Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier: pLSXsL/vOpv7cUx0+/nirek6f7KVvazDbuIUIM/CgJ0=
Subject key identifier: 02:63:DA:F9:19:0A:8C:C4:FE:CA:BB:00:8E:AB:76:FF:16:21:28:61
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 01A0BD2FE3A7A815612B20A7C193E37A77FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number: 0209
Signing time: Sun 20 Sep 2026 05:00:27 +0000
Manifest this update: Sun 20 Sep 2026 05:00:27 +0000
Manifest next update: Mon 21 Sep 2026 05:00:27 +0000
Files and hashes: 1: 5rBPZdaUmnnvoDphMpg0g3YswCw.asa (hash: 7Eg90jHkUTWS1OEeoEBVZ3nD/aanQ7UPalxj2Kd5AAo=)
2: XT0TwWf3saDmUZLJkEZTVoj08Go.roa (hash: IK7s2dRYQhCtsnAJ87ZpG0v9gy5QrOO4Jv4XvFQQKxY=)
3: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: rTF7wDc1LHzp4GPvzanPaQjOcNcAVFBL6OyKIKqtf10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:e3:a7:a8:15:61:2b:20:a7:c1:93:e3:7a:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Sep 20 05:00:27 2026 GMT
Not After : Sep 21 05:00:27 2026 GMT
Subject: CN=0263daf9190a8cc4fecabb008eab76ff16212861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:2c:32:ed:1c:42:23:7d:ec:75:52:55:7d:
88:d8:95:93:84:31:fb:e5:c3:70:d7:b9:8b:62:53:
9b:e5:4c:aa:61:65:b4:0c:1c:47:5d:76:87:05:6c:
da:a5:a5:59:38:ad:25:7d:df:4d:b0:34:7e:86:f4:
3b:67:4b:9b:69:67:2a:7e:e2:3f:fd:78:4c:1f:00:
4c:4d:32:90:ee:3f:a3:cd:6f:fd:70:e8:22:b7:5e:
e4:b3:8a:ee:12:49:7d:20:15:58:85:6a:e1:57:17:
03:67:67:70:a5:0e:c2:41:8d:6d:a8:87:18:13:df:
e9:fe:d3:d8:40:3b:74:22:c3:5e:dd:04:72:a8:ff:
5b:ba:51:2a:40:bd:ff:12:d6:9f:7c:63:39:98:8a:
4f:43:1b:15:dd:ea:d1:3a:e0:06:ae:8c:86:83:88:
d8:3a:a6:0e:49:9b:99:75:48:13:b6:97:fa:8a:66:
82:a9:86:17:23:9b:b0:33:63:02:c8:8c:36:d1:23:
d8:6a:9c:1e:b0:82:88:ad:ed:fd:60:e6:58:ab:cf:
24:44:d9:61:38:2f:e9:3f:76:1b:d7:f4:f0:aa:41:
23:dc:38:a4:aa:c9:82:e5:46:33:4c:57:15:31:57:
e3:02:0c:26:7e:ae:f3:d6:66:e5:85:29:36:b5:c3:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:DA:F9:19:0A:8C:C4:FE:CA:BB:00:8E:AB:76:FF:16:21:28:61
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:30:7d:71:d3:07:0f:c6:3e:69:25:64:9b:09:d9:f3:b0:
b8:fb:e9:1d:f7:96:5d:bb:07:fe:77:95:93:fd:c5:9c:fc:5e:
84:ae:b9:86:ba:38:12:3b:3f:3b:73:82:14:03:0e:85:6f:d3:
f0:43:50:2b:ab:a2:be:81:d8:06:c4:85:36:49:8c:17:52:b4:
51:68:ee:a3:86:4d:f9:d3:c8:9a:88:df:a8:50:e1:42:9f:82:
9d:41:ee:eb:0d:2f:3f:68:07:a4:73:12:a5:ed:04:5a:ee:4c:
40:46:6c:a2:fa:07:e4:18:c6:54:7b:04:ec:e7:34:1b:0d:66:
3e:b6:9d:84:3a:95:0e:e0:3f:f4:33:a7:0a:2a:35:a6:93:f4:
51:cf:0d:de:ff:72:34:2b:75:83:b5:4e:ce:a0:f0:7c:8d:fb:
eb:65:d2:1f:98:9d:4f:4c:60:9f:4e:e4:b9:f0:89:a4:84:2e:
f9:64:64:e6:fe:f3:50:36:e8:1b:2b:3e:d1:53:c5:e3:7a:c2:
7a:c0:55:38:1d:d1:4f:a8:fa:a8:f8:90:49:21:e1:c5:b2:9e:
3b:f3:1e:f4:0a:fc:d9:d3:b2:34:5d:9c:33:43:08:8f:87:22:
a4:ff:20:71:ba:04:c9:62:09:de:f2:96:58:6a:c9:af:34:43:
7c:2c:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:35 2026 by rpki-client