Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: 2pyCQh0UsJmgIM3HEOzaOqcUp2jysiTZjCJGJqpMGvA=
Subject key identifier: D2:F5:6A:3A:38:1F:5B:20:11:7C:81:A0:1D:7A:36:B2:0E:77:AC:B9
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019D29CEAD26B0E536EE4F7974A189776892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:43 +0000
Manifest this update: Thu 26 Mar 2026 11:01:43 +0000
Manifest next update: Fri 27 Mar 2026 11:01:43 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: NOJcGS5AM5G3JD1yJ4YKK+7RQCbR+nwmJt6RlmmV4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ad:26:b0:e5:36:ee:4f:79:74:a1:89:77:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Mar 26 11:01:43 2026 GMT
Not After : Mar 27 11:01:43 2026 GMT
Subject: CN=d2f56a3a381f5b20117c81a01d7a36b20e77acb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:fa:39:88:e3:bf:40:e0:39:74:f0:dd:86:
af:24:15:42:b4:da:fe:63:c4:69:93:f1:69:5a:e7:
10:65:6a:b7:c6:34:15:d4:0e:2c:84:a4:0b:6e:4e:
4c:61:b2:63:8d:04:ad:9b:16:bf:14:42:60:c3:ef:
08:05:e3:c2:ec:7a:33:e8:d3:c9:09:38:1d:95:11:
72:6b:11:dd:59:06:dc:15:0f:df:20:35:f9:2c:a1:
17:88:40:47:9a:85:72:ab:92:c0:a4:53:57:dc:9f:
14:af:ed:ab:b5:e2:1d:93:a0:57:ee:cd:a9:a1:fc:
7a:c7:43:a6:44:90:11:6e:e9:20:e5:34:f2:64:ea:
cb:28:4d:0f:64:a8:a8:ce:52:11:c8:00:c0:9c:8a:
9a:74:b0:86:d0:cf:dc:65:05:cb:4d:3f:9b:f9:12:
44:f3:88:3d:9a:e6:6d:b2:3b:be:a7:22:85:df:24:
c8:12:ce:04:93:23:b4:49:70:f8:16:f7:da:27:98:
2b:37:80:da:8e:fd:ea:d7:b8:5a:78:82:d4:8d:5d:
e1:46:1d:e6:7c:b7:a8:80:f8:9e:15:96:87:fb:da:
95:e3:9c:dc:70:ff:65:ee:ae:fd:4d:9e:55:2e:82:
eb:36:f2:6d:12:f4:a4:93:0c:fa:c7:7e:43:ff:bc:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:6A:3A:38:1F:5B:20:11:7C:81:A0:1D:7A:36:B2:0E:77:AC:B9
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2e:27:b7:25:88:87:66:ee:94:a1:9c:05:0f:91:53:3d:5c:
5d:2a:d9:ac:50:53:2b:dd:72:1b:cc:f1:19:46:bb:c4:a0:a3:
bb:78:cf:54:0e:47:2d:dc:10:fe:5a:88:d9:ed:cf:5d:b6:02:
03:d4:12:81:8f:2c:c9:a4:4f:9a:e6:7d:65:20:de:40:b4:36:
b5:42:72:bd:a3:4d:cc:2c:82:63:b5:d1:9b:14:ca:a5:b4:e4:
88:73:67:b5:7d:0b:8a:30:d3:2f:43:13:8c:ea:f2:62:d2:be:
19:03:40:8a:28:13:f9:f1:07:a9:66:a7:73:48:82:11:4c:29:
ad:2c:5d:4a:1e:85:0b:11:e1:ee:06:75:89:e5:c4:0b:0b:63:
92:65:5b:b7:37:28:d7:42:22:5b:46:5a:e0:23:a7:28:f7:39:
22:d0:a5:05:c6:3c:af:6f:ae:bf:86:97:43:0c:43:92:0f:1c:
d8:e4:b8:0b:33:52:9c:3f:12:90:51:15:d1:f7:aa:8c:d8:3d:
42:79:0d:14:e6:42:7a:a3:62:6f:74:1e:a2:a1:6e:63:0b:31:
53:48:83:48:12:75:ee:fb:94:4e:01:e0:09:ac:11:86:6b:b3:
2d:e0:f9:6f:22:a8:3b:45:f9:c5:76:7e:a5:28:14:b7:b9:f4:
c9:a2:8b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzq0msOU27k95dKGJd2iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjYwMzI2MTEwMTQzWhcNMjYwMzI3MTEwMTQzWjAzMTEwLwYDVQQD
EyhkMmY1NmEzYTM4MWY1YjIwMTE3YzgxYTAxZDdhMzZiMjBlNzdhY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkur6OYjjv0DgOXTw3YavJBVCtNr+
Y8Rpk/FpWucQZWq3xjQV1A4shKQLbk5MYbJjjQStmxa/FEJgw+8IBePC7Hoz6NPJ
CTgdlRFyaxHdWQbcFQ/fIDX5LKEXiEBHmoVyq5LApFNX3J8Ur+2rteIdk6BX7s2p
ofx6x0OmRJARbukg5TTyZOrLKE0PZKiozlIRyADAnIqadLCG0M/cZQXLTT+b+RJE
84g9muZtsju+pyKF3yTIEs4EkyO0SXD4FvfaJ5grN4Dajv3q17haeILUjV3hRh3m
fLeogPieFZaH+9qV45zccP9l7q79TZ5VLoLrNvJtEvSkkwz6x35D/7yLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL1ajo4H1sgEXyBoB16NrIOd6y5MB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS4ntyWI
h2bulKGcBQ+RUz1cXSrZrFBTK91yG8zxGUa7xKCju3jPVA5HLdwQ/lqI2e3PXbYC
A9QSgY8syaRPmuZ9ZSDeQLQ2tUJyvaNNzCyCY7XRmxTKpbTkiHNntX0LijDTL0MT
jOryYtK+GQNAiigT+fEHqWanc0iCEUwprSxdSh6FCxHh7gZ1ieXECwtjkmVbtzco
10IiW0Za4COnKPc5ItClBcY8r2+uv4aXQwxDkg8c2OS4CzNSnD8SkFEV0feqjNg9
QnkNFOZCeqNib3QeoqFuYwsxU0iDSBJ17vuUTgHgCawRhmuzLeD5byKoO0X5xXZ+
pSgUt7n0yaKLog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:11 2026 by rpki-client