Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: ASasdQskNNOvfxt26EEis+nztBu2DMtL0Lv4I1X3W5g=
Subject key identifier: EA:23:1A:2B:AB:34:BB:91:A5:D3:04:A2:28:63:FE:2F:73:0C:15:79
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 01A18CE63097EA98C3EFB7CC76C48B0BE790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 0501
Signing time: Fri 30 Oct 2026 13:00:58 +0000
Manifest this update: Fri 30 Oct 2026 13:00:58 +0000
Manifest next update: Sat 31 Oct 2026 13:00:58 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: eIsKLNAbHErk3QeitQsbIuGDA+c8oFVWD5gQOkITofE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:e6:30:97:ea:98:c3:ef:b7:cc:76:c4:8b:0b:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Oct 30 13:00:58 2026 GMT
Not After : Oct 31 13:00:58 2026 GMT
Subject: CN=ea231a2bab34bb91a5d304a22863fe2f730c1579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:86:7e:1d:c5:ab:4f:c5:54:2a:5e:fd:09:
8b:81:2e:cb:c2:e2:ae:eb:3f:1a:a0:45:af:85:b3:
7d:73:e8:2b:04:5f:e8:cc:16:a1:dc:13:a0:f7:b7:
64:2c:e7:8f:32:b8:04:ee:b3:44:2d:f1:a0:10:1c:
bd:ef:a0:d6:21:7e:79:0d:86:80:30:7a:e9:09:6b:
90:b9:ed:ef:ac:99:3d:3e:39:14:94:2a:78:3b:d8:
7b:c3:41:27:86:f0:e2:a3:b4:a8:4e:1b:ee:71:3b:
9f:ff:03:45:53:93:6c:cd:2f:24:66:ca:47:ee:b8:
f1:af:0f:cf:05:fd:33:6a:36:18:0d:8c:6c:ce:54:
e8:4b:13:f6:4a:e1:2e:26:03:05:12:71:4c:16:23:
43:69:79:28:39:b1:3b:1c:fc:98:e4:a8:56:4d:b1:
d8:d8:26:5a:78:62:22:3f:0f:32:44:06:f0:ed:39:
21:75:99:3a:de:86:0d:12:b6:7e:a2:8d:dc:c3:0a:
d2:e5:da:98:64:68:00:ac:fa:92:ec:93:3f:57:19:
2d:1c:7d:14:ba:5d:2f:73:2a:16:ad:5e:0f:b7:08:
2e:6b:6a:02:a0:33:13:23:3c:8e:4b:09:8a:9e:fa:
b6:de:0a:c1:de:bf:ae:d7:c0:26:74:79:0d:10:5d:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:1A:2B:AB:34:BB:91:A5:D3:04:A2:28:63:FE:2F:73:0C:15:79
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:5d:80:cb:2c:32:b1:86:7b:3f:24:84:a9:62:f1:96:cd:
83:1b:43:5a:ec:05:54:3a:31:ee:54:5f:5b:4d:29:bb:ee:e9:
45:24:8b:1f:36:1b:38:6f:6d:af:23:c0:2c:73:8d:41:f0:4d:
8e:78:88:09:db:6f:1b:b6:d8:6a:ce:4f:97:79:ae:de:40:fd:
4d:6d:87:cf:4c:f7:6d:17:00:e6:33:06:20:81:cf:cc:29:d4:
d2:4b:20:0b:65:83:c2:bd:91:53:09:f8:87:46:4c:a0:8b:25:
98:aa:0c:75:99:8e:77:18:cb:c8:a7:07:34:83:49:c8:1f:0b:
43:ec:57:58:6b:7d:ba:ab:38:68:93:d8:fa:be:f2:ca:2a:d4:
ad:83:6d:df:0c:73:02:fd:1b:f9:79:da:6b:8b:e9:13:6f:38:
5d:0d:fe:37:fd:e9:96:e4:3a:08:23:7a:4f:98:00:d8:22:11:
1e:33:23:b4:5e:5e:47:ac:b6:9f:2c:6d:13:13:24:d2:25:1b:
c5:4a:c9:ea:d3:29:5a:7c:07:67:7f:80:8c:03:38:19:ae:9a:
c8:e2:b2:b7:4e:4a:6f:64:80:2c:8e:17:a6:9e:b0:60:86:e0:
ac:11:5d:8f:67:4a:ea:8b:55:d8:92:84:64:b8:d2:6c:f5:e1:
a3:e1:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 22:53:57 2026 by rpki-client