Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: kIm2r+dRY8pCQ+KIKN03kdk7i23p7+d1CV+R0fNct7E=
Subject key identifier: 48:5A:82:57:5D:B1:BE:21:D4:68:DA:EE:07:D5:15:2B:59:D7:EF:39
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019EB7D78478BF438C4E8EFB415695EBEFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1257
Signing time: Thu 11 Jun 2026 18:00:14 +0000
Manifest this update: Thu 11 Jun 2026 18:00:14 +0000
Manifest next update: Fri 12 Jun 2026 18:00:14 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: Ys6RcCcJK7Xw6Ajvt9r1US6KuuGApez9JksKONWNKYk=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:84:78:bf:43:8c:4e:8e:fb:41:56:95:eb:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 11 18:00:14 2026 GMT
Not After : Jun 12 18:00:14 2026 GMT
Subject: CN=485a82575db1be21d468daee07d5152b59d7ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:72:7d:2d:b3:3b:6d:a2:9a:2e:c8:6c:25:
46:98:b3:9c:4b:43:c4:9b:df:75:62:e4:32:a5:55:
21:a7:f7:35:1b:a9:f9:71:4e:a7:5e:e7:14:a9:7c:
9d:49:c2:7c:19:7b:4c:76:fc:86:bd:21:62:b9:e9:
36:3e:80:1a:bd:6e:b5:72:f9:f8:9f:c3:23:a9:31:
6f:0d:32:fe:a5:40:df:a3:50:51:5a:61:ec:07:8b:
72:73:f7:c3:92:4d:3b:04:80:7b:a7:8a:06:6f:d4:
e9:5e:fc:e0:80:5e:40:f0:1e:a8:af:78:d9:d2:61:
21:e2:2d:2d:0d:1c:17:35:21:19:83:57:c5:ae:2e:
e8:f4:95:60:32:a3:60:19:48:97:81:6b:ee:ae:54:
98:8b:00:7e:02:36:8c:81:c7:74:d7:72:81:f1:30:
41:6d:2b:9c:7f:f3:a8:dd:d5:b8:24:d7:f1:e6:e8:
69:31:73:9b:41:58:ce:df:a4:e6:e7:63:97:33:46:
13:c9:1e:f5:d8:9a:47:e0:c8:fa:4b:21:f0:f0:61:
9b:45:3a:31:eb:9f:23:19:a3:ee:4b:15:ed:40:8a:
46:27:28:b2:10:30:e4:af:5e:78:61:35:0d:9d:73:
97:22:1d:fd:32:d7:c2:f8:8b:58:ba:06:a6:95:e1:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:82:57:5D:B1:BE:21:D4:68:DA:EE:07:D5:15:2B:59:D7:EF:39
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:25:74:b8:0d:ed:fb:88:07:2f:b3:01:08:f9:00:05:93:
67:82:20:f0:f6:6c:31:5e:83:21:a3:5e:da:43:19:97:b2:74:
d1:5d:da:0f:a3:1d:fa:8a:65:28:cb:fe:6d:28:97:86:d9:c9:
b1:b5:83:50:ef:dd:95:9a:6a:e4:68:0c:2e:f0:6e:ad:1e:f1:
a7:a9:85:41:dc:d1:b3:f2:e4:8c:0c:99:b2:7b:27:3c:94:cc:
bc:07:8d:ef:50:2a:52:91:e6:f6:80:88:e2:b6:c2:0a:aa:ab:
9e:b0:a1:dc:76:f4:b7:9d:23:a6:ff:3f:2e:d7:cb:ce:db:6d:
71:d0:a7:c0:cf:62:65:63:fa:93:99:05:60:d4:c9:2f:c7:96:
7c:64:69:51:b3:0b:db:b3:02:ca:5a:9b:8e:92:e7:fe:bc:6f:
0c:bb:3c:f5:0b:d2:e2:ed:c7:2f:d0:9d:18:5f:24:ce:86:90:
2d:c8:b6:bf:5d:3c:2d:a1:53:44:3b:b6:b3:84:3e:3c:c1:6f:
e4:54:89:b0:1d:0d:e7:7d:2c:89:8e:bc:5d:34:77:85:07:f7:
2e:4e:56:11:3e:47:c5:52:c4:89:a2:54:90:b7:61:81:df:a3:
f9:37:72:dc:f0:e6:ff:d9:7b:67:3a:9f:d1:e8:75:54:7a:39:
d6:bc:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:15 2026 by rpki-client