Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: +NAQQt4zMKL7w+qz6ugPVcWF9MFNwScS7FtETyV29wM=
Subject key identifier: FD:D4:0B:28:B4:39:A1:FE:3A:14:B0:53:8E:BF:08:19:13:92:B3:A9
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019ED506F63F75C191DC9118D50BBBF3DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 030E
Signing time: Wed 17 Jun 2026 10:01:03 +0000
Manifest this update: Wed 17 Jun 2026 10:01:03 +0000
Manifest next update: Thu 18 Jun 2026 10:01:03 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: lWg+RMhWDDdKg8H7lE8Jf+/qftILt1VNzIZVf0L0JQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:06:f6:3f:75:c1:91:dc:91:18:d5:0b:bb:f3:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Jun 17 10:01:03 2026 GMT
Not After : Jun 18 10:01:03 2026 GMT
Subject: CN=fdd40b28b439a1fe3a14b0538ebf08191392b3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:9f:60:4f:d8:eb:c0:12:f0:1c:53:a1:e1:
86:9e:be:6e:f0:18:d0:82:4b:25:da:06:a7:35:44:
c7:14:b0:1e:f2:e3:0e:24:40:17:f1:4a:cd:51:e5:
b4:01:3e:7b:5d:53:e7:a2:7b:8a:1d:01:da:f3:18:
7a:0a:35:79:77:32:03:fd:c4:63:d3:34:75:16:6e:
af:9b:8d:bf:5d:4d:25:d6:35:38:ce:9c:68:e1:f4:
00:ff:1c:43:98:fd:9e:19:5f:e7:c9:5b:3a:63:a4:
b8:13:9c:93:56:80:8b:9b:16:37:d2:0c:c6:da:68:
d2:9b:c7:bf:77:8c:ea:b5:48:a1:73:e5:75:c8:95:
7e:de:1f:88:74:5a:84:62:f5:27:db:50:00:4d:09:
f1:55:2d:89:ac:28:91:cb:29:8a:fe:3f:91:4c:8f:
0b:c1:1a:98:a7:7e:77:5e:13:21:49:ff:d9:89:d8:
5c:b0:43:a1:9b:57:79:bf:13:f2:20:7a:b2:7f:be:
c4:4e:81:a8:f4:a8:68:3e:4c:5c:55:66:7a:18:84:
be:6b:d6:35:4e:6e:d7:5a:93:63:67:0d:ca:3d:1d:
7b:38:7f:e2:09:3a:01:95:e6:bf:14:4c:01:b8:b9:
6f:0d:49:7e:15:81:17:f4:b4:f7:b4:c8:91:82:66:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:0B:28:B4:39:A1:FE:3A:14:B0:53:8E:BF:08:19:13:92:B3:A9
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b1:2e:d2:d3:0e:51:91:2a:30:d8:3a:a7:16:de:99:b0:df:
9b:ae:86:76:77:e5:77:3b:b1:58:03:f5:aa:0c:e5:4b:05:c3:
d8:37:30:ca:a2:c4:76:ec:63:49:89:46:e7:a4:d4:3f:1e:90:
a8:40:d9:90:45:64:a1:1f:0c:2a:00:56:f9:ae:c3:04:a0:49:
8b:7b:d3:b9:d1:c7:4c:98:60:03:c2:4d:66:0a:ce:35:2f:ba:
e7:99:a5:91:29:74:45:9d:b5:17:ec:a5:45:ee:f9:33:a1:5a:
9c:ac:f5:8a:f8:1f:7e:4a:45:3c:36:13:d2:73:f3:4c:7e:4f:
ca:b1:4a:b3:ff:75:39:49:26:dc:b8:ea:9e:6b:3a:33:50:ad:
0e:92:81:98:99:2e:f7:d3:65:f4:4b:b0:6a:a2:2f:44:ba:77:
12:3e:68:d8:ac:d3:b0:55:ea:d5:a0:d9:25:e3:29:0a:21:f8:
5c:69:a0:10:a0:38:c1:5c:5f:70:17:de:77:29:74:d3:0b:4f:
cb:9d:d4:ad:14:b3:fa:ca:e5:10:ad:44:b8:57:09:f9:96:1d:
dd:80:a8:6b:98:d9:a7:dc:9a:48:a6:26:13:a6:6b:47:31:8b:
e9:6d:06:e9:29:ba:ac:7c:7a:52:77:d8:bb:52:34:97:ea:43:
99:76:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:10:35 2026 by rpki-client