Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: oAAe4amCX/Yw/8L54Wg1/UsatxycsMJCKt6ZF5xo3ko=
Subject key identifier: B4:30:46:1F:F8:63:26:D9:29:1D:53:6D:C3:D7:E3:C9:73:E8:A5:AB
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019E9BBC6089C3775F651AC09D17DA047D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1957
Signing time: Sat 06 Jun 2026 07:01:14 +0000
Manifest this update: Sat 06 Jun 2026 07:01:14 +0000
Manifest next update: Sun 07 Jun 2026 07:01:14 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: /2QYxejgX/JAJfvLTFQsfuliN2vgiv7PLawPKwefhgk=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bc:60:89:c3:77:5f:65:1a:c0:9d:17:da:04:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jun 6 07:01:14 2026 GMT
Not After : Jun 7 07:01:14 2026 GMT
Subject: CN=b430461ff86326d9291d536dc3d7e3c973e8a5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:c4:7c:09:a0:f6:8d:69:b9:6a:94:bf:63:
2e:31:ae:94:5c:56:99:e1:87:74:c2:e4:df:cb:2a:
13:bf:09:ea:4e:05:f3:ef:05:a6:90:8d:1c:dd:fd:
ce:bf:c9:32:13:44:4a:f0:63:45:43:e6:66:b7:5b:
b2:5d:45:3e:1a:2f:56:3d:eb:49:96:2a:0d:23:dd:
9b:7c:cd:13:f0:2c:fb:f8:90:66:eb:94:b2:6c:c7:
54:d3:2f:4b:5d:b0:d3:48:8f:1a:1d:39:89:a0:78:
4f:47:cd:98:a2:f9:3b:6f:09:e1:b5:a1:17:ed:42:
8a:9b:34:5a:05:31:d6:a4:b3:d3:8a:a2:d9:73:2c:
f0:5b:66:d0:99:ac:25:cd:fe:09:0a:93:a6:1d:0a:
7b:ae:0b:2b:8c:ec:ec:cd:03:81:dc:30:46:b6:2f:
86:80:1d:8a:af:b1:90:32:0c:85:cf:3f:37:4b:ce:
b9:7c:e7:90:58:d0:ff:be:9b:11:19:1a:65:e6:c1:
5c:6d:f5:b3:45:41:da:da:96:2a:78:61:ed:01:ec:
60:f5:76:e1:e4:af:93:1e:85:f5:fa:f8:8c:b3:fe:
20:f3:cc:53:0a:87:5b:46:d7:9d:1f:3f:ef:6f:a3:
8e:af:33:79:d6:05:36:89:12:ac:ec:92:88:88:6f:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:46:1F:F8:63:26:D9:29:1D:53:6D:C3:D7:E3:C9:73:E8:A5:AB
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c0:fd:d0:a3:4c:75:a9:fe:3d:4e:4c:93:44:2c:98:57:96:
a5:91:ab:a9:a1:44:54:c5:8b:d9:3f:07:85:bf:2a:dd:fd:b1:
1d:3d:c2:24:06:e9:d6:8a:9c:c2:fb:36:5e:63:99:18:1a:2a:
eb:77:d8:20:db:8b:ba:5e:36:af:df:15:43:cf:e7:67:1b:d5:
3b:4f:8c:09:12:b7:00:4a:c0:5e:e9:b8:d2:3f:e7:89:03:cc:
ac:0a:86:59:f0:8b:15:cb:04:9a:00:85:6a:cf:90:0c:fb:07:
67:dc:41:01:0b:91:0e:f9:1a:ba:fe:6f:1d:a2:a2:66:f0:35:
eb:ae:76:90:e9:c8:e6:fc:03:13:7d:8c:d0:2f:e1:f2:3d:b2:
6b:92:48:a7:b5:03:90:e5:52:42:e4:83:c6:d3:6f:f3:66:8c:
3e:3e:a0:fc:f0:5c:85:1c:25:2c:bc:e0:84:21:77:d2:2b:7d:
09:e8:b8:16:ae:f3:70:f5:6f:97:04:89:8f:97:76:a0:32:70:
19:44:ad:3d:19:b6:31:60:66:83:41:07:d6:a4:5c:f5:be:72:
84:b4:5e:c5:47:ed:8e:c4:b4:56:b9:1b:d8:b5:30:5b:60:6f:
1c:84:83:9c:dd:49:4a:a3:a6:c3:10:8d:92:38:58:42:ef:15:
f0:06:59:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bvGCJw3dfZRrAnRfaBH0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjYwNjA2MDcwMTE0WhcNMjYwNjA3MDcwMTE0WjAzMTEwLwYDVQQD
EyhiNDMwNDYxZmY4NjMyNmQ5MjkxZDUzNmRjM2Q3ZTNjOTczZThhNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPEfAmg9o1puWqUv2MuMa6UXFaZ
4Yd0wuTfyyoTvwnqTgXz7wWmkI0c3f3Ov8kyE0RK8GNFQ+Zmt1uyXUU+Gi9WPetJ
lioNI92bfM0T8Cz7+JBm65SybMdU0y9LXbDTSI8aHTmJoHhPR82Yovk7bwnhtaEX
7UKKmzRaBTHWpLPTiqLZcyzwW2bQmawlzf4JCpOmHQp7rgsrjOzszQOB3DBGti+G
gB2Kr7GQMgyFzz83S865fOeQWND/vpsRGRpl5sFcbfWzRUHa2pYqeGHtAexg9Xbh
5K+THoX1+viMs/4g88xTCodbRtedHz/vb6OOrzN51gU2iRKs7JKIiG+oRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQwRh/4YybZKR1TbcPX48lz6KWrMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMD90KNM
dan+PU5Mk0QsmFeWpZGrqaFEVMWL2T8Hhb8q3f2xHT3CJAbp1oqcwvs2XmOZGBoq
63fYINuLul42r98VQ8/nZxvVO0+MCRK3AErAXum40j/niQPMrAqGWfCLFcsEmgCF
as+QDPsHZ9xBAQuRDvkauv5vHaKiZvA16652kOnI5vwDE32M0C/h8j2ya5JIp7UD
kOVSQuSDxtNv82aMPj6g/PBchRwlLLzghCF30it9Cei4Fq7zcPVvlwSJj5d2oDJw
GUStPRm2MWBmg0EH1qRc9b5yhLRexUftjsS0Vrkb2LUwW2BvHISDnN1JSqOmwxCN
kjhYQu8V8AZZiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:51:08 2026 by rpki-client