Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: Gb+VD6hzBw6kTHtTydGlyIvqv5AxDBYBSMhI+umFBtY=
Subject key identifier: C7:96:DA:76:B5:AE:4A:1B:44:D6:FD:A4:B0:E9:1A:B6:93:1A:EB:B5
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019CAC7E5EB82947EFF428BC3FED1F30B1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1148
Signing time: Mon 02 Mar 2026 03:01:28 +0000
Manifest this update: Mon 02 Mar 2026 03:01:28 +0000
Manifest next update: Tue 03 Mar 2026 03:01:28 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 6ggWfNY8UdrZ28Bb3Y7gn0METmlm0/JncfJY+WAT+zs=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5e:b8:29:47:ef:f4:28:bc:3f:ed:1f:30:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Mar 2 03:01:28 2026 GMT
Not After : Mar 3 03:01:28 2026 GMT
Subject: CN=c796da76b5ae4a1b44d6fda4b0e91ab6931aebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:cc:3b:01:f2:16:1b:58:6e:a7:13:91:a5:
fc:c1:cc:ba:ee:13:a2:17:11:92:cf:d5:7a:5d:31:
04:d6:83:0c:cf:f5:97:a2:52:ef:02:42:ab:3d:ad:
f6:e1:0b:b7:10:4d:96:38:2b:63:c2:a8:82:4f:3c:
cb:3a:93:15:06:04:d0:7e:71:72:52:a6:ad:14:ac:
8a:ec:c2:ff:5c:d4:3c:db:b1:c2:c2:dc:13:3e:c8:
8d:0a:9b:40:9d:8b:20:40:d6:5f:37:f4:69:9f:c2:
a5:2e:70:fd:90:5b:00:0b:09:29:5d:50:5c:f2:fa:
1a:50:6c:f3:eb:40:ff:81:5a:b5:af:2f:46:ca:01:
cd:e3:cb:67:8f:33:d6:33:ad:57:57:53:f2:4a:dd:
12:52:27:98:3b:70:00:6d:20:ac:c5:e5:5c:51:54:
b4:a6:c5:17:89:41:e9:ab:cc:98:3d:69:d6:57:2a:
b0:d7:08:57:5a:52:7b:fd:3f:63:35:2d:10:69:cf:
21:af:d8:85:54:40:b2:36:72:39:de:6c:4f:21:f9:
d0:28:c6:36:97:da:0c:ec:83:76:a5:9d:ad:9f:88:
99:29:42:cd:8d:5a:96:e1:38:49:31:db:c5:cf:dd:
a3:c6:b8:cb:db:01:ba:15:d0:56:3f:79:bd:38:80:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:DA:76:B5:AE:4A:1B:44:D6:FD:A4:B0:E9:1A:B6:93:1A:EB:B5
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:53:da:f0:83:0c:af:df:3d:ec:b4:74:63:eb:fd:ba:d9:
a9:62:f8:a0:94:e3:cc:a0:f9:2b:46:80:cb:78:70:71:6f:0d:
c4:2d:70:49:ca:b5:7d:dd:fe:85:58:dc:20:7d:58:4d:97:ea:
62:47:d0:cb:3c:ba:92:7d:91:bd:4b:a0:e3:84:6f:ad:ab:7b:
cc:c0:83:7e:31:e8:d9:59:a8:02:88:be:97:a0:8e:b8:a7:fc:
35:36:10:9c:a6:fa:cf:d9:cb:5d:29:0c:fb:7b:48:06:f0:8d:
e7:0b:fc:0f:58:9f:88:23:c9:0b:71:59:24:fd:b1:83:8b:87:
cb:5b:82:9b:ed:52:32:67:35:08:e6:31:db:12:52:a2:ce:da:
ba:f8:2e:92:d7:d0:43:e4:38:e8:86:8e:55:8d:97:9f:88:09:
0d:64:d2:b7:81:e0:0a:c9:2c:f4:9e:f0:04:42:5f:e4:b8:75:
da:80:cb:53:5c:39:ff:bf:d3:c0:63:34:ee:cb:ca:49:72:ff:
af:1b:2e:ac:79:f4:18:f1:7d:35:d5:bb:df:39:ad:82:b2:be:
06:b7:3b:75:71:5e:b9:5f:a7:c4:f3:ea:75:87:09:b0:fb:cf:
58:d6:30:85:f4:a5:19:05:b8:62:cc:eb:4b:bb:b7:1a:7f:89:
29:98:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:51 2026 by rpki-client