Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: YllCtYc8+LnwBYtMiWHHvAZiP+uMQXV3cghk9BGQEOI=
Subject key identifier: A9:13:44:17:C6:A0:0C:EB:4A:18:C8:31:35:5E:3E:52:8B:80:3F:9E
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01A0C8FD39C7F95EBDE60B887D1B9F070F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1369
Signing time: Tue 22 Sep 2026 12:00:33 +0000
Manifest this update: Tue 22 Sep 2026 12:00:33 +0000
Manifest next update: Wed 23 Sep 2026 12:00:33 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: Qj2PI2a/Lh8Ll8tHlomRMck+hwa6m+RoC8U3Bgv4ktk=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:39:c7:f9:5e:bd:e6:0b:88:7d:1b:9f:07:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Sep 22 12:00:33 2026 GMT
Not After : Sep 23 12:00:33 2026 GMT
Subject: CN=a9134417c6a00ceb4a18c831355e3e528b803f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:9f:fd:ad:18:b8:2d:89:20:e7:aa:4b:73:
ca:14:85:c0:31:09:09:20:23:7d:f8:63:9d:8d:06:
23:7f:91:1d:69:e5:a5:cd:28:d1:09:9f:31:65:c0:
9f:a9:8e:aa:5e:d6:1f:e0:08:dc:1e:62:8e:19:f4:
97:59:da:b3:9d:91:af:f9:8f:e4:a4:7b:fc:b9:d6:
88:e0:8f:53:a8:63:36:4a:1e:09:c7:79:d6:c9:36:
a1:13:ab:69:03:7a:48:18:5c:5c:1c:ce:8e:5a:1d:
7a:1c:c3:29:ce:90:a6:eb:00:94:e3:3c:0c:a5:67:
e1:17:76:f5:f7:34:a7:6b:e5:81:6e:67:16:7f:95:
03:eb:95:94:82:14:37:ff:28:e6:74:ab:fa:80:08:
ad:cf:79:94:fb:02:92:5f:1b:82:11:cf:4f:a9:ec:
55:c7:d0:60:84:b9:c1:34:ea:5a:d2:cf:05:3e:e6:
94:07:26:22:12:f8:6d:41:2b:58:29:72:13:6c:a5:
6a:0f:1d:8d:98:c7:4f:d5:a8:e1:03:8b:b5:c3:96:
0e:15:c7:03:60:9d:db:b2:8c:6d:bf:58:bb:71:5d:
8f:50:f0:4c:0e:11:e8:bc:c2:3a:14:6e:79:06:88:
71:98:56:6c:5a:37:fd:88:3d:39:bf:34:07:ca:e5:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:44:17:C6:A0:0C:EB:4A:18:C8:31:35:5E:3E:52:8B:80:3F:9E
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:90:73:a4:47:48:3c:3d:2b:b4:1a:8e:de:c7:d1:10:23:51:
58:75:71:66:54:f6:cd:e4:2f:30:51:a0:e3:af:0a:a2:93:0f:
3f:6b:d2:15:8e:c0:29:99:b8:d5:35:d1:58:a7:f5:f0:42:61:
e7:2c:e0:bc:50:74:1b:9d:0c:57:6b:4a:48:6e:18:94:31:51:
0f:e6:c2:dd:b6:db:fa:60:f2:b5:88:5a:79:4a:60:0c:03:d2:
6c:67:0f:c4:41:54:bd:ac:e6:d1:15:60:ec:f4:7c:d5:18:81:
63:09:f6:9f:0e:e6:9b:bd:1c:b1:ac:1b:10:86:3b:45:b3:14:
61:0a:33:ee:2f:6d:ba:1a:58:cf:46:c9:15:a6:4c:d7:b6:1c:
17:7d:12:d9:26:22:aa:e7:05:25:27:0b:d4:20:5d:48:12:ea:
c5:bd:35:41:e1:be:14:42:ec:c9:ce:f1:68:e2:a7:c2:e9:59:
7e:02:80:e0:99:9b:d1:42:cf:6a:e0:ea:27:01:47:81:cb:99:
99:24:92:cf:ea:3c:00:cf:db:6e:2b:be:f6:11:30:d0:ef:ba:
86:b5:89:20:1a:b9:38:18:3c:10:99:f5:9d:81:26:8c:f9:db:
42:b5:a7:c1:b1:97:47:75:4f:28:9e:a0:62:fa:f7:12:a3:93:
f6:46:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:48:38 2026 by rpki-client