Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: +ziaUCZU5fySj32dvFiBN41a9jXhX3yPqd3741LIVpY=
Subject key identifier: F6:22:14:C7:2F:36:95:81:4B:E4:84:5C:04:42:1D:32:A1:F9:4F:F8
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019D3488CD550F248D2231CE859F323E6975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 02C1
Signing time: Sat 28 Mar 2026 13:01:13 +0000
Manifest this update: Sat 28 Mar 2026 13:01:13 +0000
Manifest next update: Sun 29 Mar 2026 13:01:13 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: bDsgUD0kyisg0qeosOGFhS0mzD8T7G23rPTmpDcvE9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:cd:55:0f:24:8d:22:31:ce:85:9f:32:3e:69:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Mar 28 13:01:13 2026 GMT
Not After : Mar 29 13:01:13 2026 GMT
Subject: CN=f62214c72f3695814be4845c04421d32a1f94ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:69:f8:f5:4d:d8:12:e4:74:68:88:7b:6d:
87:29:7a:eb:b9:2d:e4:d2:68:72:86:40:e1:69:e2:
b7:68:cb:2c:5b:bb:71:03:db:74:04:d8:94:23:8b:
fb:cc:7a:a8:19:b4:e1:79:3e:bc:92:f9:65:e9:bb:
c8:cd:33:67:b8:cf:92:46:31:c9:da:94:37:7b:45:
c4:0e:2a:29:3c:2c:2a:44:0a:bc:c4:ad:26:4a:db:
c5:b8:48:f9:af:4e:b2:32:e5:89:8f:7c:ae:51:c5:
68:c4:1f:4d:09:b5:9e:58:7e:55:7d:bf:ad:e7:0c:
f7:37:bd:cf:33:c6:f4:a5:e6:a1:76:2d:d8:0b:d2:
73:c5:1e:08:f6:1a:da:3c:c9:3e:72:95:b0:42:a3:
ce:92:f7:67:70:66:4b:da:b4:18:bd:06:f0:1a:52:
ed:95:72:e6:06:b5:79:a6:0f:57:0e:ce:1a:ed:b6:
f9:76:b1:d9:88:0d:97:8a:ce:15:b1:34:d5:ad:f6:
df:6b:f7:0f:8d:df:53:bd:16:ff:22:28:e0:c0:af:
a9:19:aa:42:d9:ba:9e:68:b1:64:73:ed:2b:06:84:
54:eb:9c:33:10:97:d4:66:52:f7:65:f4:2a:56:c8:
ca:8e:97:57:4b:31:ed:6b:aa:97:1b:a8:f4:b2:a4:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:22:14:C7:2F:36:95:81:4B:E4:84:5C:04:42:1D:32:A1:F9:4F:F8
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:51:50:90:ac:e2:d1:9f:9c:db:02:ff:35:9c:e5:55:7c:7c:
b6:81:21:b1:e5:50:f8:e4:1d:8a:5d:e0:3c:de:d4:58:6c:9e:
2b:08:17:a8:62:87:de:f7:58:00:bc:27:79:39:24:7e:9d:f0:
65:93:93:0c:7c:77:d7:47:b0:10:85:38:b6:38:09:6a:df:16:
20:e2:76:1b:37:c1:4f:32:f5:26:39:78:72:0e:6d:c1:6d:a7:
a6:25:e5:c1:bd:3b:8b:60:0a:43:b2:b0:e8:15:3e:34:14:51:
8d:c4:ee:32:b2:33:3a:aa:88:c6:cb:1a:a2:ae:f0:f8:9f:f2:
9c:34:8e:12:35:ec:50:07:f4:26:ad:3e:4d:7c:03:09:86:93:
ba:02:c5:ac:a6:51:a6:6a:2b:bc:43:48:4e:05:f7:8e:f5:53:
66:e6:ad:59:d6:1a:67:c3:c5:35:ae:df:af:43:46:e8:8f:cd:
6d:40:7e:8f:10:cf:b7:1a:4d:81:b2:2a:05:d3:bb:c5:6e:6a:
bf:95:aa:6c:35:e4:b0:d1:91:e7:61:35:61:22:bf:b8:aa:36:
05:93:a0:cf:46:b1:48:1f:2e:d1:f7:ba:ba:3b:8b:a6:d4:d3:
7a:2b:7c:5d:d6:f0:c5:bf:3f:28:0f:58:18:b6:29:46:ed:39:
36:19:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 22:02:23 2026 by rpki-client