Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: 7o8anl9dS10FlZu2/Qp1jFYLppyusVzU52qHWIBZ/gs=
Subject key identifier: 5C:79:58:45:20:73:FE:08:BA:65:BC:29:33:47:1F:5E:5D:B3:69:B2
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019EB9C613210C5165C44051588E411DE29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1258
Signing time: Fri 12 Jun 2026 03:00:26 +0000
Manifest this update: Fri 12 Jun 2026 03:00:26 +0000
Manifest next update: Sat 13 Jun 2026 03:00:26 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: PO0Df9KQxc9GfKUiP+LyJh/5ZYJJDuiNGy+/16lE64k=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:13:21:0c:51:65:c4:40:51:58:8e:41:1d:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 12 03:00:26 2026 GMT
Not After : Jun 13 03:00:26 2026 GMT
Subject: CN=5c7958452073fe08ba65bc2933471f5e5db369b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:49:92:ab:cb:e4:c2:49:99:0d:87:2d:c7:
87:eb:02:53:34:89:81:12:f4:01:3e:42:69:fa:97:
ac:d8:8a:e5:0e:b8:e3:30:21:39:0b:24:16:15:40:
4c:fa:ac:58:6b:4d:e1:3d:da:8f:8a:85:d0:d7:7a:
fa:09:e7:a4:f0:60:d5:62:11:bb:83:a8:e6:e2:1d:
17:86:56:88:2b:12:03:b3:9a:e3:b6:43:e4:02:68:
ed:e9:cf:07:2f:f5:24:c9:37:de:52:cf:ff:58:4c:
86:b3:5b:32:45:ea:9b:21:2e:63:83:7e:ed:9b:80:
9b:11:ed:74:be:89:38:8a:24:c0:f5:81:4c:89:cd:
fc:9c:16:c9:e7:71:3d:e5:05:97:c0:76:35:98:a6:
f0:f1:71:4b:89:82:a7:13:b4:d1:63:ac:37:6e:2d:
47:32:71:3f:b2:3a:85:2a:ad:64:9b:75:83:bd:e7:
67:81:67:f8:2f:01:60:ce:e5:1f:fd:c4:99:f1:90:
92:61:8e:34:10:35:01:ac:96:cd:ed:d8:18:43:cc:
d4:7e:3e:8d:0e:2c:08:ca:89:53:ef:b2:7e:93:95:
9f:2a:73:87:1c:47:b3:6e:11:3f:ef:61:e6:48:3b:
84:be:60:03:ec:98:f8:e1:cc:de:7f:ec:65:b4:52:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:79:58:45:20:73:FE:08:BA:65:BC:29:33:47:1F:5E:5D:B3:69:B2
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:8a:de:60:4c:1a:91:ac:35:eb:0a:6e:c9:37:39:28:59:
54:4e:f9:4d:ba:6e:0f:08:38:98:9c:d8:ae:2a:2a:05:88:00:
33:5d:95:95:b4:f4:35:e8:68:2b:a1:9f:dc:cc:d5:25:01:0d:
d1:f3:af:04:f1:11:57:ae:b7:03:bd:ee:16:8c:65:e3:4f:84:
54:27:72:2d:a4:f2:f4:e4:25:70:f2:fd:f6:e7:bf:30:cb:97:
9a:b4:e5:70:5b:12:3b:da:59:8e:1f:63:45:bc:88:ca:09:f5:
b3:c6:4b:2f:1e:32:33:bc:ea:d5:f5:b7:1e:81:e6:df:b2:ae:
c9:48:5b:3a:7e:2f:5c:f2:dd:ba:21:f6:ce:a1:48:ab:c5:2b:
ce:63:bd:95:19:91:a5:ad:12:ef:71:5a:9e:5d:a6:6a:2e:5e:
0b:c8:91:97:d2:a9:1a:33:16:f2:62:29:78:d9:10:eb:08:a2:
ac:9c:cf:c5:78:79:8e:4d:38:7f:48:93:f4:b4:c8:4d:ed:3b:
4f:c9:c1:93:f0:42:7a:57:44:aa:b4:46:45:16:20:56:fb:f7:
99:ba:10:c3:ce:ef:11:4d:62:f8:22:2c:6e:34:dd:b1:58:c1:
ee:ed:46:9c:13:15:db:17:a3:92:03:7b:98:01:cb:7d:5d:2c:
c7:51:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:37:51 2026 by rpki-client