Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: lsjMQCDkokyt1n8XvI8d2c8rHvoxvqRJ6db0PRJK+mA=
Subject key identifier: C0:9D:74:B6:86:AA:28:44:C9:A7:2F:5B:D5:12:23:85:5A:93:07:23
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019CAE35DEC242595F135284AE7F7287C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 11:01:31 +0000
Manifest this update: Mon 02 Mar 2026 11:01:31 +0000
Manifest next update: Tue 03 Mar 2026 11:01:31 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: kh9y+lakvg/QxcTFZYfxGgEKujGFit0e5AB9dLaW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:de:c2:42:59:5f:13:52:84:ae:7f:72:87:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Mar 2 11:01:31 2026 GMT
Not After : Mar 3 11:01:31 2026 GMT
Subject: CN=c09d74b686aa2844c9a72f5bd51223855a930723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:6b:12:3e:49:68:5b:a0:35:0c:f6:ff:c5:
06:72:e3:45:7f:16:a1:44:d5:5c:3e:9c:23:49:e9:
c3:cd:3e:71:1c:be:43:2e:4d:3c:e6:03:91:40:01:
47:29:c6:48:ad:d3:5b:5c:0b:72:d7:af:d8:72:ed:
b2:6f:1a:d8:d7:cf:62:f2:67:67:7c:6b:b4:45:31:
37:e5:a4:7b:61:9d:59:1e:76:49:16:e2:f0:8c:44:
98:78:43:43:ca:13:24:3b:cb:f9:9a:6e:e0:80:cf:
f2:6d:6f:05:ea:37:a0:a0:ea:82:0d:f0:40:20:c5:
07:28:67:90:25:b7:10:78:50:4e:53:e4:00:13:8a:
ef:5e:c2:18:de:26:c4:18:96:6f:7c:4e:80:33:68:
5e:c6:f8:b3:78:6a:17:a7:0c:fb:bc:9c:ba:f7:41:
cd:f1:73:3c:0f:e1:ab:64:00:cb:88:6c:f3:a9:f4:
d5:c3:f2:2c:a2:d7:bf:aa:5e:1e:61:22:a0:ea:fe:
d5:01:ba:df:fe:8b:4e:9e:ea:2c:e7:41:6f:e6:17:
9a:f8:f3:42:06:62:b0:24:87:62:32:cf:90:29:ba:
20:7f:08:2d:4c:53:63:14:3f:d0:56:cd:32:a5:62:
10:61:70:b1:11:05:58:c7:94:47:40:cc:dd:68:1a:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:74:B6:86:AA:28:44:C9:A7:2F:5B:D5:12:23:85:5A:93:07:23
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:35:1e:4e:e1:05:0a:2f:0d:3b:fe:75:27:fc:b1:09:94:
e7:b3:3a:71:22:f4:64:ac:52:fd:36:ef:63:fc:1e:f4:1b:3b:
59:61:d9:ea:f1:46:8a:31:9d:7a:1c:31:8e:4f:db:c2:eb:f4:
e6:9a:eb:3a:7e:3b:c5:3c:fa:01:03:1c:ea:c6:d9:56:38:70:
12:0b:23:4a:03:1c:49:d2:e1:81:0e:95:fc:31:9e:8c:f1:9a:
f4:d8:02:be:91:cf:ff:10:2a:68:2c:2b:b7:30:bb:88:af:c8:
d4:ad:40:15:8d:04:39:6f:77:88:b0:e1:82:77:f6:2f:9c:07:
4a:84:aa:1a:30:fa:31:77:11:87:e5:d3:0b:d8:ea:c5:a2:62:
cb:d2:7a:3b:8e:43:c1:7a:fc:ef:bf:e6:db:5e:4a:8a:05:fe:
a4:d4:b1:7c:f9:3a:03:75:96:4b:1b:4a:81:a9:03:48:42:94:
82:4d:b0:7b:d9:08:33:1e:8f:54:0c:af:7e:d9:a1:3e:a2:0a:
59:7e:e5:e9:a2:6d:28:81:02:73:81:c9:6e:15:2a:e7:da:9d:
2d:05:28:f0:8f:9e:ff:63:a5:49:f9:fe:b5:fa:97:04:20:2d:
ff:ea:2b:7d:bf:55:9c:d4:2e:ec:49:d4:6b:07:12:ba:94:f0:
56:31:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:12 2026 by rpki-client