Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: J7U3UWM0luFbHVRY58LcV1WeQWNJdWU8HECmBzbqci4=
Subject key identifier: A5:A9:9B:22:03:2E:2E:D7:1E:CC:08:7C:8B:53:01:4E:B5:79:E0:06
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019FA184959DD908049711ED50971196D4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 12D0
Signing time: Mon 27 Jul 2026 03:00:48 +0000
Manifest this update: Mon 27 Jul 2026 03:00:48 +0000
Manifest next update: Tue 28 Jul 2026 03:00:48 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: aHxvLbwoGT3+DAeSUM+StKXKT23aw19VWqLqkheBJPk=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:95:9d:d9:08:04:97:11:ed:50:97:11:96:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jul 27 03:00:48 2026 GMT
Not After : Jul 28 03:00:48 2026 GMT
Subject: CN=a5a99b22032e2ed71ecc087c8b53014eb579e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:e5:66:94:b3:3b:87:fc:6b:91:b3:71:45:
eb:ba:21:5b:25:fc:1b:82:5d:f6:ff:1d:07:85:29:
bd:d8:55:1c:5f:68:d8:47:e9:33:42:fc:4b:3f:4a:
37:a6:65:2b:93:fe:c5:e4:4b:db:17:14:15:88:08:
de:18:cf:3b:e6:e4:57:1b:f4:6a:ad:58:bf:32:56:
b8:76:61:7b:55:f6:90:c5:32:36:db:c0:e5:ea:c2:
eb:46:80:cd:80:47:fa:f4:55:d5:7f:5e:04:27:74:
a4:41:b2:58:20:98:cf:42:c7:ac:f3:0a:c5:19:45:
53:f4:34:0d:30:70:6c:49:4c:7f:cf:b7:87:a3:f8:
71:c2:95:29:75:a4:4b:43:c7:13:49:19:1a:c0:3b:
3d:9d:71:70:d9:d8:fc:5d:ff:a4:c3:34:40:04:38:
32:cb:ad:dc:22:9d:79:1e:9a:81:47:5c:6d:81:1e:
69:cd:29:07:d5:73:c3:32:0e:32:cd:20:ff:0f:fe:
6f:58:2d:15:ee:88:c5:e8:2c:49:08:91:5d:5d:60:
65:8b:6b:85:de:b9:d2:f2:05:b9:72:f1:44:33:d8:
f2:f2:18:76:40:f3:c7:f9:b8:d8:70:0e:c2:0d:d5:
4c:f1:a4:05:e5:19:18:23:4b:7c:91:8c:e7:29:6a:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:9B:22:03:2E:2E:D7:1E:CC:08:7C:8B:53:01:4E:B5:79:E0:06
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:c4:ec:d7:58:ed:bc:8a:e2:1b:f2:b9:57:ca:77:02:58:
57:fb:97:79:a2:1a:71:00:12:50:c4:bd:f3:6b:86:65:10:7c:
42:00:a0:71:cd:e5:1d:30:10:26:4e:fa:11:a7:c2:cc:47:28:
92:a8:00:15:4b:53:ca:0d:cc:c7:81:40:c4:4b:8d:c6:17:31:
77:1d:63:42:c0:8d:ae:2e:a6:df:32:a5:b8:22:5f:b9:4e:d3:
97:45:f5:c8:34:6e:25:a0:47:7a:59:e8:63:3b:d0:9f:e1:bb:
4d:c6:d8:29:61:38:5a:45:0f:87:e0:6e:ad:ea:96:a5:63:9b:
c7:e4:db:b7:8b:59:f3:40:e7:49:ef:4c:f3:24:df:a6:76:15:
04:e6:21:98:52:68:1e:0b:ab:a6:90:f3:aa:b7:88:c8:96:b3:
61:9c:06:93:c4:de:f2:4d:cd:9c:b9:db:60:02:22:38:22:6a:
8a:b3:bb:e1:0a:f9:5a:21:43:b1:eb:4f:e2:1d:80:e6:0e:b7:
08:62:e4:02:6b:53:f8:40:2f:3c:0c:e9:72:08:ba:9e:a0:d3:
af:60:90:27:9a:ec:64:36:b3:a3:1e:56:6c:9d:46:71:54:27:
83:21:ca:52:ab:fc:6a:0a:07:3e:f5:ee:37:5e:81:f5:47:2e:
9c:e9:ee:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhJWd2QgElxHtUJcRltT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjYwNzI3MDMwMDQ4WhcNMjYwNzI4MDMwMDQ4WjAzMTEwLwYDVQQD
EyhhNWE5OWIyMjAzMmUyZWQ3MWVjYzA4N2M4YjUzMDE0ZWI1NzllMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjlZpSzO4f8a5GzcUXruiFbJfwb
gl32/x0HhSm92FUcX2jYR+kzQvxLP0o3pmUrk/7F5EvbFxQViAjeGM875uRXG/Rq
rVi/Mla4dmF7VfaQxTI228Dl6sLrRoDNgEf69FXVf14EJ3SkQbJYIJjPQses8wrF
GUVT9DQNMHBsSUx/z7eHo/hxwpUpdaRLQ8cTSRkawDs9nXFw2dj8Xf+kwzRABDgy
y63cIp15HpqBR1xtgR5pzSkH1XPDMg4yzSD/D/5vWC0V7ojF6CxJCJFdXWBli2uF
3rnS8gW5cvFEM9jy8hh2QPPH+bjYcA7CDdVM8aQF5RkYI0t8kYznKWogTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWpmyIDLi7XHswIfItTAU61eeAGMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD7E7NdY
7byK4hvyuVfKdwJYV/uXeaIacQASUMS982uGZRB8QgCgcc3lHTAQJk76EafCzEco
kqgAFUtTyg3Mx4FAxEuNxhcxdx1jQsCNri6m3zKluCJfuU7Tl0X1yDRuJaBHelno
YzvQn+G7TcbYKWE4WkUPh+BureqWpWObx+Tbt4tZ80DnSe9M8yTfpnYVBOYhmFJo
HgurppDzqreIyJazYZwGk8Te8k3NnLnbYAIiOCJqirO74Qr5WiFDsetP4h2A5g63
CGLkAmtT+EAvPAzpcgi6nqDTr2CQJ5rsZDazox5WbJ1GcVQngyHKUqv8agoHPvXu
N16B9UcunOnuMg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:29:55 2026 by rpki-client