Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: bkRA3w3ryQJI7oopuT6MCqOaI5YSGYpXSRPgxobbrQQ=
Subject key identifier: CE:28:49:BD:49:B3:2E:44:3E:AD:4F:45:48:F1:86:7B:B9:44:90:B9
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019DA3E7047575957C10E6F23A655F6BF10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 0270
Signing time: Sun 19 Apr 2026 04:01:59 +0000
Manifest this update: Sun 19 Apr 2026 04:01:59 +0000
Manifest next update: Mon 20 Apr 2026 04:01:59 +0000
Files and hashes: 1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: C4v/KU0L3DMi0BuFUJpb2Nnl6GzDcxFNPetp8q2/Ta0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e7:04:75:75:95:7c:10:e6:f2:3a:65:5f:6b:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Apr 19 04:01:59 2026 GMT
Not After : Apr 20 04:01:59 2026 GMT
Subject: CN=ce2849bd49b32e443ead4f4548f1867bb94490b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:46:46:03:14:7c:bf:92:03:94:a6:50:4f:
f9:9d:11:7c:7b:82:52:e4:14:e3:f7:03:f9:c3:3a:
8d:e4:63:ea:94:4e:bf:6a:c1:8d:6a:f3:48:16:f8:
86:0f:02:07:32:26:e5:ec:02:fa:6c:16:8e:a1:c9:
d3:04:b7:44:31:a9:46:d5:5c:02:a2:df:91:37:86:
9b:0f:b8:c0:32:42:e7:60:e7:04:33:6e:b8:e0:31:
1f:1a:5d:ab:6b:a0:69:2b:97:fa:a0:e7:88:29:ea:
43:ce:bf:95:f0:43:02:7e:c5:06:27:cb:08:85:4c:
59:98:38:3f:31:f7:4e:9f:d4:63:2a:4d:4e:c3:5e:
13:52:02:93:3e:10:9f:6a:8e:09:5f:df:c3:1e:cf:
35:9c:48:80:7f:d3:66:e4:d9:8a:30:ec:64:e1:5a:
3e:31:a7:06:68:00:f2:ae:74:a8:0a:06:b0:01:cf:
e5:78:5a:39:77:3f:11:f6:cb:f7:6e:22:1a:d7:25:
b3:8c:89:28:cb:31:9f:39:df:b8:66:f1:99:ff:3c:
fb:7e:04:90:b2:16:15:01:38:62:4a:47:be:fc:e1:
22:64:b2:89:65:2e:92:1a:a9:ed:00:0a:23:10:a6:
d6:a9:35:6b:a5:9d:ea:6e:dd:77:18:b0:d7:82:9d:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:49:BD:49:B3:2E:44:3E:AD:4F:45:48:F1:86:7B:B9:44:90:B9
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:49:7c:92:cb:36:5a:f7:80:ff:8c:3c:8d:2d:b6:57:4a:d8:
30:5d:0c:ff:61:d6:18:48:41:83:02:f5:e9:84:06:6e:4e:91:
85:dd:a0:fa:c7:f8:90:cc:8e:c7:47:01:58:0c:7b:6e:e9:a2:
70:77:72:c8:64:21:44:5c:a7:76:7a:cd:1a:e1:43:bf:90:6d:
f5:4f:7c:21:bb:38:53:66:6f:8a:5a:08:0d:04:3b:14:94:93:
88:c6:6f:4f:1e:d4:71:9f:84:7a:f0:18:b0:70:e5:9d:55:b8:
e6:ef:5c:7b:87:d5:ab:ac:ee:8e:d5:ff:6f:9b:ce:fb:19:a9:
e9:2e:06:eb:ba:68:48:dc:d1:fb:7a:d7:73:2a:ec:24:bd:ba:
f7:5c:d7:f7:01:77:3d:24:26:16:8a:06:46:fe:2d:9a:2a:e9:
9e:9a:24:e7:b8:1d:79:45:77:9f:e8:56:fc:1a:ff:ec:4d:b7:
b4:c3:06:05:24:91:46:98:b2:ec:04:88:73:5c:3f:13:3c:ce:
e9:da:48:57:ec:96:0a:7e:00:f1:67:99:99:7f:41:9e:96:87:
9b:15:00:7f:8f:20:a5:b2:cf:d3:a2:d7:1f:dd:b6:1f:3c:b9:
56:84:f9:38:41:65:03:f2:88:04:e1:8d:94:52:cf:41:1a:f7:
18:13:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:52 2026 by rpki-client