
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: JPZIVS3zTahmpOZ+isKZUs24hqKUb9cVzuQAX6kO918=
Subject key identifier: ED:74:C9:E5:3B:FA:DC:FF:95:05:46:BD:C9:43:55:1F:D9:96:8E:9D
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019D9B50799068954D5206D24D96EB81C69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0CFF
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (hash: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=)
2: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: 2+FZfCajtghAJPUZGieQe90Rcjg5hRCPcInyfuIwsUA=)
3: zvHw3KmhzvEgU4W6InBqUBX0yjg.roa (hash: CGIpxT3J1vn2/tgM/8XQPPrlvlWSOI9UHhs/JfCuu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:79:90:68:95:4d:52:06:d2:4d:96:eb:81:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=ed74c9e53bfadcff950546bdc943551fd9968e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:37:13:d8:94:74:5b:ee:99:a5:dd:f9:b3:
f1:c8:71:98:48:6f:ee:b2:ed:2a:bc:3e:cf:9d:5c:
79:4e:e8:76:b5:2b:e5:3e:64:01:68:fe:9d:7d:0f:
dd:12:c6:fa:ce:fd:d0:9e:52:85:3e:57:34:1f:65:
33:27:ad:2f:00:36:f4:ad:8b:25:1c:4b:e0:ac:ee:
f4:33:91:b4:af:e0:d1:f4:04:08:c2:73:e0:5e:e0:
e1:f7:10:8f:cf:3a:de:44:7e:97:be:b1:7b:d3:80:
cf:63:c6:3d:e3:36:04:da:ab:b3:8b:2d:36:84:64:
4a:d6:84:9f:e1:d2:00:6a:65:63:bd:4b:b4:07:8a:
e7:a4:d8:66:23:3b:b5:c0:2b:f3:c5:2b:99:25:f3:
f1:93:56:e0:bd:ca:d4:85:8e:7a:22:d6:d0:03:70:
9b:a3:a0:e1:1d:ec:86:8d:30:f7:53:8d:92:d1:f0:
ee:1b:1b:fe:d6:38:41:56:97:17:d8:ab:3d:36:94:
aa:66:1b:69:3e:7a:36:6e:d0:cb:d7:39:c8:3b:98:
62:4d:44:57:71:18:1a:3b:02:14:97:5d:08:7c:fa:
84:9d:cf:eb:22:9f:51:e4:49:be:6a:30:9b:54:0c:
d7:8d:f0:54:f3:ab:c9:88:00:76:91:da:74:1f:94:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:C9:E5:3B:FA:DC:FF:95:05:46:BD:C9:43:55:1F:D9:96:8E:9D
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2b:0d:07:5c:24:fe:e7:e4:44:0f:23:c6:33:aa:ad:15:79:
d8:4c:51:3d:e5:af:01:35:3f:e7:4d:ea:a9:33:e7:c1:66:f1:
d2:6a:75:e6:ab:c8:e0:e5:c9:04:3a:d5:64:fe:6f:88:75:4d:
bf:3f:72:42:b8:a0:e4:76:fe:49:be:2d:a8:10:ed:d0:52:df:
44:76:8b:75:a8:6a:4c:40:2f:5f:8f:ed:c2:1f:cf:73:05:cf:
8f:38:7a:b6:25:8b:17:6c:83:8a:97:47:1d:61:89:c4:31:6c:
ff:43:02:99:2c:16:db:62:bf:ee:1b:25:e0:29:a6:01:fd:43:
56:50:5e:ac:06:e9:47:43:58:d7:07:ef:27:11:30:eb:8c:1b:
60:09:d5:89:49:dc:6d:ba:06:c4:bd:54:0e:9d:ff:46:69:bb:
77:50:1f:32:f3:97:82:ed:34:43:c8:74:b7:53:44:60:4e:ae:
30:27:a2:21:f0:7b:25:16:c9:53:e3:da:62:cd:40:92:5e:ee:
87:d8:fe:54:c9:34:c0:2b:b3:dd:2b:a5:1f:d9:c7:2a:cb:45:
8e:ec:c1:96:fa:e5:b6:04:d4:5b:b0:8f:20:f9:3c:8d:f1:2e:
8f:47:1f:2e:d9:0f:62:33:9b:1c:4a:5a:62:99:8c:26:4c:a6:
73:ff:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:56 2026 by rpki-client