Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: Bieo8SYStrSPgovbRgGTasmSOh46suf27VzGx8TwEcc=
Subject key identifier: B8:DF:89:D9:FE:F0:CA:A7:95:B7:3D:2C:50:88:FE:77:26:DC:4B:7F
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019D386623F7F5C27533C006B0FC66C336E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (hash: AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=)
2: p4r9vS1h1xzzjTxiGcnowDuodA0.roa (hash: Sr6fy0bEO4gM1AkbG+qMN/VCnyXUfZs5uUjs30p7en4=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: UMRZdbabJsCe80kPzjhTdC/HG6RODcmLbcL84EHUJzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:23:f7:f5:c2:75:33:c0:06:b0:fc:66:c3:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=b8df89d9fef0caa795b73d2c5088fe7726dc4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:85:76:cd:93:97:df:1b:33:39:7f:e1:9a:
57:3d:c9:b3:32:20:59:fb:97:01:66:e8:a0:38:45:
71:c8:8c:e4:95:a9:6e:bc:06:8c:20:03:a5:7b:e9:
4e:35:c9:73:ed:33:d7:f6:4b:a7:50:6e:ba:fe:8f:
c7:c3:29:8a:07:7c:b7:0e:be:d5:8d:5c:cb:11:c4:
e6:66:10:8f:de:06:22:0a:97:be:4f:a1:16:0f:17:
85:4c:42:a5:2f:7b:e6:d3:be:d6:01:1c:24:c9:7d:
0b:6a:02:38:23:2c:74:af:05:de:76:49:90:ba:b9:
4c:b7:fa:a6:44:3a:15:2f:3c:3c:a3:c5:9f:13:8e:
93:db:74:a1:0e:13:f3:99:46:23:21:05:0e:10:f4:
54:ef:07:dd:f0:e3:54:85:f3:ca:39:23:3f:ff:80:
3e:2e:2e:fb:32:3e:6f:01:d2:f4:89:cc:50:71:19:
58:c4:05:78:7e:f5:2d:36:f5:4b:75:91:00:16:f1:
f4:d8:ec:b2:f3:9a:81:20:ac:0a:f3:47:a3:92:79:
16:80:4e:44:11:32:51:4b:95:d6:9d:66:7b:da:de:
d2:36:a7:38:f8:e7:cb:5e:27:07:8e:c5:80:36:4d:
02:34:fb:16:8f:d5:bd:b1:0f:1d:b4:ae:58:dd:2c:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:89:D9:FE:F0:CA:A7:95:B7:3D:2C:50:88:FE:77:26:DC:4B:7F
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ff:e9:f1:53:42:b8:d3:4d:12:d8:39:79:21:7b:1f:21:c7:
a3:17:80:42:7c:f4:a6:5f:a9:ba:57:d4:89:fa:40:1c:49:d0:
5f:53:a0:40:0f:96:d0:60:94:0f:8a:af:56:da:14:13:68:6c:
79:94:21:0c:11:83:98:7d:ae:79:45:24:77:17:7e:cd:89:17:
a7:ee:62:d0:12:7f:11:95:00:c2:1f:6c:c8:08:5b:97:35:ec:
47:92:10:e5:be:45:84:18:a6:2f:20:c2:07:0a:c6:a0:12:a9:
5d:32:1c:78:d9:ec:cf:54:31:db:84:35:fa:07:8a:28:49:d8:
0b:7e:64:73:9f:a0:6e:ae:0b:af:da:de:6c:22:e1:0a:4c:da:
41:f4:cf:c2:fc:95:a0:db:56:6c:5c:58:a8:2d:b5:ab:3a:44:
e7:75:15:78:0a:1f:82:38:22:56:09:c6:c4:8c:8d:f8:24:39:
5f:9e:21:cf:0a:7c:d1:53:e2:2e:7c:fe:31:8b:27:3d:4f:db:
ca:af:0f:d0:9e:7d:25:db:ae:0e:d1:96:97:88:43:66:bf:01:
f6:2e:f3:5a:ad:39:41:7e:f7:9c:5c:e3:e5:88:db:67:00:8d:
f6:05:07:a0:56:b4:ba:40:e4:dd:6d:67:44:ae:ef:2b:fc:4e:
e6:d0:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:24 2026 by rpki-client