Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: sdgFyFXAq7N7Ws7+663Fu7mvhxj7/qyjiXN7KMKtCpw=
Subject key identifier: 76:26:51:E1:86:E9:CB:1F:71:0A:9E:85:F0:A4:21:A5:2B:98:0C:A6
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 019D39AEE76EC348DCB73FCF00A3EC888C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: LvdPzY76oVVCPqtxUifx0oiy6Nc.roa (hash: EGp1yCKfki9H4eeCPphijJ85GaSMwEVebBOhEKpM2eY=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: kXr3VNPyT+c4EMlsjrV5kEmNgx9+addRO5etfZe6NDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e7:6e:c3:48:dc:b7:3f:cf:00:a3:ec:88:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=762651e186e9cb1f710a9e85f0a421a52b980ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:ce:dc:2e:e3:19:9d:eb:e3:23:fe:bc:9e:
be:86:28:85:be:9c:88:69:8b:a0:93:f4:2d:ed:eb:
e3:92:a3:96:c9:4e:7b:61:d4:72:38:b6:5f:84:eb:
d0:16:d6:b8:ab:39:45:ac:79:a5:7b:ae:c2:a1:25:
9d:0a:0d:2d:d0:68:8f:4f:0c:84:18:14:d3:c6:a0:
0d:b5:6f:d3:7d:7c:78:5b:dd:44:f6:aa:6b:4b:6d:
60:52:2e:44:91:ec:db:6b:55:94:d4:ad:a5:c8:6c:
87:f0:6f:e1:0f:70:e0:60:e8:0b:2c:35:f2:f7:fc:
f8:86:19:54:05:99:4d:83:f5:e8:1c:9b:ea:01:9d:
d9:24:d6:e9:fa:ed:c3:29:8c:c3:eb:97:16:dc:87:
74:b8:62:7d:45:78:03:9a:88:c9:3f:9c:2d:a7:f8:
2f:e6:54:87:8d:27:58:8e:4a:76:76:9d:c0:d1:47:
f2:14:dc:32:21:54:eb:3c:9a:ee:ff:b1:42:6c:16:
39:b4:20:92:78:5e:8d:8b:17:dc:bb:aa:9b:34:1b:
16:e0:3c:7b:e5:6d:4a:e3:1f:71:ea:40:25:37:0d:
de:4c:cd:08:2f:3b:e1:63:48:7e:16:0a:05:77:95:
12:8f:35:2c:79:b7:25:3b:f4:f0:9d:0f:2c:a1:cc:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:51:E1:86:E9:CB:1F:71:0A:9E:85:F0:A4:21:A5:2B:98:0C:A6
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a4:dd:fe:16:0b:0f:65:3a:03:24:83:b0:be:72:ae:47:cb:
be:f7:cb:2c:f1:0a:14:9f:04:1e:ed:f8:2a:c3:f9:b6:1a:9c:
b8:26:1b:3c:e3:5f:41:44:05:47:af:e0:ac:3c:08:46:3b:a4:
08:36:64:ca:68:71:10:d9:58:cc:c3:5d:ec:10:3f:c8:5f:ec:
80:56:be:ac:fb:55:56:c6:c5:f3:15:6f:b4:01:54:5b:1b:98:
f0:4d:2d:3d:49:5d:77:d6:37:22:30:01:29:ee:0d:cd:7e:ca:
4d:8a:70:09:77:27:c0:01:f9:29:cf:c1:51:83:b8:ff:96:82:
dd:05:45:32:49:56:9f:f9:78:29:6c:ae:1b:ac:aa:e1:4d:f1:
8c:11:0e:41:90:dd:2c:bb:61:2c:90:e5:4a:d8:a9:f9:ce:20:
d1:73:13:14:03:bd:57:1b:75:de:2f:18:e0:9c:c5:4a:45:26:
e8:39:e7:88:e3:da:ed:d8:31:0a:37:55:3f:02:6c:f3:4c:85:
54:cb:7d:f9:03:06:0c:72:da:27:79:c7:df:65:53:72:6c:84:
10:cc:1a:a9:2a:22:23:10:e2:e7:c2:68:51:69:d0:ff:e6:1f:
a4:07:8f:26:73:14:03:9d:d1:4c:28:88:31:dc:bc:bd:13:01:
09:d1:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:00 2026 by rpki-client