Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: PHXl56PmO+dzVjvt7A5xtq7J/Dw3v+jgK2+R1aT9lo8=
Subject key identifier: DC:87:85:D3:6F:0F:6A:DF:86:EA:2A:D5:48:74:7F:83:62:75:8A:79
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019D3940CA8A3F28F1E83995FD096F62C84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: zhSOKilu9mOuLrENdpb5gC/QVJM3zjAcmgzZI36i2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ca:8a:3f:28:f1:e8:39:95:fd:09:6f:62:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=dc8785d36f0f6adf86ea2ad548747f8362758a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:58:59:db:c1:73:c5:cb:6d:c8:85:8a:1a:
2d:7a:ad:a0:93:0d:ab:29:cd:6b:92:ba:97:90:2f:
35:47:00:67:c2:72:db:84:3d:d1:f2:49:57:2c:c3:
80:08:aa:a7:f8:ad:0c:67:22:43:23:57:71:7d:c3:
5c:dd:8c:23:21:84:ea:a3:4e:43:b9:8a:a5:ec:11:
6e:7b:f4:74:5f:e4:72:62:2e:99:12:bd:ce:ed:f7:
7c:59:d2:2d:24:96:ca:35:25:5d:d7:42:af:bc:d3:
5a:88:0a:1d:90:16:e6:46:5f:9e:c1:7c:01:b4:19:
d4:40:32:9a:f9:ce:c4:1d:93:59:72:cc:2f:f4:66:
38:f9:f5:f1:a9:3e:8b:6c:99:94:ca:e6:34:af:56:
38:be:a3:a3:1f:a7:a7:40:59:59:10:cf:12:fe:34:
7a:df:07:70:2d:a2:df:c6:f3:8d:d0:91:ee:1d:a6:
32:9a:20:2e:f2:ae:b4:7b:e2:07:c0:5f:16:9f:2c:
32:95:65:49:ff:f1:84:97:2f:4a:6e:1b:07:c3:cb:
25:fe:10:b6:cb:19:61:b5:dd:9c:d9:cb:c2:ce:25:
9f:ac:5a:b6:ec:4a:ff:b8:1c:61:31:86:11:68:fe:
41:87:0f:e3:c4:81:43:d5:fe:6f:21:01:ba:de:8f:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:85:D3:6F:0F:6A:DF:86:EA:2A:D5:48:74:7F:83:62:75:8A:79
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:63:ce:b7:f4:45:88:86:4c:ec:30:63:a2:b3:d5:b4:89:8c:
35:dd:f5:a9:94:cb:da:8f:7f:b4:e0:f2:99:79:80:b7:fc:4c:
bf:ce:c6:7b:5b:2e:df:05:36:35:97:e9:87:37:d2:d1:ee:ed:
da:27:89:62:73:8d:33:c0:c9:7e:a1:43:7e:1e:6d:a7:ea:8f:
13:ad:3d:0c:36:92:82:0a:de:45:f3:88:5b:41:d5:7d:69:59:
07:d7:83:c6:1a:bd:24:ac:a5:7f:d4:91:ff:a1:5f:ae:99:b4:
e8:fc:60:21:73:ee:2e:37:a5:0b:8d:eb:f3:bb:91:86:51:3c:
0b:88:b8:e6:58:3c:a6:38:f4:3d:dc:72:a8:e6:35:1d:14:1e:
e1:78:ca:85:ba:5f:e4:d7:ae:8b:21:88:16:e5:d4:9d:b2:58:
bd:bb:04:74:d7:66:fe:a3:ab:c4:1b:19:bf:d0:1b:0e:93:10:
6a:e8:26:9e:c2:6f:e3:6d:eb:e8:44:8f:50:9d:97:cf:e6:0f:
ca:ea:3f:62:21:8f:51:76:0b:78:3a:a5:af:6a:12:fa:73:43:
e9:e2:d4:12:13:d0:98:27:57:01:2c:0f:24:a4:7c:d2:3a:d6:
04:84:83:1c:9e:0c:28:4d:ff:96:ea:81:27:62:30:e5:56:b6:
08:fe:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:23 2026 by rpki-client