:a1:07:22:4c:83:82:7d:f8:c3:a6:2b:d4:c1:34:46:c8:b2:
22:49:dc:f0:11:b6:a3:d0:41:4b:44:bc:2f:58:1c:e7:f3:4f:
a1:51:4c:8b:8a:74:eb:f8:da:51:a1:08:41:43:7f:90:ff:0d:
88:6e:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client