Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: QE2u14DBGkDIs4lsPuYKaRuuCY32grHvVu9LaAED7aY=
Subject key identifier: 17:63:42:28:B6:D8:31:0B:CB:B3:07:2D:E0:E1:F5:BD:FA:F4:E0:89
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019FAA1A7DF9456B7E5E7A4105414035A460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 0407
Signing time: Tue 28 Jul 2026 19:01:30 +0000
Manifest this update: Tue 28 Jul 2026 19:01:30 +0000
Manifest next update: Wed 29 Jul 2026 19:01:30 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: uLoJUcVAJZ/ddoDQh1Yo0L8vvk55FypiTnWjf7CIE5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7d:f9:45:6b:7e:5e:7a:41:05:41:40:35:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Jul 28 19:01:30 2026 GMT
Not After : Jul 29 19:01:30 2026 GMT
Subject: CN=17634228b6d8310bcbb3072de0e1f5bdfaf4e089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:64:a8:6d:e0:82:6d:24:8b:cb:bb:0a:f0:
a4:e4:e7:b8:13:b9:8b:49:f6:8c:02:d1:4a:dd:3c:
ab:c3:40:e0:a7:6e:ed:bf:62:1b:fa:76:38:e8:20:
bf:ad:b6:0a:02:9c:20:df:38:8d:6c:f1:d6:ee:75:
13:4b:2d:e4:bb:4e:cf:39:b5:f4:86:b8:47:af:d5:
3e:1f:39:01:5f:18:cd:47:bd:f6:f8:84:b1:7a:a7:
d1:f2:1e:94:68:07:ef:be:4d:c0:cb:70:d9:40:66:
26:f6:42:a9:54:aa:76:11:30:a0:4c:95:21:6d:ef:
41:07:49:12:5f:b3:75:ce:84:fc:3d:7c:c9:b6:18:
bb:33:8b:0b:04:63:a1:2e:14:53:4f:33:4e:20:4a:
8d:d8:7a:5d:ee:2f:33:b5:8b:ba:3b:f2:99:05:b8:
42:09:f1:1e:c8:9f:81:3b:cf:46:ef:67:b1:7b:82:
2f:c2:e0:c2:75:1b:38:65:1b:ea:21:aa:42:f5:85:
42:50:66:d2:18:c6:2b:b8:c3:0d:7e:53:3a:54:bf:
f2:39:bf:64:77:1c:4d:8c:3e:a1:b6:9d:18:39:bf:
94:88:fe:b1:c7:4a:99:07:1a:67:3a:f5:26:ee:63:
0f:48:ab:42:9f:72:8a:11:ce:e2:a2:4f:53:c6:78:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:42:28:B6:D8:31:0B:CB:B3:07:2D:E0:E1:F5:BD:FA:F4:E0:89
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:5b:38:ee:ee:b4:12:4f:fb:a5:6f:ef:ad:b9:a4:5b:cb:
28:71:85:ea:cb:3a:1c:49:79:8a:b9:7e:53:1d:98:23:16:c3:
ea:ea:66:20:2c:04:fb:dc:ae:55:1e:68:e2:f6:6f:d6:76:0b:
2e:8a:f6:9e:63:35:0f:6e:fc:8e:39:b8:8f:a4:d0:6f:36:5c:
04:94:f2:96:eb:1a:33:04:13:f0:39:13:0b:5e:42:9e:87:cf:
bb:c5:ef:13:f1:95:a9:dd:b9:b2:03:4e:a8:a6:6a:ae:bd:f6:
19:c7:8f:7f:09:95:a7:2a:63:bd:96:0e:10:ca:c2:62:c5:3c:
86:27:d4:f3:3d:17:3a:a4:00:75:d5:18:70:fd:f5:58:db:9a:
dd:a8:d7:4a:60:65:34:28:a8:3c:25:63:bd:11:1c:f6:c0:b1:
0d:13:b5:8c:84:37:4c:a9:df:1e:6e:e1:70:ee:52:56:4c:0b:
d6:b9:4f:50:de:45:1f:0b:3d:1a:ca:29:3d:7f:2e:11:75:4e:
42:2a:89:48:8a:f3:bd:8b:cc:52:3e:86:32:66:f5:3b:2f:a1:
9d:d1:72:54:2e:4d:79:64:dd:a8:fc:2f:d3:35:56:22:23:48:
b5:9d:1c:4d:d5:0b:e5:e0:74:50:e0:93:76:48:2f:62:0c:2c:
29:61:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:36 2026 by rpki-client