Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: VMG+bZrIQWbjcTCeeU8swdt9fLmCXHpG+hhdvjj0tTQ=
Subject key identifier: C5:FB:F9:0C:22:CC:71:58:20:F3:33:B9:6B:E5:92:95:C1:B1:BF:8C
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019CAB6AC493E68F1A81904C3011A13E583E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 027A
Signing time: Sun 01 Mar 2026 22:00:26 +0000
Manifest this update: Sun 01 Mar 2026 22:00:26 +0000
Manifest next update: Mon 02 Mar 2026 22:00:26 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: UwSS+f7aDc5Au2nlYmXbsYafmZPQWoE1LG8UCkJmBAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c4:93:e6:8f:1a:81:90:4c:30:11:a1:3e:58:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Mar 1 22:00:26 2026 GMT
Not After : Mar 2 22:00:26 2026 GMT
Subject: CN=c5fbf90c22cc715820f333b96be59295c1b1bf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:cf:f6:27:c2:9b:4a:bb:07:93:11:e8:70:
d8:9a:47:10:78:72:46:ff:1f:04:90:a1:cb:dd:53:
ec:10:17:65:0b:d3:89:37:49:08:da:fe:6f:48:94:
3b:d9:82:ac:a4:36:e2:3c:77:cb:4f:82:31:98:72:
2f:0e:ea:81:98:7a:7c:be:86:46:e8:66:56:26:06:
a8:6f:55:7e:6d:2d:84:3c:7c:17:f9:e0:43:1b:1f:
6d:c8:bc:29:a4:4e:b6:6e:1e:f8:58:ab:77:2b:4d:
b4:b0:06:1e:d8:f5:b5:db:15:65:4f:11:7c:07:69:
68:cd:63:d5:4a:42:ee:a3:7f:04:14:f9:65:41:6c:
33:c4:ce:87:23:35:06:25:69:9b:c4:38:f1:a4:b2:
25:67:8d:67:64:61:55:b3:cd:3c:c2:89:ef:5f:06:
a6:ed:34:e4:6a:18:f6:c2:e8:2b:96:29:de:75:d5:
36:8e:1a:82:d4:79:4d:1d:9e:3f:0e:69:4b:c5:c5:
fd:5c:dd:b1:20:f7:4a:49:46:21:f1:b5:18:96:d8:
98:c4:c0:70:4f:5a:dd:f7:4a:53:9b:6c:b6:2b:58:
cc:8f:be:3b:62:87:97:1f:5c:b3:29:c9:40:88:bb:
a1:4a:a7:b9:00:eb:30:3b:2b:b8:74:e7:f3:6e:bf:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:F9:0C:22:CC:71:58:20:F3:33:B9:6B:E5:92:95:C1:B1:BF:8C
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4d:35:1c:6f:34:49:d5:05:45:4d:9b:e6:98:12:00:95:70:
ff:8f:60:b6:53:6e:30:5c:e6:3d:14:8e:f3:8f:64:30:3d:64:
56:35:f0:83:58:e0:2a:2c:41:9a:ce:4f:d6:e4:56:c3:db:93:
76:53:44:98:12:59:c4:02:f6:6b:b8:c4:40:36:65:a0:47:5c:
24:30:d5:41:aa:a7:43:80:c4:d8:a4:c8:31:d2:c8:0c:d4:ef:
93:d3:6b:9e:36:3a:1c:34:1c:ee:08:6c:d7:96:ac:cb:6b:53:
4e:2f:7b:d7:43:39:d0:22:d2:e6:a4:ba:a6:92:8d:3b:1e:da:
ae:73:d4:07:bb:8f:db:c1:04:4f:3e:6a:1d:c4:f4:48:be:ed:
d8:83:b8:2d:ae:c5:5b:02:d3:bf:cb:92:1e:62:df:69:29:43:
9f:4d:a9:0b:48:92:e7:00:fa:6a:00:b7:0b:65:7e:45:cf:b4:
63:42:05:59:59:99:90:18:38:1e:80:8f:12:05:d7:f5:9a:97:
d5:88:1a:ed:f9:f6:94:6e:73:62:cd:31:0a:c1:7c:e8:b3:97:
14:49:b6:25:b8:5d:cf:ef:c7:41:d6:80:ab:c4:11:8c:97:11:
75:13:b0:74:4c:76:73:9e:dc:9e:25:36:ff:71:e2:d6:ed:01:
da:4f:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:44 2026 by rpki-client