Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: L6FUk6ed5vFFklWVo7U5wubRMU5zT41cijfGiJWtAX0=
Subject key identifier: 1D:58:2F:9D:4B:3C:C5:F3:75:86:50:47:31:FD:A7:C4:92:A3:BE:3B
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019FAB2C32969E6A00A2FBC018D1AE08E875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 12D5
Signing time: Wed 29 Jul 2026 00:00:28 +0000
Manifest this update: Wed 29 Jul 2026 00:00:28 +0000
Manifest next update: Thu 30 Jul 2026 00:00:28 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 22mzXvqgzPk4PJvIt7MIIGgp5fkd+QVUdcFk8EUQGN8=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:32:96:9e:6a:00:a2:fb:c0:18:d1:ae:08:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jul 29 00:00:28 2026 GMT
Not After : Jul 30 00:00:28 2026 GMT
Subject: CN=1d582f9d4b3cc5f37586504731fda7c492a3be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:4a:f3:6b:7e:31:b0:f3:db:b5:2a:a0:a9:
4b:1d:54:62:12:c1:43:30:0b:82:0c:f2:de:03:72:
07:58:ab:42:91:ad:23:3d:e3:47:5f:d0:ab:7b:35:
24:15:b6:e3:ad:eb:ac:21:c9:47:a8:db:d0:c6:70:
21:70:97:d4:39:26:a4:ba:7f:f7:4b:f4:e7:68:9f:
a9:d9:c5:c4:a8:c8:81:37:28:3a:6f:eb:f2:3f:cb:
6a:3e:34:cd:7e:c5:70:0d:fb:ed:24:50:72:8e:5e:
c0:07:69:bf:c7:cb:e4:85:57:77:67:29:e2:4b:c4:
d3:75:79:05:94:f9:42:86:ab:6e:e1:d9:fa:61:aa:
93:54:bc:21:b2:5e:de:47:6d:7f:4c:17:7a:b8:63:
db:97:6e:ae:d2:50:93:bf:d0:c5:13:ba:f3:d1:bb:
02:71:78:36:6d:77:6d:ca:2b:56:20:27:ab:73:08:
15:51:3f:f0:ca:7f:5b:e2:1c:c5:94:1d:5d:19:1d:
c6:3d:91:d3:5e:e6:7e:62:f9:53:b3:b8:16:80:c6:
72:03:1e:ec:a1:04:6e:02:fc:a1:8b:cf:8b:49:1c:
c7:fb:9b:d4:54:2d:12:36:36:e3:16:e3:30:ea:06:
25:da:42:cc:5c:77:31:15:d0:03:8b:c6:5e:70:69:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:2F:9D:4B:3C:C5:F3:75:86:50:47:31:FD:A7:C4:92:A3:BE:3B
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:57:98:6a:7b:66:a8:5d:74:67:3d:36:cb:f8:ff:7b:f7:
c3:57:ba:f9:3c:61:46:6e:6a:08:f5:ca:dc:29:4d:30:c1:1b:
b8:d4:ed:a8:54:b6:54:5c:cc:82:af:24:3e:bd:7b:de:2d:ae:
f6:19:97:0d:34:e2:95:b3:a0:fa:58:a8:b4:bc:9a:7c:a1:bd:
de:da:a6:b9:2e:01:94:df:ab:2b:6e:12:09:81:c2:7b:30:1b:
dd:72:60:2f:3b:fe:12:89:b7:d0:16:4f:7f:64:93:f9:9c:6f:
2c:56:d3:48:0e:31:0f:7e:6a:db:80:1c:9a:9c:43:15:65:b1:
3a:93:4f:fc:71:db:ac:04:97:e2:9b:43:10:43:01:ae:7e:2c:
78:13:ac:e0:5d:de:a0:2b:d2:0e:dd:1a:2f:d1:90:2a:2b:86:
a3:ed:a3:3f:df:d7:f4:95:dd:86:12:08:27:ac:a3:8a:5d:60:
8b:6a:7e:2c:1d:7a:17:2e:76:a4:16:1a:26:90:e5:9b:4a:aa:
28:26:cf:86:11:5e:44:bd:1c:ad:d6:c1:c6:f3:6e:05:8f:30:
80:0a:cf:55:ee:b9:f8:73:76:82:80:59:14:15:2e:43:2e:d0:
2f:e2:d0:2f:11:f3:5c:f1:76:6a:de:83:f9:3e:49:9e:96:9e:
69:97:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:11 2026 by rpki-client