Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: sAhGPovYakCHgi8l2b79NZigBJJL46aOo1ri6SoUqkI=
Subject key identifier: 80:B3:96:EC:DC:37:B2:8A:7A:7D:79:4F:10:01:02:65:62:42:D3:71
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019D2A3B7281CFAE3E27D87787E2A1F54C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 0231
Signing time: Thu 26 Mar 2026 13:00:32 +0000
Manifest this update: Thu 26 Mar 2026 13:00:32 +0000
Manifest next update: Fri 27 Mar 2026 13:00:32 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: 77i1slHw+i4WETk5iZqyQXP5uVS5b6A+9BNWH5DtNJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:72:81:cf:ae:3e:27:d8:77:87:e2:a1:f5:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Mar 26 13:00:32 2026 GMT
Not After : Mar 27 13:00:32 2026 GMT
Subject: CN=80b396ecdc37b28a7a7d794f100102656242d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:a2:67:de:bb:63:66:d4:da:8e:11:6b:3a:
d4:1c:c0:66:78:9d:11:12:0a:c9:bf:59:b7:c8:4a:
6e:18:e5:d3:c2:df:9e:b8:2e:aa:57:74:98:a7:7f:
5c:77:81:13:cb:11:ac:f1:3e:fd:70:d7:a9:06:a9:
44:e9:32:93:70:dc:01:56:3a:18:6e:ea:70:24:07:
98:a2:64:3b:f0:bd:18:93:07:c2:92:4b:dc:d3:23:
4e:55:8d:38:78:63:94:1b:90:bf:da:51:f6:31:4d:
a2:d7:13:1b:8c:7f:74:ad:51:a4:3c:29:62:5a:34:
db:fb:db:a8:dd:06:dd:3e:39:2f:79:65:7d:2e:c0:
9c:81:dc:0e:4b:20:69:8a:e7:a5:b0:a4:a3:1a:df:
59:02:c4:06:e5:27:b5:2d:89:82:5c:4e:3b:72:b1:
57:32:d4:ed:bc:49:3b:1e:91:28:31:8a:fa:22:d9:
57:f8:73:be:c2:87:28:20:54:f5:54:2e:94:de:71:
46:4a:af:04:58:6a:e4:6c:3f:b5:42:f9:ca:1b:62:
17:79:0b:94:e2:23:de:30:f5:50:49:4e:30:45:da:
88:10:44:a2:37:08:44:9f:40:dc:b0:cc:28:e3:c3:
a4:c1:30:d6:3f:90:17:23:c2:7b:21:ad:bf:10:b6:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:96:EC:DC:37:B2:8A:7A:7D:79:4F:10:01:02:65:62:42:D3:71
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:78:0e:6c:85:a1:0f:e0:d2:ef:2d:91:d2:f2:36:73:10:
e3:13:a9:db:c3:92:64:42:b2:09:f9:82:0b:d2:3e:d8:7f:a8:
09:f0:db:9f:36:aa:69:5e:a2:3e:3c:bc:ef:0b:19:5a:50:f8:
6f:02:2d:57:24:8c:29:d3:d8:0f:42:b5:f7:9c:69:04:50:00:
41:b9:ee:3c:93:79:50:d0:15:6c:b8:7a:63:78:b5:56:06:e6:
d5:fd:0f:51:8c:85:69:2c:16:a8:a1:03:71:bd:39:44:0a:e0:
95:1f:f0:3b:57:b6:38:f8:2d:c4:a0:26:ea:dd:a3:4d:dc:c5:
f0:7f:fe:44:65:dc:e1:2a:f5:8b:73:79:21:c4:f3:df:3a:fe:
a3:ec:4d:68:7b:78:b6:84:df:50:e7:6c:db:85:ca:b5:ab:a0:
e7:dc:70:fc:60:89:ea:6a:3e:f0:22:db:a4:b4:b5:4d:d3:bd:
92:21:0e:35:96:dd:8d:98:33:13:e6:60:f3:05:42:77:eb:8d:
74:7d:20:b7:a7:c7:ee:60:50:04:3f:a7:3f:51:14:03:0f:9d:
fe:a5:b0:7a:53:76:fe:e0:d1:69:8d:bd:dd:38:19:08:45:14:
24:dd:0e:de:5c:bc:99:0c:d1:0c:25:9d:e6:a5:31:d1:85:7d:
cc:8a:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:56 2026 by rpki-client