Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: jMYhDojyOwcCKBDrQOKXMWJOMZezljfA15plz5W0BxI=
Subject key identifier: 78:2F:92:EE:E5:A2:97:53:6F:99:23:3D:BD:91:AD:62:96:EE:02:AB
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01A0F37A44EB919DB946D98540296F2ECAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 137F
Signing time: Wed 30 Sep 2026 18:01:11 +0000
Manifest this update: Wed 30 Sep 2026 18:01:11 +0000
Manifest next update: Thu 01 Oct 2026 18:01:11 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 0cG2LqAfYRT18GiiEdLAPYgFQNbbTJilDWvbxU8SMWc=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:44:eb:91:9d:b9:46:d9:85:40:29:6f:2e:ca:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Sep 30 18:01:11 2026 GMT
Not After : Oct 1 18:01:11 2026 GMT
Subject: CN=782f92eee5a297536f99233dbd91ad6296ee02ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:07:40:dd:7d:3c:85:b8:e0:0a:d1:40:4c:
e5:9d:53:04:3d:10:5a:2e:67:05:f1:d0:36:c0:77:
dc:ea:9d:83:c1:0f:ac:85:9a:aa:67:9b:bf:e8:da:
fb:30:df:28:13:ce:da:8f:94:3b:ab:cc:3b:f6:ce:
40:5d:31:38:7f:e6:0b:66:0b:33:ca:86:5d:77:18:
c1:d1:81:07:1c:18:cb:82:b4:be:6b:2b:f2:5c:f0:
0d:c3:4e:3b:1c:ec:3f:31:dc:df:ae:88:9f:53:83:
75:09:68:38:ea:b2:fb:6a:83:81:a9:19:fe:27:69:
4e:8d:55:26:b3:6b:56:d3:53:83:76:63:d0:45:9a:
2f:d2:89:fa:0a:78:02:bc:c6:f7:68:66:2b:1a:30:
31:ff:b6:cb:69:a4:5b:52:18:4c:ff:5d:a9:a6:bc:
7c:8c:94:c7:e3:70:0c:bf:d2:62:a0:43:59:7e:52:
3c:89:42:e3:ec:77:0f:01:26:fe:9c:3c:d2:69:a2:
94:43:ac:14:92:10:fc:77:80:07:a3:e9:57:b9:ba:
21:ce:bc:e6:03:ab:ce:32:75:00:40:1f:c9:4d:e3:
b9:24:81:23:e2:4b:f4:e0:42:a3:0a:c1:ef:f9:f6:
3e:a7:42:10:5e:5a:46:e4:f6:30:57:07:74:2a:b2:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:92:EE:E5:A2:97:53:6F:99:23:3D:BD:91:AD:62:96:EE:02:AB
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cd:12:b9:ed:e4:aa:66:76:e8:0d:2c:eb:cd:18:0e:8e:92:
81:7e:2a:f9:23:8e:06:73:a4:c0:a2:ad:e5:0e:4b:74:7c:db:
cf:75:48:69:1f:f5:25:91:77:3f:a8:31:ec:ea:fb:e6:9d:09:
58:35:de:9f:e7:66:e5:39:75:fa:38:63:1f:81:01:d1:f6:4b:
2c:d3:a6:84:87:ab:87:a4:17:22:c2:c3:04:dd:84:a0:8d:3b:
db:e2:f2:2f:be:3e:f2:d2:70:7d:b5:8e:70:c2:86:5c:1a:34:
34:8f:52:88:2e:7a:d4:95:6d:44:33:9a:97:a1:95:e2:63:52:
21:42:90:77:04:92:1c:92:99:58:41:9e:34:ab:e9:75:8b:24:
f3:71:8c:31:55:d7:54:17:42:af:6b:fe:ba:47:4e:dd:3e:33:
87:e5:a5:dc:76:4e:ae:ed:c7:82:d9:c0:af:a0:b7:39:a3:6c:
75:a7:21:b1:eb:ad:12:bd:d5:e5:76:29:1a:0a:95:32:61:a0:
e2:bc:4e:40:ce:1e:1c:b9:df:a4:a5:f4:b6:f4:03:4e:33:11:
2b:a3:21:ba:c0:81:04:41:9a:d6:3b:ff:53:93:1f:61:35:50:
3c:2f:09:29:6b:d0:f9:e7:3f:a6:58:e4:85:f8:2c:ec:18:dc:
7c:2b:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:14:28 2026 by rpki-client