Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: tznZMbgY/Inz52b36MAtdodFkHf5faVaZJJO3LzGwnM=
Subject key identifier: 39:BA:3A:1E:16:F9:3D:2C:ED:B4:3E:AB:EE:7F:59:57:1C:A0:A8:14
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01A18262CD7FBA2701AC15FA3C288D296913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 13C9
Signing time: Wed 28 Oct 2026 12:01:15 +0000
Manifest this update: Wed 28 Oct 2026 12:01:15 +0000
Manifest next update: Thu 29 Oct 2026 12:01:15 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 7aOHqNjppXfgrR+B842ZQ3MQNBmiXEOBd6NdFjYhaAA=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:cd:7f:ba:27:01:ac:15:fa:3c:28:8d:29:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Oct 28 12:01:15 2026 GMT
Not After : Oct 29 12:01:15 2026 GMT
Subject: CN=39ba3a1e16f93d2cedb43eabee7f59571ca0a814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:ed:e1:c3:5f:e5:bf:2c:6e:18:c2:a5:28:
09:dd:e6:37:cc:b2:98:92:51:f8:d6:81:6d:a0:4e:
b6:5a:db:ee:0d:e7:a1:d3:77:2d:fb:96:00:ea:a1:
73:a1:29:62:38:0c:37:b8:61:55:62:81:16:d9:77:
2f:56:90:02:fd:24:dc:d2:58:e4:04:6f:7d:a1:37:
39:b5:92:66:53:21:9c:5a:cd:bc:1a:d4:9b:07:96:
b4:5e:86:89:f4:c2:fd:f2:12:d8:42:bd:50:2a:31:
b4:b6:76:ec:f8:20:64:83:13:83:fd:29:f6:67:44:
ea:e3:88:aa:d6:5c:f7:8c:e8:ce:a4:72:6b:13:2d:
83:72:a9:49:ad:6f:d3:60:96:5e:e0:59:4f:85:c4:
b3:22:f2:35:2f:04:94:83:c8:a7:6a:30:01:db:2a:
e4:9d:89:93:de:b0:3c:f9:5f:81:0e:1b:01:9d:af:
e7:68:70:53:a4:5e:5c:18:82:28:23:5a:19:52:4f:
a6:89:9d:4b:74:c4:e4:f4:85:69:8c:a9:d6:a1:71:
61:a1:7d:4d:cb:a4:b9:25:d8:3e:14:76:86:91:8d:
a2:60:27:d6:a6:e9:de:dd:fb:c0:21:ae:77:31:68:
47:2e:e4:6b:7f:45:76:ef:f1:a4:f0:78:71:b9:90:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:3A:1E:16:F9:3D:2C:ED:B4:3E:AB:EE:7F:59:57:1C:A0:A8:14
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:59:60:8b:7e:bb:f1:cc:ba:1d:b9:3d:df:84:c5:0c:96:
dc:57:bb:61:96:27:62:a2:af:81:01:c4:42:34:8d:62:92:0d:
77:a3:29:db:b2:d7:25:c0:93:91:10:c0:48:e4:9f:9e:7a:94:
09:4d:34:8c:25:2c:87:40:fb:61:e0:ad:13:02:91:f6:76:77:
41:3f:5c:77:fd:01:1d:3e:23:8b:1e:c2:79:5e:0e:15:5e:7f:
36:e4:a5:64:aa:ee:52:b1:9a:1c:e8:23:31:9f:2c:59:97:06:
41:cc:d0:7b:5d:45:67:0b:15:a4:3a:95:9c:32:cf:d1:0b:44:
be:ec:ab:d5:21:e6:51:e1:8d:8d:42:95:d3:2c:fb:f0:51:57:
19:fe:df:c1:b7:43:3c:47:6a:af:0a:b3:f6:06:78:ac:fd:db:
ed:a8:d5:fb:37:b8:57:2b:16:49:9f:6e:b6:20:f0:a3:2e:eb:
1e:9c:27:42:2b:10:b0:38:d6:8a:46:fe:be:66:0d:b7:6a:86:
dc:76:62:21:62:4c:04:cf:54:2c:2e:55:d7:6c:97:58:64:45:
79:1d:0f:5b:ad:83:9b:d2:5e:ae:ce:b4:31:0d:28:bf:88:cb:
9c:88:01:99:a7:45:87:77:e6:de:8f:f0:c0:80:94:19:66:5f:
f2:83:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:30 2026 by rpki-client