Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: fbbbMu20xXpKyDgWrLUmMCzM8McwhQ5sjaX5wsPymj0=
Subject key identifier: D4:F4:15:9D:A4:55:77:A8:4F:13:74:07:8B:6D:86:70:41:30:97:53
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019EBF91BE11CF27755539BB5A414A8E378A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 125B
Signing time: Sat 13 Jun 2026 06:01:00 +0000
Manifest this update: Sat 13 Jun 2026 06:01:00 +0000
Manifest next update: Sun 14 Jun 2026 06:01:00 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: HDZQ9C6QmqMhibzrZ/8BNvuP4TmjlXuCOirfXS+ll/w=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:be:11:cf:27:75:55:39:bb:5a:41:4a:8e:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 13 06:01:00 2026 GMT
Not After : Jun 14 06:01:00 2026 GMT
Subject: CN=d4f4159da45577a84f1374078b6d867041309753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:74:1f:46:2b:d1:82:e0:39:eb:2f:6e:b1:
a9:79:4c:0a:04:aa:f9:8a:92:59:02:1d:5f:5f:42:
14:99:0c:03:24:c9:19:e4:ee:c0:73:b7:1f:74:55:
06:db:bd:55:12:f5:7e:a2:c8:82:02:ae:38:a5:cd:
ae:8f:ea:1f:e4:24:a9:c3:8a:9e:7b:bc:11:30:d9:
cc:aa:82:45:e7:83:9d:e4:7a:13:60:d4:ed:8b:d9:
9f:8c:a6:2c:ec:c3:03:93:f3:b5:d9:2f:fd:e6:21:
8d:e2:8f:f7:24:36:a8:66:4d:d8:66:09:6c:09:d3:
73:19:f7:0b:1a:c5:7b:90:3f:f3:1a:01:04:a0:62:
21:55:83:7c:f7:79:ad:ba:82:5b:1c:15:70:fe:bc:
75:d2:0a:76:fa:d8:d1:67:13:3d:25:22:fa:ca:31:
7f:57:62:f6:0d:28:4d:51:7b:75:7e:2d:17:04:b9:
a3:d4:bf:cb:66:77:9f:33:a0:bc:e4:6b:e1:da:ca:
26:b1:ca:78:a5:0d:77:6d:67:c5:56:14:39:c4:b6:
23:41:44:d3:6e:ea:5f:3d:e4:77:01:ab:e5:d4:b9:
32:8e:75:ce:6e:6a:9d:87:12:86:51:d0:2b:7b:6b:
1b:ff:e4:b9:aa:5b:43:15:e1:69:93:2e:a6:ed:a6:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:15:9D:A4:55:77:A8:4F:13:74:07:8B:6D:86:70:41:30:97:53
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7e:ab:3c:9d:86:fc:09:57:4a:c6:6a:e3:b7:9e:67:0e:53:
41:22:b3:13:e0:3c:72:ea:05:12:91:8c:af:cb:43:55:d0:d2:
1d:ba:2c:3f:5d:d8:f8:b3:86:88:1e:29:57:ac:3c:5f:ae:b6:
6d:94:c6:95:c3:99:29:0f:06:b2:bf:f9:30:33:46:b8:f3:e7:
ca:6c:82:4f:dd:10:c2:02:0e:cc:60:c5:d2:86:c4:f5:fc:10:
55:e9:71:00:e2:36:a2:3f:35:0b:82:c6:dc:33:5b:6f:6b:08:
ef:7f:14:1b:2a:60:e7:da:f6:ac:ef:b1:45:15:e4:56:4e:9d:
79:9f:90:b8:3b:c5:cf:8a:e5:8d:4c:ed:a4:07:cd:15:8d:b2:
4b:32:af:36:6f:fa:b5:57:d8:99:91:2d:bb:29:f5:ee:13:81:
48:c1:6c:ce:d7:2b:d0:aa:be:4c:a9:26:c6:63:e6:05:4e:61:
18:ff:ca:64:27:6a:9d:6c:f4:a4:7c:40:38:35:0d:c4:57:a1:
f8:a2:26:81:49:64:f4:24:68:24:c5:62:e8:b6:02:63:f7:1f:
ce:03:ab:c2:08:81:8e:32:db:ca:10:02:78:f3:fe:9e:7f:ac:
a4:06:af:e0:ca:42:59:25:4c:9c:2a:ac:c2:15:d8:08:23:af:
9c:72:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:17 2026 by rpki-client