Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: gVZdfB1HKDzTyX1Xveh7wbn78KGwTGtZ+pyG5s2txgE=
Subject key identifier: 5C:67:E0:C6:A3:22:02:F4:4B:DC:3D:A9:B9:2D:19:A4:3E:2B:2E:53
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01A08D1F4F8E35D7C533FB8D5EAE24CEF571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 134A
Signing time: Thu 10 Sep 2026 21:00:34 +0000
Manifest this update: Thu 10 Sep 2026 21:00:34 +0000
Manifest next update: Fri 11 Sep 2026 21:00:34 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: GpFxVTpnLeJg1dKdnMySUvkQ1DEuGB8ucYUOO+WmEeE=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:4f:8e:35:d7:c5:33:fb:8d:5e:ae:24:ce:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Sep 10 21:00:34 2026 GMT
Not After : Sep 11 21:00:34 2026 GMT
Subject: CN=5c67e0c6a32202f44bdc3da9b92d19a43e2b2e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c4:49:a4:81:13:a0:af:39:5a:56:8b:64:de:
4c:14:a4:12:8b:60:da:59:3a:de:e5:4b:5e:2d:db:
81:ce:fc:26:2c:17:60:a4:7b:61:97:0c:20:6e:d1:
53:45:84:09:12:db:7d:3b:06:5b:f4:d5:33:17:de:
5b:e7:84:18:bd:41:cb:2d:0d:76:e9:90:de:fa:07:
9b:87:0f:62:56:69:d3:aa:10:43:1b:ea:4c:0b:db:
5a:64:ec:ee:51:cd:a3:fd:e2:fc:0c:13:a9:22:f1:
62:74:d6:49:a8:a9:d3:6f:b0:fe:8d:77:c5:c8:a4:
bf:6b:2f:02:31:4f:88:29:e6:97:59:58:5a:85:52:
52:52:73:11:1e:24:e3:6a:95:ec:9b:47:31:e7:1f:
fa:7f:e8:3a:f5:8c:5d:2b:67:16:23:25:6e:32:17:
46:26:45:9e:07:2b:7a:52:81:90:5d:c6:d6:3c:97:
be:5b:05:aa:89:fe:0d:0b:71:14:a6:8c:e3:0e:ad:
e0:9f:01:86:b4:5c:5b:9a:fd:75:de:e2:8b:7b:f7:
89:26:d4:f5:5e:42:e2:35:1e:d0:d3:bb:e3:93:a7:
ea:c9:79:4e:91:e5:fe:8e:c4:0f:9e:9d:bc:98:c6:
b8:f9:40:5d:1a:32:63:fe:f9:f0:96:86:d1:fa:8b:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:E0:C6:A3:22:02:F4:4B:DC:3D:A9:B9:2D:19:A4:3E:2B:2E:53
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dd:ae:ad:66:70:4e:20:e2:b7:e1:8f:2d:d7:57:97:cf:dc:
6e:78:77:99:23:95:97:5f:61:a3:36:b6:4d:27:69:2b:0c:90:
8d:c0:e5:b0:41:18:d1:09:f3:fa:e4:84:4e:c8:61:a4:7e:8c:
5e:ba:e8:77:ef:82:64:8c:79:84:6f:15:35:6e:c2:34:23:7b:
d5:94:f2:b0:85:71:a6:5d:76:20:02:98:c3:ed:12:b7:b8:8f:
cb:4b:f9:72:6f:63:69:9b:01:e7:3d:74:53:41:79:82:50:36:
61:18:bd:85:b7:76:6e:4b:fb:01:fb:64:67:52:dc:aa:ff:51:
3d:eb:b4:c8:36:0e:cf:fd:99:4b:3c:eb:2d:a4:ed:28:54:78:
14:96:17:81:b9:74:81:a2:29:6f:68:6c:c5:60:04:1c:d8:ba:
df:a8:59:c4:e1:11:df:12:0c:12:3f:a9:ca:14:53:2c:b3:8e:
c0:d1:5b:fb:26:91:e5:3f:03:34:e8:78:e7:9d:54:b6:89:93:
ff:13:5c:1b:3f:ab:4a:a2:7b:6e:e6:c6:d0:da:60:e6:f9:df:
51:c7:55:9e:4f:7f:4a:59:a7:07:ab:a5:c8:f4:52:33:70:df:
84:5f:82:4a:bf:3c:f8:c5:67:25:4d:a0:88:e4:ac:2c:76:64:
74:4b:07:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH0+ONdfFM/uNXq4kzvVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjYwOTEwMjEwMDM0WhcNMjYwOTExMjEwMDM0WjAzMTEwLwYDVQQD
Eyg1YzY3ZTBjNmEzMjIwMmY0NGJkYzNkYTliOTJkMTlhNDNlMmIyZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88RJpIEToK85WlaLZN5MFKQSi2Da
WTre5UteLduBzvwmLBdgpHthlwwgbtFTRYQJEtt9OwZb9NUzF95b54QYvUHLLQ12
6ZDe+gebhw9iVmnTqhBDG+pMC9taZOzuUc2j/eL8DBOpIvFidNZJqKnTb7D+jXfF
yKS/ay8CMU+IKeaXWVhahVJSUnMRHiTjapXsm0cx5x/6f+g69YxdK2cWIyVuMhdG
JkWeByt6UoGQXcbWPJe+WwWqif4NC3EUpozjDq3gnwGGtFxbmv113uKLe/eJJtT1
XkLiNR7Q07vjk6fqyXlOkeX+jsQPnp28mMa4+UBdGjJj/vnwlobR+os6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxn4MajIgL0S9w9qbktGaQ+Ky5TMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht2urWZw
TiDit+GPLddXl8/cbnh3mSOVl19hoza2TSdpKwyQjcDlsEEY0Qnz+uSETshhpH6M
Xrrod++CZIx5hG8VNW7CNCN71ZTysIVxpl12IAKYw+0St7iPy0v5cm9jaZsB5z10
U0F5glA2YRi9hbd2bkv7AftkZ1Lcqv9RPeu0yDYOz/2ZSzzrLaTtKFR4FJYXgbl0
gaIpb2hsxWAEHNi636hZxOER3xIMEj+pyhRTLLOOwNFb+yaR5T8DNOh4551UtomT
/xNcGz+rSqJ7bubG0Npg5vnfUcdVnk9/SlmnB6ulyPRSM3DfhF+CSr88+MVnJU2g
iOSsLHZkdEsHfw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:11 2026 by rpki-client