Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: 3aaBZu1Bypnv3IJzzy9f6+RhvwwCnPDTx6VIz9SEV0s=
Subject key identifier: FE:39:5A:F3:6D:33:BB:1F:97:9D:16:A5:1E:62:87:2A:C0:B1:A2:C6
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019E216DBB9DC9EBF5CE564E12D81239A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 02B1
Signing time: Wed 13 May 2026 13:01:40 +0000
Manifest this update: Wed 13 May 2026 13:01:40 +0000
Manifest next update: Thu 14 May 2026 13:01:40 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: EjRM/bbkCGfNhogtmhgzkS/Y41RGEd33fMi82oxgRiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:bb:9d:c9:eb:f5:ce:56:4e:12:d8:12:39:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: May 13 13:01:40 2026 GMT
Not After : May 14 13:01:40 2026 GMT
Subject: CN=fe395af36d33bb1f979d16a51e62872ac0b1a2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:cb:4b:9d:1b:84:d5:cb:72:2c:69:f9:67:
80:d0:22:7f:bd:4f:15:4b:aa:eb:a8:ba:e8:3b:42:
c2:1e:00:a2:6f:10:e8:b6:8b:98:25:c5:c2:2f:ab:
5e:a9:21:d2:76:be:ea:f2:6e:25:e0:bd:2b:b0:0f:
57:b4:78:3d:2f:4a:b9:a9:3f:1a:30:be:a6:d8:15:
5e:0e:fa:03:c8:eb:0d:29:5d:fe:fb:b5:1f:2c:0a:
c1:db:75:24:f6:3b:98:85:2e:8c:06:ea:f5:c7:0f:
9d:f9:63:ff:79:32:4c:5f:1c:21:16:ed:7e:a3:10:
92:98:11:95:d5:23:38:d1:2c:08:0b:52:86:3d:54:
92:bf:3e:bb:dc:24:80:2b:6c:cb:70:51:1a:fe:68:
e3:8a:9c:b1:9e:88:a1:45:d5:de:59:69:6c:82:2b:
1a:45:c6:7c:b0:b0:57:2a:ec:97:94:5d:31:6a:88:
53:fb:cc:7b:3f:52:10:fd:cb:8b:34:1b:2c:21:15:
47:e0:73:91:02:89:60:a5:b2:d1:fc:8f:16:68:6f:
cd:1e:ef:14:9e:62:d8:46:d5:a0:51:3a:6d:d9:a1:
80:64:2f:91:84:90:f4:bb:a7:ca:cc:2d:42:64:fd:
60:9a:57:ec:1d:b6:2c:dc:ae:91:a9:42:ac:cd:7b:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:5A:F3:6D:33:BB:1F:97:9D:16:A5:1E:62:87:2A:C0:B1:A2:C6
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:fb:97:9f:d1:2f:79:36:36:13:50:07:ed:0b:ce:eb:9a:
4c:ae:b0:72:ff:cc:22:e1:ab:99:51:09:87:88:d6:aa:f7:88:
23:2d:c1:19:eb:74:5b:82:fe:91:4e:e5:09:c3:4a:30:ce:4d:
1c:c2:e7:be:0c:ba:37:4c:e0:b1:79:03:55:46:cf:5b:38:70:
98:f2:d7:08:48:3f:89:77:85:77:4f:bf:1c:f8:33:85:4a:9e:
1d:30:38:60:62:a8:3e:3d:8e:72:98:56:ad:76:79:9f:6a:eb:
c8:78:70:66:f5:6e:2f:c7:2e:e1:f3:5e:c5:20:58:04:85:02:
91:9a:8c:c0:ce:a1:87:6a:ab:3d:81:31:c6:54:d8:8d:1d:b5:
f6:95:c6:90:f2:41:c0:4f:a1:a1:6c:63:7b:a3:a9:e4:9a:07:
3f:72:52:37:c1:a4:db:c4:0d:b7:a2:9f:76:90:44:ea:44:6f:
90:4c:cd:26:a6:40:af:37:56:68:6c:30:a2:fb:a4:9b:cb:4d:
fa:27:35:52:fe:e0:91:db:cb:34:23:ea:3f:5d:3d:9c:30:17:
c0:ba:b4:71:a9:ce:bc:6c:8f:fe:14:84:3e:f8:5b:96:e6:c6:
a8:f8:73:84:ff:dd:cd:34:d1:13:2b:5a:e3:75:b9:a6:09:da:
2f:5b:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:31 2026 by rpki-client