Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: 30IaVS2U4eaNQcfN1wOpjkTNIbHNGc+31Al44o/UYeA=
Subject key identifier: 11:E3:98:BF:9A:C5:56:92:99:D5:CE:AB:9F:2B:4A:91:FC:84:B9:E9
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019F93C8EE164CD08024AC26BF52EC230F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:46 +0000
Manifest this update: Fri 24 Jul 2026 11:00:46 +0000
Manifest next update: Sat 25 Jul 2026 11:00:46 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: Szqqnrvoz5Tw19MYh6hZKiJ5UhKKqosZyhzG/YAg7J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ee:16:4c:d0:80:24:ac:26:bf:52:ec:23:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jul 24 11:00:46 2026 GMT
Not After : Jul 25 11:00:46 2026 GMT
Subject: CN=11e398bf9ac5569299d5ceab9f2b4a91fc84b9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:62:83:b0:44:ad:03:c7:89:c8:63:9c:17:
e8:74:50:d1:92:2d:2c:ff:cf:12:df:3a:c4:e4:cb:
80:78:3f:f4:c2:91:12:81:a1:1f:a3:98:60:0b:36:
73:1e:15:e3:7b:d5:be:b2:4e:9b:4b:0e:aa:3d:2a:
0f:71:32:45:41:08:74:8c:3c:63:05:2b:81:ff:14:
8d:1b:c5:f9:5e:03:e8:43:92:98:aa:76:b6:e9:94:
11:01:03:a2:12:44:22:90:6a:a5:6f:3d:a9:94:76:
37:93:ee:bd:ec:0a:36:23:bb:42:d9:ad:a5:82:b4:
69:c8:01:ff:91:c8:61:ef:aa:7a:07:4a:f9:94:b7:
f8:b3:6b:98:8d:31:4f:e3:3d:2a:da:d4:ca:69:91:
5f:bf:25:04:8c:47:ed:64:70:04:a6:bb:5d:66:08:
d5:89:9a:5b:70:74:9b:71:ef:ae:33:d8:fe:f6:7b:
af:e0:c8:0d:94:b8:af:4c:e2:ce:c3:2a:41:1b:87:
52:30:1f:5e:dc:a6:ee:66:b9:22:b0:6b:95:0d:cb:
15:33:72:ac:88:bc:9e:76:07:21:02:c4:0c:23:81:
33:ca:a3:83:aa:68:2b:07:97:04:ab:fc:60:45:f8:
63:d2:6c:34:e2:39:77:27:63:18:f2:79:ec:15:c2:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:98:BF:9A:C5:56:92:99:D5:CE:AB:9F:2B:4A:91:FC:84:B9:E9
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:6c:cd:a3:ee:9d:43:01:a5:2c:00:72:b2:4e:2b:cb:4a:
ec:a3:8f:27:1e:38:49:76:4b:2b:0e:25:ac:3d:60:3b:81:e9:
25:58:99:6d:0d:f0:f7:f6:4f:aa:f4:f6:cf:61:48:11:9c:9e:
03:e1:4e:98:f6:11:b7:7d:02:ec:c9:5f:1c:8a:be:33:27:25:
d3:01:1a:45:a9:df:4c:31:5d:c9:df:d7:3b:41:44:28:b3:01:
81:5c:98:73:1a:1e:98:40:b1:23:58:2f:15:cf:21:40:da:74:
10:5f:bc:c7:13:df:13:7f:f7:2e:a2:cf:b7:51:32:df:de:e7:
f1:7a:ea:ea:a3:75:ac:c1:ed:58:70:c2:8f:88:a8:3f:5d:1f:
97:78:d7:ea:87:eb:02:c8:c5:47:c8:c6:8e:30:23:fb:78:6b:
55:19:d0:4c:52:3c:10:6d:54:e8:b3:9a:a3:b7:23:0d:09:5d:
39:c0:3a:e0:87:5a:9d:92:80:25:e1:cb:37:0d:f4:0a:29:05:
06:17:ae:a5:40:d3:2a:45:b5:6b:54:22:0d:a9:83:20:5e:c7:
56:1e:d7:55:cd:03:ca:a5:80:8a:e2:65:73:ea:3b:d4:33:a5:
c8:8c:85:cf:47:e8:e8:f8:6b:9e:bc:94:0b:a0:06:2c:9f:44:
ec:7d:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:41 2026 by rpki-client