Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: q8d2IhctKobP0UNt1wSBpRAAZsxrWWonCgoUlFCTba4=
Subject key identifier: D1:18:7D:54:FF:30:25:31:EC:3C:E8:E6:4C:42:21:D7:DA:1C:36:72
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019EE77B8F4966E757B8826FE8963D1ECA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0DAB
Signing time: Sun 21 Jun 2026 00:01:34 +0000
Manifest this update: Sun 21 Jun 2026 00:01:34 +0000
Manifest next update: Mon 22 Jun 2026 00:01:34 +0000
Files and hashes: 1: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (hash: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=)
2: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: 0KSDwCvCpHaL3QXLgPRMEcInoqdPhuqmwPDezlXOi44=)
3: zvHw3KmhzvEgU4W6InBqUBX0yjg.roa (hash: CGIpxT3J1vn2/tgM/8XQPPrlvlWSOI9UHhs/JfCuu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:7b:8f:49:66:e7:57:b8:82:6f:e8:96:3d:1e:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jun 21 00:01:34 2026 GMT
Not After : Jun 22 00:01:34 2026 GMT
Subject: CN=d1187d54ff302531ec3ce8e64c4221d7da1c3672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:1a:da:6d:72:21:0a:04:69:83:8c:48:8e:
b3:40:72:0d:d5:c6:80:69:47:22:3d:da:24:1a:46:
47:f3:dd:58:9a:7c:e8:95:37:73:c9:5f:97:aa:4c:
28:60:a7:83:f9:f3:06:f8:a8:32:70:91:d5:8e:33:
92:0f:67:be:6d:f1:51:ea:85:05:c7:11:cf:65:a0:
80:ec:c0:cd:5b:91:81:e4:be:2b:81:20:bb:12:d1:
de:9e:5c:c9:cd:50:48:d0:ae:93:d6:7d:ca:e9:b5:
0e:53:06:42:41:f5:33:ac:1a:76:91:8a:5e:84:f2:
b2:6a:16:21:e4:27:e5:5e:07:64:af:58:31:ac:32:
48:83:63:b2:5f:21:fa:e0:2a:3f:60:38:8b:7f:90:
72:25:2b:d1:0c:e0:2c:7a:3d:61:6b:a4:50:b0:c4:
cf:fb:23:41:37:eb:81:71:2f:db:91:b7:79:58:f2:
f7:98:87:84:97:e9:d6:cb:c7:46:87:fa:3a:69:48:
62:9b:99:43:26:c2:a8:48:10:cf:7d:12:71:b6:0d:
87:9d:22:5b:89:10:8d:b0:79:c0:c1:54:b0:10:9a:
6b:f6:b2:a3:d8:24:c2:86:df:79:4d:eb:79:eb:9b:
40:8a:f2:bc:ed:96:58:b8:f3:69:05:05:cd:f2:69:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:7D:54:FF:30:25:31:EC:3C:E8:E6:4C:42:21:D7:DA:1C:36:72
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:e5:2d:8e:a8:55:71:06:12:8b:95:72:d6:d6:3e:57:68:
75:f6:58:39:c2:bf:f3:ba:93:12:ef:73:40:ae:7f:8f:95:c5:
02:04:01:ef:b9:0a:73:b6:9b:4a:a5:e4:24:70:9d:08:e1:1d:
19:30:48:e4:cc:aa:6e:e1:71:b3:fa:98:12:93:41:57:77:2f:
ce:e8:48:c0:58:60:13:d2:5d:41:06:88:38:5e:a1:2d:e1:65:
96:16:eb:60:c0:de:3a:c1:2c:36:83:6d:fb:22:03:8f:7f:da:
3b:3c:1b:ba:08:e2:39:50:7f:bf:97:37:c2:a5:90:1d:43:82:
f6:ce:d8:e2:e4:3b:2f:32:60:b5:52:65:49:13:6a:de:c1:71:
61:45:4c:1a:5c:f0:1b:38:ac:f1:24:f9:24:65:33:0b:a7:35:
36:53:b2:df:f3:8d:eb:48:f2:1d:bf:29:be:0d:13:db:d6:ff:
e2:df:1c:f4:e6:51:08:75:96:2a:76:56:c2:4e:f0:24:c7:e8:
e7:17:c8:00:62:06:02:cf:95:07:f1:da:83:73:67:07:5b:55:
21:58:ae:5f:e5:dd:22:77:24:c6:68:9f:46:b0:3c:46:d8:e6:
f7:7a:cf:d2:71:3b:0d:4a:0e:f7:84:ca:f4:b3:d2:13:d4:b3:
d2:2d:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:19:48 2026 by rpki-client