Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: h+A9ylrFVmkM1lDayW+nzjfEPhmaEGzVR14hY896pT8=
Subject key identifier: B6:F4:96:70:53:1F:8C:FD:5F:68:A3:2C:35:9D:0D:04:80:04:9B:EC
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019CABD9649C3F6D25A4C5B7A521720AC052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0C83
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (hash: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=)
2: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: PzU6DiGR5tX1GFkPMGUyDOjDJ2qmiP3wAmchC+lFfyw=)
3: zvHw3KmhzvEgU4W6InBqUBX0yjg.roa (hash: CGIpxT3J1vn2/tgM/8XQPPrlvlWSOI9UHhs/JfCuu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:64:9c:3f:6d:25:a4:c5:b7:a5:21:72:0a:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=b6f49670531f8cfd5f68a32c359d0d0480049bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:a8:5e:85:71:34:e8:75:33:a9:44:96:1c:
1b:f1:0c:3c:1f:b4:58:6e:da:00:36:f4:0e:7b:f9:
d9:f9:9f:52:37:a7:fe:38:9f:ba:15:35:6b:96:07:
ee:57:6d:39:b4:b1:c5:fe:77:b9:ec:85:63:a7:b3:
cd:20:19:20:c1:49:28:b0:80:c8:1b:b6:b0:59:23:
05:15:07:fa:f0:1f:13:a9:47:69:8c:01:ed:db:36:
95:07:88:ad:37:be:5f:1b:e0:8d:14:b6:de:b0:b1:
d8:1e:19:6f:ef:b5:97:26:4c:7f:a7:1c:8f:1b:fb:
90:d1:b8:d6:61:da:be:4f:ac:c9:0e:d7:9c:ab:ce:
86:9d:04:89:65:e7:68:96:bf:97:ad:be:6a:b3:5a:
d6:cb:8d:e0:1e:b4:96:68:3d:e4:9e:c7:a5:59:48:
26:f4:c1:b2:9a:cc:21:2b:f4:72:1c:7f:47:8a:0d:
22:4b:75:42:54:c0:1d:8f:4b:02:54:3a:d2:9f:1b:
12:2c:9e:37:d4:8e:97:e3:2b:99:b5:a8:7b:20:93:
05:73:34:18:66:17:0a:7c:6e:30:4b:94:52:58:b3:
1a:5d:c8:0e:8c:11:6f:9d:eb:39:27:f4:0c:9a:aa:
5e:b1:a1:39:c8:54:e2:9c:e2:20:60:5b:78:18:2f:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:96:70:53:1F:8C:FD:5F:68:A3:2C:35:9D:0D:04:80:04:9B:EC
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ba:03:b3:f2:10:bd:e2:b2:84:14:a0:ba:b6:b6:68:37:bd:
26:ac:37:52:b8:67:6e:34:80:d7:6c:d1:84:cf:ec:43:5e:ee:
b7:0f:f6:ee:8c:79:26:05:c4:a4:35:2e:bf:4b:24:05:c1:c5:
4c:a2:f6:3d:68:8b:71:c0:3e:44:ff:6e:09:4f:f2:8b:47:25:
c0:68:48:c8:10:5f:62:bf:7c:0d:b9:03:b4:20:82:d3:c0:b6:
8c:83:71:ac:e0:2a:d0:0a:9e:cf:d1:c5:8f:ea:f3:61:3f:c5:
88:09:c7:fd:6b:b4:ce:5e:fa:e9:f2:c6:07:65:76:d8:be:55:
73:b5:4e:6a:d1:7a:a4:c9:59:36:da:70:e7:72:17:03:bb:13:
2f:5e:c1:ed:56:8e:fd:a1:e9:67:cc:d7:ed:ef:63:3c:ae:d1:
a2:02:0f:75:56:13:c7:fe:4e:5e:29:19:45:d7:6c:da:ed:e4:
96:38:76:55:05:10:29:67:fb:e9:68:e8:91:ad:28:6f:95:5a:
d4:32:24:1d:b4:83:01:78:6a:5d:8a:91:44:b3:ee:cf:c5:ce:
ce:4f:12:d4:3e:19:67:4d:bc:29:8d:28:98:14:0d:a0:bb:d3:
36:8c:e4:4b:13:72:b5:e8:07:c9:2a:ab:0d:c7:76:60:5d:75:
e7:82:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:06 2026 by rpki-client