Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: eBx2BZ2q6N4/kxtZhxCk2K7ofKcWvIIQ0r533Dg8M7E=
Subject key identifier: D5:CC:09:DF:63:1B:13:B0:65:D0:83:28:8A:B8:3D:D4:20:E8:6F:97
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019D3977EB020936A484D8D592C27CE07B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1191
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: B4pC1lVMYnEYjSGBD1ZBCOWA6A2pUkud4fgP/OxV4dc=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:eb:02:09:36:a4:84:d8:d5:92:c2:7c:e0:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=d5cc09df631b13b065d083288ab83dd420e86f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:54:4a:2b:08:7d:c4:f2:ae:9b:fd:02:b3:
8d:fa:1c:dd:ac:bd:2b:d8:7a:5c:d5:56:fc:74:ff:
e5:53:4b:06:4e:04:7d:17:62:b5:4a:97:b2:99:66:
6b:6d:12:2e:67:96:ee:8d:2f:82:bc:c6:87:ae:f4:
27:67:43:53:da:b2:10:2e:be:62:42:2f:cb:d6:3f:
99:f0:31:35:c4:b5:57:d7:5f:a3:2e:6e:49:2a:05:
fa:e1:51:77:03:61:f3:4f:15:3e:86:9f:52:77:74:
17:5c:2e:d6:2f:4d:60:9d:b1:0c:4f:96:12:83:cf:
19:f7:d1:ac:08:4d:9c:50:03:0e:04:1d:a4:03:1b:
11:de:b0:77:96:b5:3e:8b:0a:5d:3e:ff:b0:cd:b5:
0e:99:2b:89:0f:a5:77:00:ce:06:1f:32:6e:ac:7b:
6c:65:cc:80:ba:88:83:a6:dc:41:11:6e:92:12:4b:
3f:17:73:e4:86:0c:ed:5a:bb:e0:1d:fc:da:f4:d6:
81:94:6e:ba:02:9e:47:c4:50:8d:49:92:5e:15:80:
88:ab:09:2a:e3:d0:09:e5:61:7e:fa:92:b0:bc:f6:
91:e6:ef:7f:19:12:fc:56:a3:df:04:16:36:d1:18:
6c:a0:3d:07:fe:f2:ac:f0:fe:0d:1e:b3:8e:29:7a:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:09:DF:63:1B:13:B0:65:D0:83:28:8A:B8:3D:D4:20:E8:6F:97
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b3:29:73:5a:fb:14:45:e2:d0:51:a4:2c:ca:a8:4e:98:98:
78:9d:5f:ed:98:91:ba:f2:5e:64:d0:87:03:e0:a8:d9:c8:00:
c1:72:cb:1a:0d:10:e8:18:8c:e2:71:7e:dd:b9:07:8a:51:3f:
55:f8:74:85:82:08:e6:2d:68:ac:13:95:07:ee:ac:de:0e:0e:
d4:18:f6:a8:c0:fc:41:1c:02:b0:d5:7d:37:29:b4:3b:ae:3d:
a9:c2:f8:d7:a7:3b:1b:e1:95:fe:c8:22:2a:9f:54:52:d0:95:
bd:8e:c0:3a:0e:d7:d5:b8:ed:e1:c1:78:f1:1a:a8:cd:52:ec:
aa:2a:f5:8e:29:18:36:68:61:c1:a4:31:03:37:29:e8:f0:52:
19:f4:0d:ce:84:10:62:89:7a:ed:a4:fa:f3:5f:80:59:fc:5d:
5e:bd:bf:5e:47:26:25:73:a7:13:25:29:5b:bd:e6:b0:99:89:
55:69:08:d6:f2:f4:a2:a5:c2:f2:02:f3:0e:a7:23:c9:4f:87:
e4:a6:55:d7:5b:c2:b6:b2:78:aa:55:09:cf:67:ca:fe:3e:07:
99:fe:6d:fe:ad:73:4c:1e:bb:46:38:1f:3c:b3:0e:15:1d:39:
b9:73:f2:b8:b7:86:40:af:c2:6a:46:2c:52:ef:7a:6a:95:8c:
df:f3:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:04 2026 by rpki-client