Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: pNNJybafz0bzw8QuHPTAVb7xOoPg7qXcPLS4Jicyw7g=
Subject key identifier: DB:54:F9:5A:F5:59:C2:0C:07:6C:DB:67:17:46:7A:B5:A5:AA:E6:A1
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019EB98FA2488A27C858248B9CD6CFF6506D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 02:00:58 +0000
Manifest this update: Fri 12 Jun 2026 02:00:58 +0000
Manifest next update: Sat 13 Jun 2026 02:00:58 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: /sp+voCorFYafBPZc+5RQF6p1G9lee97uPhdvXIETZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:a2:48:8a:27:c8:58:24:8b:9c:d6:cf:f6:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jun 12 02:00:58 2026 GMT
Not After : Jun 13 02:00:58 2026 GMT
Subject: CN=db54f95af559c20c076cdb6717467ab5a5aae6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:92:6f:0e:a9:71:73:a1:b7:a5:3e:a2:1f:
49:8b:5b:28:51:d1:bd:5a:a5:c9:d4:4a:bb:82:35:
d7:d6:1f:54:6a:e8:78:92:97:22:d7:1b:95:6a:f4:
5a:99:5c:1a:5c:f6:2a:0b:26:75:78:71:5e:e0:5a:
eb:9a:ac:cb:59:7d:49:e8:85:0e:cf:12:f5:34:9c:
f1:55:86:f4:c6:bb:a2:0f:13:a0:d1:32:d8:f7:48:
ba:9d:fb:46:2c:9f:af:3a:67:55:a4:8b:b9:c9:b9:
c9:f8:f2:d7:e3:a8:22:95:9e:4a:df:f5:b5:f2:91:
de:ea:e3:54:31:54:63:d4:77:1b:bc:fa:da:24:1d:
14:39:62:2d:06:29:20:9a:da:89:84:ae:47:c8:c3:
6b:f5:7b:98:52:60:56:8c:3e:53:a4:43:24:ae:98:
0d:45:41:18:3a:fe:8b:b1:c1:50:42:63:6a:ca:e9:
d1:0b:99:d5:db:b8:e9:3f:51:5f:c6:40:3c:f2:16:
77:cc:29:e5:66:3a:41:5a:f2:a3:75:c5:30:d5:5d:
7d:99:90:9e:d7:c4:ba:bd:4b:5f:80:a7:0c:a8:83:
da:32:11:78:31:35:80:03:1b:22:d2:cc:94:90:fb:
d7:6b:36:f7:b1:1f:18:76:df:7b:87:24:9a:31:6d:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:54:F9:5A:F5:59:C2:0C:07:6C:DB:67:17:46:7A:B5:A5:AA:E6:A1
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4d:ff:a5:9d:84:e2:21:b2:52:a3:db:4a:08:f9:39:68:e2:
0c:69:d3:6e:90:08:54:54:4b:32:7e:3d:2b:e6:76:bf:cf:be:
8a:62:00:a3:9a:dd:fd:9a:ec:a6:fa:bb:c5:e1:a6:6e:64:52:
30:1e:e7:86:e5:20:fa:fd:07:28:ea:46:b2:9a:b1:8d:ea:c6:
57:f3:f8:18:2b:23:cc:71:b1:82:b5:0b:da:b5:cf:35:65:93:
cd:fb:94:30:e2:b5:79:29:7f:c6:9f:90:0c:46:3a:60:43:8c:
b6:1f:34:bb:75:0d:8c:34:59:b5:31:4d:05:7e:1c:aa:0e:ad:
a8:8e:87:31:e3:88:18:bc:bc:6a:c9:06:4c:4b:86:ff:fc:a4:
a8:ab:9d:78:ff:11:d0:5e:aa:22:fe:c8:6f:97:16:e6:bf:eb:
2b:51:cf:4a:9d:e9:2e:fc:f9:67:f1:b2:31:e2:e7:e0:92:7a:
b1:de:74:d9:3a:72:85:39:ef:6b:77:39:cf:b8:53:05:b5:cb:
ff:18:d6:50:f8:9b:e5:cc:93:5e:d1:e2:03:ed:5c:cc:26:5f:
df:35:f0:a2:34:48:c5:cb:e3:9b:aa:48:f0:bc:a3:30:5f:70:
ef:e6:df:9c:d0:56:31:2c:a9:98:a0:e0:d8:ad:17:89:e0:8a:
26:eb:f2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j6JIiifIWCSLnNbP9lBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjYwNjEyMDIwMDU4WhcNMjYwNjEzMDIwMDU4WjAzMTEwLwYDVQQD
EyhkYjU0Zjk1YWY1NTljMjBjMDc2Y2RiNjcxNzQ2N2FiNWE1YWFlNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vuSbw6pcXOht6U+oh9Ji1soUdG9
WqXJ1Eq7gjXX1h9Uauh4kpci1xuVavRamVwaXPYqCyZ1eHFe4FrrmqzLWX1J6IUO
zxL1NJzxVYb0xruiDxOg0TLY90i6nftGLJ+vOmdVpIu5ybnJ+PLX46gilZ5K3/W1
8pHe6uNUMVRj1HcbvPraJB0UOWItBikgmtqJhK5HyMNr9XuYUmBWjD5TpEMkrpgN
RUEYOv6LscFQQmNqyunRC5nV27jpP1FfxkA88hZ3zCnlZjpBWvKjdcUw1V19mZCe
18S6vUtfgKcMqIPaMhF4MTWAAxsi0syUkPvXazb3sR8Ydt97hySaMW0lDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtU+Vr1WcIMB2zbZxdGerWlquahMB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk3/pZ2E
4iGyUqPbSgj5OWjiDGnTbpAIVFRLMn49K+Z2v8++imIAo5rd/Zrspvq7xeGmbmRS
MB7nhuUg+v0HKOpGspqxjerGV/P4GCsjzHGxgrUL2rXPNWWTzfuUMOK1eSl/xp+Q
DEY6YEOMth80u3UNjDRZtTFNBX4cqg6tqI6HMeOIGLy8askGTEuG//ykqKudeP8R
0F6qIv7Ib5cW5r/rK1HPSp3pLvz5Z/GyMeLn4JJ6sd502TpyhTnva3c5z7hTBbXL
/xjWUPib5cyTXtHiA+1czCZf3zXwojRIxcvjm6pI8LyjMF9w7+bfnNBWMSypmKDg
2K0XieCKJuvyfw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:54 2026 by rpki-client