Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier: KkrfD+9mG29vfsZH5BrvwVWOhL9/G0b7MtfUbuqprss=
Subject key identifier: A5:DA:56:44:22:00:EB:3B:66:06:85:81:65:2F:E0:A1:FD:8D:14:39
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 01A0E5BE764DC90E90CBBF9329FA5B4C0282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number: 021E
Signing time: Mon 28 Sep 2026 02:00:59 +0000
Manifest this update: Mon 28 Sep 2026 02:00:59 +0000
Manifest next update: Tue 29 Sep 2026 02:00:59 +0000
Files and hashes: 1: 5rBPZdaUmnnvoDphMpg0g3YswCw.asa (hash: 7Eg90jHkUTWS1OEeoEBVZ3nD/aanQ7UPalxj2Kd5AAo=)
2: XT0TwWf3saDmUZLJkEZTVoj08Go.roa (hash: IK7s2dRYQhCtsnAJ87ZpG0v9gy5QrOO4Jv4XvFQQKxY=)
3: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: WklBJ00jUN+drOficSKlexb0J1bHe4vyYrZxmWJ2vHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:76:4d:c9:0e:90:cb:bf:93:29:fa:5b:4c:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Sep 28 02:00:59 2026 GMT
Not After : Sep 29 02:00:59 2026 GMT
Subject: CN=a5da56442200eb3b66068581652fe0a1fd8d1439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:d5:1b:e2:ad:3a:ee:7a:90:d5:c4:37:1e:
51:ea:74:9f:98:84:f0:91:3c:ea:0c:66:1c:c7:43:
48:f2:85:d3:e5:ce:af:76:fb:3f:eb:ac:5b:d9:7f:
53:01:85:d5:6b:dd:89:f8:88:5c:42:38:a0:f1:ba:
44:34:6f:da:df:8a:40:9b:8c:85:0b:c5:96:a9:d9:
e1:55:fb:55:bd:45:d7:58:58:c1:46:f1:31:a3:3d:
2d:0a:8a:67:cb:31:a5:7d:da:73:52:a3:31:7b:7c:
0d:ac:9d:a5:f6:91:5e:17:14:94:ad:3c:4b:d8:20:
9d:c7:68:64:30:cd:0d:d7:95:ec:36:1a:94:ce:3b:
d0:46:d7:73:69:63:54:d9:ae:69:4f:6e:87:a3:75:
b7:e7:76:f4:e7:81:48:52:6f:3c:8b:0d:6a:82:86:
30:e9:d3:77:34:75:9a:95:6b:05:44:9a:f8:81:ff:
f6:e6:41:4e:09:30:52:e7:7b:8e:cd:33:43:19:2d:
63:5e:e6:55:27:70:bf:d9:3c:11:d3:b2:4e:f6:2c:
41:68:ab:97:d9:aa:43:94:48:1e:ff:af:13:fc:0d:
32:ec:27:f9:88:f0:a2:59:e0:70:2c:7c:17:12:a3:
4e:8d:8a:b7:9e:45:e4:85:86:d5:45:24:28:d3:03:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:56:44:22:00:EB:3B:66:06:85:81:65:2F:E0:A1:FD:8D:14:39
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:81:a0:ca:50:ac:10:e1:79:ac:53:18:d9:d6:11:0a:b6:22:
fd:1f:37:17:ea:b6:03:5b:54:89:3d:6b:3d:46:a1:49:14:91:
9f:a3:3b:a6:13:c2:22:f9:c4:84:d3:76:aa:8b:c1:fe:9e:99:
fe:b8:6e:96:16:37:16:04:b1:aa:71:04:f7:60:50:a5:80:c6:
7a:76:9c:3e:91:9b:85:47:66:5b:92:ed:76:ba:7e:7d:d3:79:
e8:55:30:fb:aa:04:b1:f4:c9:ea:05:51:cc:07:1a:bc:dd:ae:
97:d3:3c:1c:06:67:a5:b4:87:af:3c:fc:5e:bc:75:ac:db:c3:
17:58:42:28:9d:8e:cf:df:21:90:6a:5e:f3:da:ce:a9:d8:79:
2a:49:3b:41:4b:1b:4c:68:07:0e:71:1c:fa:ec:f5:e4:e9:ff:
00:88:a3:64:ff:3b:ce:14:3c:f4:97:2a:a9:63:b5:f0:95:b4:
49:41:56:68:e2:4b:23:b7:ec:7f:db:fe:5d:14:96:10:74:5e:
79:57:37:16:a1:4e:b9:1b:0f:a7:cb:4d:61:2f:be:7f:71:ef:
6c:d3:ff:20:4c:c2:63:99:68:a5:4e:8a:92:00:2a:b3:8e:eb:
44:f9:e5:48:d2:a3:cd:6a:1b:30:08:1f:73:65:04:d2:9a:22:
2b:d7:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:46:32 2026 by rpki-client