Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: QEHdAKM2x2zvy/i7lXrktuZVskj9TrC+LGYfLI9DWvY=
Subject key identifier: 63:C2:86:86:F6:72:E9:6C:25:E7:3D:A0:86:CD:CC:0D:26:D7:77:99
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019CE52354354FF9894F75855113AF69E854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 135C
Signing time: Fri 13 Mar 2026 03:00:23 +0000
Manifest this update: Fri 13 Mar 2026 03:00:23 +0000
Manifest next update: Sat 14 Mar 2026 03:00:23 +0000
Files and hashes: 1: IVBEKag0frypxKB-vW5lFvDvCAA.roa (hash: 447CZkHLo9a1tRRUCz9HzrzeTGwsKjSaaw1dv0lgZHU=)
2: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: tUHN3t8oz+/wbfEpRPZTABaXAZ87FPOXkzwdjYIB0q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:54:35:4f:f9:89:4f:75:85:51:13:af:69:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Mar 13 03:00:23 2026 GMT
Not After : Mar 14 03:00:23 2026 GMT
Subject: CN=63c28686f672e96c25e73da086cdcc0d26d77799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:f7:0e:cf:86:25:d4:b3:89:fa:b6:cb:be:
ae:97:d3:b4:1f:45:5b:99:5e:62:72:24:c5:77:83:
a2:c9:ab:70:8a:d0:a8:06:4f:4d:86:a8:3a:2e:14:
63:b5:04:47:a0:38:63:a7:44:fd:58:65:78:1e:75:
78:c1:e2:39:6f:e7:6c:f4:83:16:ce:2e:b4:63:84:
49:26:f5:6d:25:fc:18:06:3b:d7:d9:b0:54:86:f0:
40:05:9c:aa:cf:9b:71:3e:eb:6b:72:e4:b9:49:47:
63:bc:a8:59:af:31:09:fa:86:8e:99:cc:65:0f:5a:
c3:d6:4c:b6:0e:73:47:96:5a:18:1d:74:d7:b5:64:
66:f6:2d:a4:6d:28:a5:7f:98:6b:5b:d3:5d:b9:fd:
c8:49:c6:a5:9f:d9:b6:18:ff:3d:91:bf:cd:25:da:
3d:41:85:c0:b6:e8:d5:76:4a:23:fd:b0:aa:22:17:
16:09:43:50:58:98:e1:73:75:75:a1:e1:bb:72:b9:
1b:e3:67:0d:04:03:af:c0:81:9b:7d:7c:df:bf:33:
1d:2b:b0:60:93:d0:90:ab:3d:10:6e:95:5a:cc:ca:
cc:a5:e8:2c:e4:42:a4:26:f0:54:5b:01:20:2b:25:
5c:90:da:99:ec:2b:90:61:74:9b:a0:6e:2b:c5:bd:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:86:86:F6:72:E9:6C:25:E7:3D:A0:86:CD:CC:0D:26:D7:77:99
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:39:cc:47:f1:8b:0d:5e:2b:6d:6c:d4:13:f9:4a:d4:d8:34:
3f:7e:7f:c5:1e:fe:48:fd:2a:ed:18:4b:c3:b0:5b:61:2e:03:
ad:a2:64:01:0e:b6:c6:81:62:84:71:34:c0:e7:22:53:da:44:
d7:9e:bd:1a:15:a8:e2:cd:6d:86:59:01:93:75:08:bd:67:fc:
94:c1:43:a0:f8:ab:3d:44:80:22:27:48:32:e6:1f:da:06:70:
36:19:dc:05:50:28:4f:4b:92:74:45:a2:e5:30:37:70:a4:7c:
6e:08:3a:38:ba:c9:5a:8e:7c:09:7c:20:b6:7f:26:76:40:a0:
65:93:6a:61:76:db:09:72:63:92:53:14:ad:53:9e:39:97:da:
8a:c8:9b:c3:af:86:d4:0a:5e:6d:a5:d8:36:cc:25:95:06:e1:
8f:5f:17:0c:9e:ea:7d:97:d7:2e:1d:91:df:d3:78:d9:4c:9a:
2d:87:ca:20:f2:74:60:e1:8c:6a:92:d6:81:8c:d3:22:4d:6f:
dd:38:46:10:c6:42:58:77:77:91:59:49:47:52:20:0f:30:f9:
c7:03:0a:90:99:98:31:29:dd:b3:c0:de:7b:90:09:5c:4b:fc:
cb:49:b9:82:64:cf:fe:c0:fe:49:60:60:bc:98:27:f9:27:00:
21:02:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:03 2026 by rpki-client