Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
File: RB2AbBpx91B0dFHI0af7W05qqAI.mft (raw, json)
Hash identifier: fMZb7nB+Yd9rJLfAMrEREcxHAFpsbThmxYKX+8pJMWs=
Subject key identifier: A1:C5:0C:12:C1:9C:44:57:7A:6D:1E:A5:8C:78:51:6B:3B:50:3F:1C
Authority key identifier: 44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
Certificate issuer: /CN=441d806c1a71f750747451c8d1a7fb5b4e6aa802
Certificate serial: 01A12C1FEE5C6261AFCC74E3C0038855C73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
Manifest number: B3
Signing time: Sun 11 Oct 2026 18:00:52 +0000
Manifest this update: Sun 11 Oct 2026 18:00:52 +0000
Manifest next update: Mon 12 Oct 2026 18:00:52 +0000
Files and hashes: 1: RB2AbBpx91B0dFHI0af7W05qqAI.crl (hash: UhWMcNmZY2iiizHhDhljSvBowpDiWoezZGmD91kSjoU=)
2: X1CFLv7A4sRe4MDi2VvzKlGjy14.roa (hash: k+C+7aHCIjTNRdAT1VeG2Bh6fcwcYqFEffA4u1Vojg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:ee:5c:62:61:af:cc:74:e3:c0:03:88:55:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d806c1a71f750747451c8d1a7fb5b4e6aa802
Validity
Not Before: Oct 11 18:00:52 2026 GMT
Not After : Oct 12 18:00:52 2026 GMT
Subject: CN=a1c50c12c19c44577a6d1ea58c78516b3b503f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:fd:7b:b6:53:f9:5a:f6:2e:63:e9:54:3c:
0a:17:6e:bc:5e:45:e3:c3:1c:a4:de:b4:39:47:8e:
35:1c:c3:ed:39:d4:7b:6a:1a:4e:b9:32:a0:4d:10:
0b:5a:dd:d5:bb:d7:1c:25:14:8e:0c:ad:7b:02:1e:
d6:9e:44:20:d2:5b:dd:6c:25:ec:7b:e3:de:37:5d:
1c:d2:04:62:af:f1:9f:10:17:c9:18:51:93:04:04:
1b:ab:d4:87:6e:68:2e:2d:b9:34:0c:47:5b:83:1f:
17:fb:52:df:bb:d3:f6:d4:2a:78:e7:ff:ed:00:86:
da:77:3a:61:99:5b:1c:c5:9f:96:dc:bb:41:02:8a:
6c:cc:4c:c8:ea:b0:da:07:7d:aa:0b:be:c3:5d:a6:
90:a2:ed:81:a6:87:b5:39:4e:06:7d:7b:88:c8:88:
2a:96:50:4c:24:0f:cd:ac:ae:c7:0a:8e:c2:0c:8c:
69:84:26:1e:17:1e:5a:5b:45:83:e6:65:5d:00:72:
e9:2b:a9:ea:cc:81:fa:2a:b0:0e:92:5f:62:33:87:
58:90:a2:1a:ea:b1:5a:58:d5:f0:76:98:ba:90:b1:
21:82:6e:5f:7a:5b:fd:67:d3:33:e5:db:f7:d4:6d:
d3:da:2f:3c:a8:c1:0c:bc:c7:9e:03:62:fc:78:4f:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:0C:12:C1:9C:44:57:7A:6D:1E:A5:8C:78:51:6B:3B:50:3F:1C
X509v3 Authority Key Identifier:
keyid:44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:72:fe:ec:75:59:dc:09:b7:40:57:91:3b:91:cd:4e:00:9a:
9a:f8:e2:e2:0e:76:a4:90:a9:48:0d:6b:91:7b:26:05:e4:5c:
33:87:50:85:40:ab:90:87:ea:d6:a3:fa:ba:0e:ff:b1:3a:25:
6c:e4:39:fd:fc:97:24:7d:3e:93:f0:6d:d6:a9:21:9c:7a:ca:
55:39:49:14:97:3f:80:6c:79:c7:41:51:68:2b:16:10:4a:ec:
35:a1:0e:86:d0:f7:cf:bd:6e:20:b4:af:a5:83:b6:7b:6b:6f:
c0:22:b1:d1:95:e4:7b:d9:df:16:a7:87:97:e4:65:55:9e:67:
7f:07:22:ee:0f:23:e0:5c:d1:cc:a7:33:30:7a:27:52:ee:4b:
db:85:60:4d:6f:48:0e:b4:6f:d3:52:94:1c:66:95:71:f7:27:
0c:92:9e:be:cf:1b:8e:2a:b6:47:af:2d:e6:08:26:d2:6c:8f:
20:68:34:3d:71:66:4f:fa:d7:4f:e3:de:4f:9c:39:02:4b:c4:
17:42:bd:90:33:fe:85:9b:24:cb:a2:e8:d2:06:1d:07:2f:78:
d5:cb:0f:09:1c:85:cb:d8:cd:58:35:e8:2e:63:1f:81:1a:8b:
7c:c8:23:e9:24:ee:4d:e1:7a:8f:a0:ec:90:e7:15:d0:2e:75:
81:dd:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:44 2026 by rpki-client