Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier: FaOT033/itMAQsvqRPovjrvwaydVbMv1v1eUBZK2+Lk=
Subject key identifier: 9C:CB:93:D2:E3:00:26:AA:02:17:B7:1B:3D:BB:3D:6B:F2:F3:93:FC
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 019FF835DD6E004246D91EB03629CFC735E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number: 01A3
Signing time: Wed 12 Aug 2026 23:01:47 +0000
Manifest this update: Wed 12 Aug 2026 23:01:47 +0000
Manifest next update: Thu 13 Aug 2026 23:01:47 +0000
Files and hashes: 1: 5rBPZdaUmnnvoDphMpg0g3YswCw.asa (hash: 7Eg90jHkUTWS1OEeoEBVZ3nD/aanQ7UPalxj2Kd5AAo=)
2: XT0TwWf3saDmUZLJkEZTVoj08Go.roa (hash: IK7s2dRYQhCtsnAJ87ZpG0v9gy5QrOO4Jv4XvFQQKxY=)
3: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: HsFFbpFwDmzPv/TVh7v93sWx6ok4UAjcwsR7tsTrRdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:dd:6e:00:42:46:d9:1e:b0:36:29:cf:c7:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Aug 12 23:01:47 2026 GMT
Not After : Aug 13 23:01:47 2026 GMT
Subject: CN=9ccb93d2e30026aa0217b71b3dbb3d6bf2f393fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:0d:26:32:25:67:6a:fd:4a:10:23:a2:df:
01:09:89:aa:9b:ab:f1:63:e5:d1:0d:32:ad:75:d2:
57:50:59:a5:92:39:72:6d:05:19:05:f5:4e:f0:15:
36:4c:59:5d:6a:a6:d8:4e:44:b1:c5:18:63:ca:fe:
de:b8:6d:b9:2b:9e:1f:fb:7b:1b:b1:30:3d:78:3f:
45:0c:17:61:d4:67:d2:32:78:f1:56:2d:b2:36:e4:
7f:04:a8:69:21:01:43:e6:39:81:90:f1:6d:62:b4:
b3:47:ac:f7:c3:1b:d8:5d:44:85:aa:7a:0c:88:3d:
63:1a:36:3f:23:21:ed:48:f5:06:a2:11:f1:23:53:
f2:28:3e:bf:6d:a1:c6:36:6f:de:02:c8:4f:66:2d:
f5:9b:7d:73:ee:a2:05:e2:55:1e:be:ca:45:66:c0:
d3:8f:f9:6c:67:46:fa:66:62:cd:77:f0:cc:a3:55:
be:5d:0e:57:fa:4e:c8:ce:8a:26:f3:46:22:bb:27:
80:d7:ae:cc:81:a3:77:f3:7d:de:db:bc:cf:f0:f3:
e6:84:06:b6:ef:29:75:ba:3e:ba:b3:23:02:99:d3:
bb:b6:3d:6a:aa:48:16:1f:d0:a5:48:07:a6:be:29:
12:d9:9a:9c:9b:d1:d8:88:30:d9:40:42:d1:a5:40:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:93:D2:E3:00:26:AA:02:17:B7:1B:3D:BB:3D:6B:F2:F3:93:FC
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:cb:88:a7:6c:ce:85:7f:e9:49:f6:68:c6:3d:1e:a1:fd:
a2:17:17:6f:b6:29:39:f8:15:24:44:89:68:a1:03:b9:e5:c3:
a1:19:56:b0:66:87:22:25:b1:63:8e:e7:8c:81:de:44:e9:48:
9a:8a:2a:ac:70:f2:4f:2b:26:b6:7d:ba:95:42:5b:aa:cf:17:
2e:bd:c2:bb:54:3e:5f:a0:22:d9:c8:04:88:f7:b0:ae:8f:26:
46:67:c1:bb:12:4c:2e:0e:42:3c:fc:49:d4:ec:9e:16:ef:3f:
22:c1:f9:eb:84:0b:08:34:e2:f7:78:20:09:13:75:8e:6a:5c:
ac:f4:4d:05:25:50:af:fb:00:b4:9b:1f:e0:1d:29:da:cd:26:
f1:53:ce:fa:85:04:30:32:99:5a:7d:41:d2:99:0a:be:6a:98:
b7:f7:19:bf:53:44:14:95:7d:4f:34:05:da:e6:82:6c:c0:ba:
f4:c9:42:73:60:cb:54:88:89:48:21:e9:80:1b:0b:41:7c:3d:
0c:ca:85:c1:c1:ba:5c:7a:b7:50:97:13:98:eb:15:80:34:9c:
59:fd:c1:94:7c:aa:07:70:8b:a2:db:8a:e8:ab:bb:77:7f:0a:
45:ee:7f:d6:8c:3a:17:a9:9c:22:0d:c3:d0:76:84:47:da:1f:
c8:3f:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:50:06 2026 by rpki-client