Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: 6A7fy1mSVjtkxsNtBuSn4c7Ao3asRq3w7bPPKxUkypY=
Subject key identifier: F3:47:BA:38:0A:F2:77:4F:24:FB:AD:15:2B:8D:09:E2:F9:19:92:50
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019F14C16AB131418D2D270387C01DE558A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 032F
Signing time: Mon 29 Jun 2026 19:00:47 +0000
Manifest this update: Mon 29 Jun 2026 19:00:47 +0000
Manifest next update: Tue 30 Jun 2026 19:00:47 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: li3LO+j+XhCfLPqQVf705F4y4KEy69sxYQAzFnqN/z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c1:6a:b1:31:41:8d:2d:27:03:87:c0:1d:e5:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Jun 29 19:00:47 2026 GMT
Not After : Jun 30 19:00:47 2026 GMT
Subject: CN=f347ba380af2774f24fbad152b8d09e2f9199250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:38:8b:22:da:4b:e5:c4:ae:ca:49:40:ea:
87:d7:7b:61:ab:b9:c2:7b:d8:ea:84:64:33:da:97:
52:86:bf:d6:55:7e:c8:9d:f6:bc:9d:b7:12:cb:9b:
20:70:52:ae:08:fb:da:46:73:ad:75:9c:0b:4b:a7:
93:bd:4f:cd:a1:9c:03:ec:2e:dc:99:d7:63:11:19:
f2:ac:fe:33:16:d2:dc:22:c8:43:30:9d:e0:a8:28:
2f:41:24:48:e3:37:62:db:19:41:43:64:2e:54:10:
ff:4d:c7:44:61:5f:b2:81:d9:9a:74:ff:30:e4:79:
ef:f7:a3:bd:f0:8b:e6:34:90:e4:06:9d:2e:b9:98:
40:73:2e:f6:86:57:5d:72:db:f9:34:28:5e:5e:e7:
f8:8a:12:d1:d2:0f:ff:1d:5d:60:c2:15:1c:41:38:
a0:6d:0b:38:52:f8:07:1d:6a:9f:f7:ab:2e:67:66:
cb:f1:20:1e:c4:fd:41:99:d9:c8:48:85:c9:bb:19:
64:c5:68:c1:df:1d:24:fc:91:33:e4:6e:61:23:61:
79:4e:b7:ab:23:30:9d:1e:49:b5:3c:15:20:19:6f:
89:45:64:63:82:ad:f0:c1:01:db:90:57:f6:60:2c:
7e:13:41:af:a7:ae:ea:e6:42:aa:9d:f3:62:ad:44:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:BA:38:0A:F2:77:4F:24:FB:AD:15:2B:8D:09:E2:F9:19:92:50
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2b:32:1f:8a:c7:2b:16:33:01:9b:ae:b6:30:1c:eb:54:c6:
c3:a5:06:35:20:3a:25:fc:04:81:d2:47:d2:8c:6a:7f:80:9a:
4e:f7:63:18:6b:27:0c:b1:ca:9b:9b:6b:21:92:7c:b9:b7:1a:
4e:ca:35:1c:9e:b4:bc:2b:33:a1:06:65:b6:83:e8:73:9b:9f:
4b:4d:5a:ba:5a:f2:23:b1:bf:60:e9:1c:dd:a5:c9:16:3d:08:
ca:c5:8b:b7:5a:05:93:3c:b3:af:7e:59:a9:30:6e:6c:48:0f:
ee:97:7f:3f:91:ab:22:53:49:c8:af:86:92:a3:57:40:11:3a:
e7:fd:e8:c2:1d:b8:66:e5:bf:a7:04:98:ff:ef:dc:65:fb:4f:
d9:31:96:6e:90:43:16:32:14:0f:b6:69:f2:83:0f:94:53:bc:
f8:59:5e:22:a3:d8:83:7b:b8:66:12:2c:e6:28:0a:86:b1:4b:
1d:bd:a6:60:60:e4:5c:34:70:92:25:bb:23:83:06:a7:34:5c:
11:6e:de:06:88:83:30:04:bc:fa:9a:1b:ae:b8:f2:3e:28:29:
76:99:8b:e9:5d:a7:ec:ad:21:1d:c6:e2:44:50:46:3e:59:18:
a6:fa:70:d4:ae:8f:23:59:74:e5:1e:1b:e2:95:c7:61:36:c1:
84:05:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:32:54 2026 by rpki-client