Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: 1vPKhdZAcHzSyjEaurpf+QuSIgntmzFyl1E9fWBhAcA=
Subject key identifier: 26:9D:AF:8D:F8:C0:D1:FC:80:EF:15:18:C8:49:B1:47:5D:54:DE:61
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 01A06F159EA5655A77E80F07171B878245F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1A49
Signing time: Sat 05 Sep 2026 01:01:22 +0000
Manifest this update: Sat 05 Sep 2026 01:01:22 +0000
Manifest next update: Sun 06 Sep 2026 01:01:22 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: FhdUGwUNioSDO+gM6UWSQdj6TiVZj5iU1jp6tjJj1hk=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:9e:a5:65:5a:77:e8:0f:07:17:1b:87:82:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Sep 5 01:01:22 2026 GMT
Not After : Sep 6 01:01:22 2026 GMT
Subject: CN=269daf8df8c0d1fc80ef1518c849b1475d54de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:eb:b8:11:7a:8c:a1:d7:de:93:73:20:ca:
bb:df:ad:16:cb:88:61:a4:3a:db:48:43:bf:da:ac:
af:1a:a9:19:d2:65:83:07:04:d9:93:b2:34:4e:90:
23:0c:68:ed:62:59:d4:86:c6:d2:79:52:68:0c:bc:
8e:8d:fd:8c:f2:65:9c:0c:dc:f4:3e:e7:75:ba:1d:
7f:f6:03:26:94:0f:fd:e8:64:9b:ab:2b:05:0b:40:
a3:6e:8a:87:76:47:31:9b:79:20:1e:0c:b9:ae:e0:
93:e0:7b:ee:9a:20:7b:98:5d:ba:eb:c3:86:c9:eb:
2c:5e:7a:c2:2b:22:e1:31:ba:8b:e5:e5:5a:01:01:
b7:6e:cd:49:01:23:c3:f9:11:9b:ba:37:f3:e1:f8:
ba:1e:32:64:5c:fa:c1:b7:cd:9e:a1:71:e3:a8:b1:
80:56:95:45:ae:70:b7:fd:5c:f2:b5:30:1a:c6:b7:
42:ea:47:6f:a2:d9:1f:67:24:98:23:c3:cb:09:94:
82:33:e4:45:c3:d7:9f:eb:64:f1:d9:3e:67:a2:00:
31:b8:12:d2:fe:73:b6:4d:aa:e0:bc:1e:79:90:00:
71:f7:94:b6:0b:65:11:62:b3:f4:c3:9a:a8:ae:57:
3d:e3:8b:81:cb:2d:8d:ab:ff:33:48:0e:9c:a8:e2:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:AF:8D:F8:C0:D1:FC:80:EF:15:18:C8:49:B1:47:5D:54:DE:61
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:f0:6f:f9:04:78:81:c2:92:5f:ed:5c:fc:03:fc:1a:94:
97:e5:29:14:d1:5d:5c:05:73:8b:5c:d3:e4:64:0a:05:5a:84:
3b:32:86:64:f2:2f:f5:c1:1c:71:8c:b0:77:5c:93:17:44:41:
76:2e:14:3c:67:31:40:2c:ea:36:c7:ba:09:f0:f2:b8:c0:bd:
f5:e5:0c:c1:06:e2:40:91:90:55:49:0c:db:0c:89:65:5b:e6:
54:e6:a2:35:2c:65:35:b2:ca:7f:30:f8:32:8d:44:6d:37:04:
fc:63:95:39:a5:df:8d:ec:bb:3d:15:e3:0d:dc:bc:8d:8a:b6:
d4:8c:eb:cc:f1:03:7e:16:41:82:2f:0c:3f:cb:c9:f5:89:e6:
73:a5:84:05:d8:f8:cb:ef:2a:9d:d4:f1:39:49:75:fc:33:21:
75:22:32:02:f0:e0:90:81:b9:c8:40:6a:4f:44:7c:d9:54:2a:
08:76:f0:35:3e:ca:3a:7e:5a:62:ab:36:a2:37:72:56:9d:9f:
35:4e:77:55:ff:ce:10:6d:f8:af:74:f1:59:e5:1e:5a:b3:3e:
e7:f3:d0:12:2d:57:98:ae:df:76:2c:5a:f5:e4:0a:50:3c:3d:
fa:58:37:64:34:aa:5b:83:c2:db:24:6d:d9:1e:40:7b:8a:ce:
61:90:30:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFZ6lZVp36A8HFxuHgkX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjYwOTA1MDEwMTIyWhcNMjYwOTA2MDEwMTIyWjAzMTEwLwYDVQQD
EygyNjlkYWY4ZGY4YzBkMWZjODBlZjE1MThjODQ5YjE0NzVkNTRkZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtDruBF6jKHX3pNzIMq7360Wy4hh
pDrbSEO/2qyvGqkZ0mWDBwTZk7I0TpAjDGjtYlnUhsbSeVJoDLyOjf2M8mWcDNz0
Pud1uh1/9gMmlA/96GSbqysFC0CjboqHdkcxm3kgHgy5ruCT4HvumiB7mF2668OG
yessXnrCKyLhMbqL5eVaAQG3bs1JASPD+RGbujfz4fi6HjJkXPrBt82eoXHjqLGA
VpVFrnC3/VzytTAaxrdC6kdvotkfZySYI8PLCZSCM+RFw9ef62Tx2T5nogAxuBLS
/nO2TargvB55kABx95S2C2URYrP0w5qorlc944uByy2Nq/8zSA6cqOJLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCadr434wNH8gO8VGMhJsUddVN5hMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUvwb/kE
eIHCkl/tXPwD/BqUl+UpFNFdXAVzi1zT5GQKBVqEOzKGZPIv9cEccYywd1yTF0RB
di4UPGcxQCzqNse6CfDyuMC99eUMwQbiQJGQVUkM2wyJZVvmVOaiNSxlNbLKfzD4
Mo1EbTcE/GOVOaXfjey7PRXjDdy8jYq21IzrzPEDfhZBgi8MP8vJ9Ynmc6WEBdj4
y+8qndTxOUl1/DMhdSIyAvDgkIG5yEBqT0R82VQqCHbwNT7KOn5aYqs2ojdyVp2f
NU53Vf/OEG34r3TxWeUeWrM+5/PQEi1XmK7fdixa9eQKUDw9+lg3ZDSqW4PC2yRt
2R5Ae4rOYZAwIw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:11:31 2026 by rpki-client