Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: bmZ3/5+5CQTqQr+YgVSt6ydlhU3ZI2hKIKm/xsrxdfU=
Subject key identifier: 1E:37:43:F2:6D:9A:F2:A4:AA:D9:20:C7:13:74:D8:A5:93:29:8F:2A
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019E2B157C3402C3B091B68B7C745C3A1BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 02B6
Signing time: Fri 15 May 2026 10:01:28 +0000
Manifest this update: Fri 15 May 2026 10:01:28 +0000
Manifest next update: Sat 16 May 2026 10:01:28 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: 0m82fqJgtOl1Fsz1aFzTbrN3p3+HQKSAKdPhsagsLWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:7c:34:02:c3:b0:91:b6:8b:7c:74:5c:3a:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: May 15 10:01:28 2026 GMT
Not After : May 16 10:01:28 2026 GMT
Subject: CN=1e3743f26d9af2a4aad920c71374d8a593298f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:9f:96:d8:3b:e6:eb:e7:1e:c9:cc:a3:31:
f9:45:d7:22:49:03:cd:59:dc:e2:62:d8:57:97:f2:
00:03:1e:2c:19:36:33:d6:f7:90:f9:67:d2:de:52:
5b:dc:16:38:ca:6f:92:3b:23:61:1d:24:de:3a:cc:
cb:23:5b:b4:ea:a0:eb:9a:67:be:7f:12:74:25:66:
56:d2:25:03:d3:06:2e:67:5c:cb:e3:87:f0:7f:dd:
88:c4:76:0e:58:f8:7b:47:11:2c:19:2d:f9:9f:4d:
d7:80:32:75:01:b7:3c:4b:bf:5f:8b:38:80:cc:c4:
cd:68:57:9f:9e:ce:9b:95:23:2b:2d:80:d3:db:9a:
59:20:3c:0d:aa:84:26:b5:c1:37:51:9d:e6:c0:ca:
05:f2:b8:37:ba:74:c1:66:15:49:9c:2b:d4:d9:81:
60:23:92:43:2c:7e:27:09:9e:de:8b:56:94:4b:ad:
7d:eb:bb:32:74:f8:06:17:75:3f:e7:88:93:2b:f1:
45:55:6c:d2:bf:49:22:90:b1:c7:32:a6:34:38:1e:
8d:b4:3b:4a:74:8f:66:b9:49:df:f9:0b:a3:ab:93:
18:50:72:85:d7:75:77:15:a6:ff:b5:a3:2d:b1:a8:
3f:b1:38:46:a4:68:c6:7f:b9:be:c9:bb:0d:b9:85:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:43:F2:6D:9A:F2:A4:AA:D9:20:C7:13:74:D8:A5:93:29:8F:2A
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:79:23:8c:30:f1:17:93:8f:2f:73:9c:fc:84:54:79:ab:
83:6c:90:e5:4c:05:a4:1a:ae:3d:79:60:ac:82:72:42:aa:53:
fe:e1:9e:19:a8:2c:b8:3c:8f:39:14:38:a0:93:cf:86:f8:f8:
51:39:4a:db:39:29:fb:42:34:bd:fd:9f:2b:d4:43:99:d9:3b:
93:e6:97:27:13:eb:44:d1:fd:e0:84:52:20:af:e1:63:cf:03:
84:39:47:da:10:5e:8a:a2:5c:7c:1e:b5:65:a6:00:a2:09:c9:
f4:06:ec:20:d3:e4:d2:8f:70:16:ba:00:d9:1a:08:c0:bb:95:
ba:06:c5:e9:50:7c:81:18:e2:5f:66:95:bf:36:b6:87:53:3a:
e4:fe:08:07:e2:e2:ed:77:c9:ee:de:8c:45:82:e4:c2:6c:b3:
39:9f:7a:63:86:ae:f0:5b:40:27:30:35:9b:20:01:ac:3c:69:
9c:b3:1e:88:93:07:cb:2c:e6:ad:f6:0d:78:0d:9d:73:65:1a:
40:36:c3:c0:49:06:5f:34:79:71:1e:5e:a1:bb:44:2d:11:7b:
95:3b:6f:d6:30:d6:96:1a:cd:99:a0:69:ce:df:82:bc:b3:bb:
d4:74:ec:f2:d4:e9:c3:a0:7c:5c:e9:e7:d9:94:51:7b:15:50:
3e:5d:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:01:37 2026 by rpki-client