Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier: 4Zdt0nh6xt5nZ+DKurMm6Hxbw95f97LbX+Qs1dV8+cg=
Subject key identifier: EC:65:5B:B2:BD:3E:C4:0E:CA:E4:51:3C:C4:DC:14:56:FC:C0:CB:A6
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer: /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial: 019D38D34EC7A22DF8A693E81FFBBD8FF0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number: 0583
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: 3_pPfdiwC4KChF-Xshn4oiVhkZ0.asa (hash: AngmFfXAvvs7BeOIV/RLl023pzJd7MaM/N4lm/y2gng=)
2: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: tEpsJeoR7PE89jpgJGm3aQoilvKAELPqDtNsklkP1ug=)
3: co3NoaTZrfbmxDfWvZVyzSF9zs4.roa (hash: W81jUWTx5An2ltxr3EmUDv1Bxve3EzM58yjJRH0amGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4e:c7:a2:2d:f8:a6:93:e8:1f:fb:bd:8f:f0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=ec655bb2bd3ec40ecae4513cc4dc1456fcc0cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:f2:c2:d0:23:49:c1:b3:88:07:77:c6:a5:
b0:c8:14:a9:9b:e5:c8:fc:77:5a:d6:f9:33:bc:f0:
43:32:a7:56:79:34:a5:16:5d:cf:71:0b:21:14:2b:
16:93:8e:6a:3b:7f:d9:94:24:8d:23:04:e1:26:35:
ba:c7:83:be:45:a8:d4:72:6e:a8:45:78:8f:d2:38:
ab:b4:bf:a4:ae:10:4a:0c:90:48:3f:75:40:e3:e9:
91:87:00:2d:7b:c0:d9:9b:0e:6c:ec:03:bc:66:33:
17:62:c7:ae:7b:74:e5:e0:8a:d1:40:10:da:d1:74:
03:78:10:eb:7c:b3:2d:ea:d8:b3:75:0e:a9:7d:1f:
82:28:10:e4:36:3b:47:13:76:63:64:c3:1b:ac:2b:
8b:a8:2a:9b:b8:cd:f3:44:d9:ec:3f:39:a6:75:1e:
fd:f4:80:51:6b:1f:77:d8:c1:c7:2b:92:c4:18:5a:
6a:16:16:5e:74:8e:99:92:50:8f:2d:e7:7c:7b:fd:
25:29:8b:22:fa:aa:68:5a:98:d2:b3:de:59:05:85:
aa:7e:73:b1:f4:e1:b2:26:4f:1d:da:2b:7f:58:1e:
b6:08:fe:5e:71:f7:e7:12:19:f0:2f:ae:af:c1:74:
3d:a6:bc:a9:00:bb:5f:fb:7e:4c:d7:34:1f:db:32:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:5B:B2:BD:3E:C4:0E:CA:E4:51:3C:C4:DC:14:56:FC:C0:CB:A6
X509v3 Authority Key Identifier:
keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:63:43:84:5b:c9:b3:bf:14:0d:5c:ad:ab:75:ae:fa:3a:
0b:a4:88:f6:7e:22:3d:4a:c2:88:5b:55:5a:9b:21:6e:a3:42:
bc:85:27:37:78:ea:9e:f9:26:80:9a:bb:8c:ea:49:70:38:d7:
ae:16:5b:8a:2e:2c:b5:46:b8:84:70:bc:ae:20:e6:33:67:49:
12:4c:b3:37:0d:75:5a:01:0f:9c:d4:7d:24:4d:5e:95:c4:7e:
a3:ac:65:9d:92:a8:ce:ae:48:58:5f:67:d9:69:9b:09:3b:dd:
0a:af:49:8e:a7:91:89:cc:09:22:21:05:d7:7b:a4:c8:7b:a3:
37:b6:00:97:85:2c:a9:e7:4d:ce:95:e9:45:83:7d:ef:db:9e:
42:e5:6f:d4:f5:13:2e:72:4f:86:0e:5f:bd:71:f6:c6:1b:60:
94:9a:08:63:78:d6:1a:dd:88:fa:10:14:80:71:c0:da:91:99:
24:fc:d7:e0:ec:90:44:47:71:fa:28:25:8e:7c:bc:81:4f:85:
0f:c2:e1:15:5e:e0:76:8c:e6:8a:5e:bd:50:e1:fb:f1:87:83:
1e:46:f5:74:9d:99:cf:42:92:9b:fe:94:0e:af:f4:59:05:18:
ec:c5:45:3d:24:05:4b:d2:0c:23:f8:95:9f:ca:7d:45:a6:c7:
70:68:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:08 2026 by rpki-client