Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: YpHvyzP1+vb6tqzx8Yl1qSSVcoe1meMCdUslS1hMvMg=
Subject key identifier: F2:2E:6F:24:07:0D:2F:08:25:AF:76:AD:A6:AC:EF:70:BA:FA:C2:0F
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 01A134EC60816ECEF5098811497E68D03435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 11:01:08 +0000
Manifest this update: Tue 13 Oct 2026 11:01:08 +0000
Manifest next update: Wed 14 Oct 2026 11:01:08 +0000
Files and hashes: 1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: YMBOhe4AeZok+ESSZOnVxnKOfZXOIMMwnDCFXFdbfVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:60:81:6e:ce:f5:09:88:11:49:7e:68:d0:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Oct 13 11:01:08 2026 GMT
Not After : Oct 14 11:01:08 2026 GMT
Subject: CN=f22e6f24070d2f0825af76ada6acef70bafac20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:3c:1c:d5:54:85:16:11:88:71:69:4d:d3:
51:70:b4:22:c0:96:27:ac:e9:fa:34:5c:9b:fb:f0:
7e:1e:2a:e8:a4:82:a0:bd:cd:89:ce:57:fd:58:6b:
67:35:88:db:3e:ac:2e:b9:3f:c7:6f:1b:e8:68:f4:
29:5e:c7:cb:ae:8e:9e:b5:c1:02:b0:e3:66:c6:61:
1a:de:44:33:02:fd:3b:b1:71:68:2d:73:16:69:16:
20:c6:96:f4:c4:16:dc:27:d4:c3:56:59:6c:d4:70:
62:0b:8d:88:d4:a8:e6:43:05:0f:2a:aa:98:06:9e:
e5:38:b3:33:80:30:8c:41:55:25:63:ab:01:df:54:
71:cf:6d:d6:ac:71:f7:70:89:2b:09:40:a9:43:7e:
d3:13:ee:f3:8b:a5:6a:4a:ae:ca:b8:cc:ba:e2:e3:
9b:90:f7:35:62:d1:0b:92:a5:44:6d:cb:b6:be:fa:
9f:05:2a:f9:94:05:da:04:b9:d5:66:ac:ec:f4:6d:
93:df:3f:a1:01:4b:cf:51:b4:7c:4f:d2:33:9d:ee:
82:e9:b2:a8:25:40:6a:aa:af:a2:c4:b9:36:0d:55:
99:e8:e8:e8:df:b8:9a:06:0f:97:4e:eb:14:cc:0c:
d8:9f:9f:27:38:e3:15:1f:da:0d:f5:23:77:70:1e:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:6F:24:07:0D:2F:08:25:AF:76:AD:A6:AC:EF:70:BA:FA:C2:0F
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:95:3a:95:44:29:5a:f5:29:52:4c:8c:20:c3:40:a2:c5:
ba:23:8a:81:85:70:7e:6b:87:14:23:55:12:3c:1a:85:54:f4:
c2:fb:3d:5a:4a:7b:df:27:35:51:45:ad:5b:52:f6:84:55:2c:
42:3f:72:9a:47:08:95:5d:69:55:cc:2c:7c:ad:5e:63:f6:72:
a1:b9:d2:1d:83:da:61:78:ab:68:e7:bc:50:c8:27:6c:db:80:
1d:34:7c:aa:18:1a:46:d6:6c:4e:7f:ae:cd:06:a8:d0:25:07:
22:03:02:7f:d3:fc:19:5a:4c:bf:99:dd:d5:d3:3b:20:50:c3:
b7:56:3d:e7:7a:28:b4:07:8e:d4:17:dc:64:fc:05:14:50:21:
bd:37:9c:ca:8a:f1:52:e7:9c:2d:15:de:40:2c:5c:ad:ab:a5:
2e:79:1b:45:6e:14:ad:33:d1:50:8d:e6:85:f6:0b:40:e4:ca:
5b:5c:f6:75:4b:9e:8f:a7:36:ba:52:90:fb:0b:df:d2:3c:32:
6d:63:f0:39:b1:af:ca:1a:ae:5a:8c:4d:f3:6e:48:4c:19:c1:
fd:71:43:c0:40:e1:ac:91:20:9e:c3:63:58:ed:69:78:4e:36:
4c:3a:9a:09:de:ff:e6:35:6e:28:2b:de:5f:30:61:dc:22:eb:
48:0c:00:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07GCBbs71CYgRSX5o0DQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjYxMDEzMTEwMTA4WhcNMjYxMDE0MTEwMTA4WjAzMTEwLwYDVQQD
EyhmMjJlNmYyNDA3MGQyZjA4MjVhZjc2YWRhNmFjZWY3MGJhZmFjMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna48HNVUhRYRiHFpTdNRcLQiwJYn
rOn6NFyb+/B+HiropIKgvc2Jzlf9WGtnNYjbPqwuuT/HbxvoaPQpXsfLro6etcEC
sONmxmEa3kQzAv07sXFoLXMWaRYgxpb0xBbcJ9TDVlls1HBiC42I1KjmQwUPKqqY
Bp7lOLMzgDCMQVUlY6sB31Rxz23WrHH3cIkrCUCpQ37TE+7zi6VqSq7KuMy64uOb
kPc1YtELkqVEbcu2vvqfBSr5lAXaBLnVZqzs9G2T3z+hAUvPUbR8T9Izne6C6bKo
JUBqqq+ixLk2DVWZ6Ojo37iaBg+XTusUzAzYn58nOOMVH9oN9SN3cB5UQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIubyQHDS8IJa92raas73C6+sIPMB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr2VOpVE
KVr1KVJMjCDDQKLFuiOKgYVwfmuHFCNVEjwahVT0wvs9Wkp73yc1UUWtW1L2hFUs
Qj9ymkcIlV1pVcwsfK1eY/ZyobnSHYPaYXiraOe8UMgnbNuAHTR8qhgaRtZsTn+u
zQao0CUHIgMCf9P8GVpMv5nd1dM7IFDDt1Y953ootAeO1BfcZPwFFFAhvTecyorx
UuecLRXeQCxcraulLnkbRW4UrTPRUI3mhfYLQOTKW1z2dUuej6c2ulKQ+wvf0jwy
bWPwObGvyhquWoxN825ITBnB/XFDwEDhrJEgnsNjWO1peE42TDqaCd7/5jVuKCve
XzBh3CLrSAwAxw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:23:16 2026 by rpki-client