Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: Mc1zwNvOwHNDYdFnKKXIfOnCqNRL5iYaJtaty1bfyf4=
Subject key identifier: FA:6E:89:3E:D4:10:1C:DF:3A:C4:06:A9:34:51:65:3A:05:E4:B3:47
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019EC1802F29093425F1E22692CA86967E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 125C
Signing time: Sat 13 Jun 2026 15:01:03 +0000
Manifest this update: Sat 13 Jun 2026 15:01:03 +0000
Manifest next update: Sun 14 Jun 2026 15:01:03 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: KmTbaCXl047uV+t+zFMBuDG/IHw8BFqzHzBw4hUpPFg=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:2f:29:09:34:25:f1:e2:26:92:ca:86:96:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 13 15:01:03 2026 GMT
Not After : Jun 14 15:01:03 2026 GMT
Subject: CN=fa6e893ed4101cdf3ac406a93451653a05e4b347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:0c:db:ae:ad:cd:4a:89:20:7f:15:7a:1e:
3b:1a:21:0f:e8:a3:49:68:54:49:34:23:fd:ea:35:
4e:53:2a:a9:9f:56:71:c9:e6:b8:07:8b:4f:70:2c:
39:15:09:01:bb:fa:bf:64:90:53:b5:f8:a4:4a:ba:
45:c2:c5:f7:97:e2:37:d3:50:d7:0e:84:89:47:08:
29:c0:f1:d5:2c:dd:95:55:c9:7a:57:7b:b6:d2:ed:
ec:99:c9:17:85:76:54:65:f3:e4:b4:cb:c0:33:dd:
3b:b0:cc:81:b9:37:44:9a:15:c9:b1:3d:4b:b3:4d:
f1:1a:c4:95:7c:42:21:81:d7:31:16:64:cc:a0:91:
21:1f:e9:ce:49:f0:0a:bf:44:72:be:97:5c:01:0d:
7b:a9:57:c8:4d:dc:2b:ee:a9:76:a3:81:f9:8e:ea:
4a:30:c9:fc:51:27:b4:58:2c:64:20:a5:75:a4:dc:
86:2a:d3:36:a2:8f:27:59:41:55:22:3d:48:63:bc:
ac:55:38:42:95:52:d7:25:ea:9f:ef:84:b4:05:6c:
c6:73:ca:0d:33:71:53:3b:6c:05:bf:5c:15:b1:89:
f0:66:89:56:62:77:62:94:8f:ed:8e:4c:cf:82:cf:
da:ee:7a:2f:56:73:b0:2c:3c:69:52:bb:97:bc:bd:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:89:3E:D4:10:1C:DF:3A:C4:06:A9:34:51:65:3A:05:E4:B3:47
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:97:a5:86:21:5b:23:54:2f:77:3e:9d:66:12:17:46:55:
c0:f8:a0:e0:bb:77:e4:1a:e7:a0:89:0e:6d:ca:69:be:be:5e:
ce:78:9d:aa:92:35:12:16:0e:00:e8:be:45:7f:97:d9:dc:48:
56:8c:e7:d9:1e:d9:6a:0a:e0:7f:d6:7b:5a:8a:c1:30:cf:43:
ba:c1:b3:eb:fd:a3:e9:c7:57:1c:9f:5c:bf:96:bb:d0:3b:99:
1c:6b:d0:3f:1c:cc:e0:af:b8:88:65:24:21:8b:5f:d9:86:80:
28:36:35:5a:b4:8b:82:20:d8:17:f5:68:b2:9f:6e:ba:7f:0e:
66:f7:2a:de:19:aa:9a:25:e2:73:48:10:42:aa:3b:97:32:a2:
91:15:09:f7:c6:c5:85:c2:b1:c9:6b:af:2a:d4:84:d3:db:20:
45:c7:9d:1f:08:7c:6e:ce:72:58:c8:ce:80:8b:61:3c:a1:bc:
aa:f6:ed:8e:40:c7:5b:fd:be:8f:83:a8:ab:93:49:bf:7a:bc:
de:86:5a:f1:2a:c1:0e:0e:a4:72:d4:b3:2b:4e:0c:48:b5:02:
12:99:75:ba:74:f2:f8:62:a7:5d:19:90:38:3b:8f:53:7d:60:
9a:5c:65:25:48:41:c6:51:36:a2:b9:43:b5:ab:e0:df:3c:72:
c2:9b:f0:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgC8pCTQl8eImksqGln6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjYwNjEzMTUwMTAzWhcNMjYwNjE0MTUwMTAzWjAzMTEwLwYDVQQD
EyhmYTZlODkzZWQ0MTAxY2RmM2FjNDA2YTkzNDUxNjUzYTA1ZTRiMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTQM266tzUqJIH8Veh47GiEP6KNJ
aFRJNCP96jVOUyqpn1Zxyea4B4tPcCw5FQkBu/q/ZJBTtfikSrpFwsX3l+I301DX
DoSJRwgpwPHVLN2VVcl6V3u20u3smckXhXZUZfPktMvAM907sMyBuTdEmhXJsT1L
s03xGsSVfEIhgdcxFmTMoJEhH+nOSfAKv0RyvpdcAQ17qVfITdwr7ql2o4H5jupK
MMn8USe0WCxkIKV1pNyGKtM2oo8nWUFVIj1IY7ysVThClVLXJeqf74S0BWzGc8oN
M3FTO2wFv1wVsYnwZolWYndilI/tjkzPgs/a7novVnOwLDxpUruXvL3NrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpuiT7UEBzfOsQGqTRRZToF5LNHMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv6XpYYh
WyNUL3c+nWYSF0ZVwPig4Lt35BrnoIkObcppvr5eznidqpI1EhYOAOi+RX+X2dxI
Vozn2R7Zagrgf9Z7WorBMM9DusGz6/2j6cdXHJ9cv5a70DuZHGvQPxzM4K+4iGUk
IYtf2YaAKDY1WrSLgiDYF/Vosp9uun8OZvcq3hmqmiXic0gQQqo7lzKikRUJ98bF
hcKxyWuvKtSE09sgRcedHwh8bs5yWMjOgIthPKG8qvbtjkDHW/2+j4Ooq5NJv3q8
3oZa8SrBDg6kctSzK04MSLUCEpl1unTy+GKnXRmQODuPU31gmlxlJUhBxlE2orlD
tavg3zxywpvw5A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:04 2026 by rpki-client