Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: kZYDuilMIHCTcvZURTG59zooRClZE4IDVKp8rerRs/U=
Subject key identifier: 37:DB:CA:C8:8B:22:0C:77:65:65:E1:AD:BF:A0:14:8B:A2:B8:DD:44
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019D37C06719E33817EEED195CBC16CAF97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 0238
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: AdhHKgra185AgCkt9pvAVnquRCRk2VnZasanjRy/Sdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:67:19:e3:38:17:ee:ed:19:5c:bc:16:ca:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=37dbcac88b220c776565e1adbfa0148ba2b8dd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:98:75:d8:3a:4f:7c:e2:03:94:5f:38:e0:
fb:2f:ef:be:34:ce:5a:2d:35:3f:da:ee:05:fb:0e:
ca:0a:39:a5:98:d8:e3:53:93:db:54:98:dd:20:75:
ca:64:d4:ec:73:2d:f0:bc:93:71:9b:d5:e6:42:26:
44:c8:af:9c:90:6c:fc:de:66:3f:b0:e8:7b:cb:6d:
bb:98:65:6f:df:93:c4:34:93:3d:27:82:d8:55:cf:
48:e2:8b:69:cd:45:85:7a:a0:d8:40:95:5b:98:29:
4c:41:79:90:65:6e:18:86:c0:40:0b:5c:01:88:69:
d3:a1:83:e5:99:9f:50:bd:a0:82:78:77:1c:00:36:
1a:07:cc:f6:9d:e6:2e:09:6e:2c:65:28:a0:e9:f5:
b5:3b:8f:1b:bc:76:7d:e9:21:fb:e3:8a:91:6e:33:
f3:a9:c4:d1:ba:6f:9f:44:7d:34:ab:1c:60:9c:af:
4d:cb:79:1c:f8:a1:a9:06:a0:24:ca:7c:a0:a8:84:
2b:41:c5:de:ce:02:2b:8d:85:63:e9:f3:f1:a2:4e:
16:b6:14:a7:98:9b:1d:ff:49:1d:50:e6:c2:8b:b6:
7d:5e:43:ba:45:69:50:82:f5:7b:5b:e1:59:7c:d6:
d3:61:0f:ee:dd:8d:a9:c7:e1:77:f7:80:b7:5f:23:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:CA:C8:8B:22:0C:77:65:65:E1:AD:BF:A0:14:8B:A2:B8:DD:44
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:57:a0:14:10:54:c3:a1:b6:cf:3a:67:12:16:af:17:e8:
53:c3:15:94:d5:47:5e:24:4b:9e:cd:f6:2b:7f:13:bb:6e:84:
5e:eb:ab:20:5b:70:9d:94:7b:9a:cf:d1:f8:49:7f:4e:13:04:
14:48:6c:10:df:13:3c:ce:4f:1b:c8:00:7d:fe:a3:56:b4:8d:
af:3d:0f:87:04:86:b1:45:7d:7e:c0:da:64:f1:63:58:20:56:
7c:ca:4c:79:b3:34:85:da:53:8c:05:80:dc:d9:2f:79:e2:49:
aa:a9:a8:b1:b2:82:4e:bf:71:a9:ae:e7:b9:b3:79:15:63:1e:
73:66:20:8e:e9:2a:62:c2:ac:d6:f0:f3:5b:9e:47:64:23:84:
98:89:a3:cc:81:b0:a1:2a:10:e9:b2:e6:86:77:1d:6b:7e:e8:
fc:94:3c:49:96:bb:78:0d:20:c8:b5:2c:4d:56:f4:8d:08:ba:
d3:7d:2c:ed:f1:8c:23:f2:70:a0:0f:58:00:cb:51:e9:af:9a:
a1:70:f3:aa:7d:31:42:9c:30:62:b9:e6:5a:b4:f3:ae:9b:17:
eb:9e:18:2e:da:5a:1c:e4:b1:79:c3:05:57:ef:9e:66:1d:8d:
5e:3f:dc:cb:a7:a9:c0:b6:4f:2a:38:4f:8d:e9:d4:55:f5:e3:
4b:5f:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:34 2026 by rpki-client