Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: g3EZRjIuSC0FxQNUcvWNn6RcK35v2EJrPK3kEh6Pgz4=
Subject key identifier: 37:13:49:6C:A4:99:85:F3:85:61:BB:11:80:6A:E3:E0:B1:82:53:59
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019D2628B7C54B5E04F80EB7B743D5F643CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1187
Signing time: Wed 25 Mar 2026 18:01:35 +0000
Manifest this update: Wed 25 Mar 2026 18:01:35 +0000
Manifest next update: Thu 26 Mar 2026 18:01:35 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 4vXFWSxOy2YGxm6GjYNs9TxuFw+IgZ04KVd6PPiIiX4=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:b7:c5:4b:5e:04:f8:0e:b7:b7:43:d5:f6:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Mar 25 18:01:35 2026 GMT
Not After : Mar 26 18:01:35 2026 GMT
Subject: CN=3713496ca49985f38561bb11806ae3e0b1825359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:ac:fd:95:0d:b1:ce:79:a3:8d:62:b2:bb:
ad:28:7f:75:0d:64:b2:b7:6a:84:25:79:85:8d:51:
d9:a4:63:63:71:1b:7d:db:e7:05:1b:32:c8:3f:55:
55:9e:74:a1:e1:ef:0e:cb:3a:e9:1c:e2:27:2c:84:
ae:8d:c3:4c:2d:88:e2:6d:dd:4d:f4:46:49:9c:c1:
fa:c2:22:7b:1b:6f:b8:4b:79:47:80:5b:ee:07:b7:
67:9a:32:3c:a2:b6:27:72:bb:e6:6a:af:c3:f4:16:
84:f1:ea:80:25:c8:af:8b:9f:ca:a8:7a:0e:8e:d3:
68:3b:0b:73:64:b5:b3:da:dd:9e:13:32:16:28:5d:
ca:2a:73:6c:d1:b9:e5:a5:6d:51:71:cc:ae:60:8b:
36:7d:82:d8:d0:39:f5:2c:e1:b0:2b:30:bd:a2:96:
99:57:14:8b:62:3b:03:43:cc:55:38:51:f0:20:91:
c1:f3:77:36:d0:c2:34:87:47:92:b7:94:74:6b:f5:
c0:ac:0c:39:e4:39:1b:fe:d1:e7:ee:8e:d3:09:21:
5d:40:15:34:89:8a:19:f2:a6:fa:20:63:25:07:ca:
16:59:69:1d:db:5c:34:05:a3:58:51:d6:f9:d9:77:
6a:63:a0:dc:83:9c:ad:41:c3:25:73:e3:33:0d:72:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:13:49:6C:A4:99:85:F3:85:61:BB:11:80:6A:E3:E0:B1:82:53:59
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:12:0c:bc:d6:98:0e:3a:c1:52:21:b1:31:a0:04:b0:ad:6a:
43:02:1e:ac:e8:c6:2a:68:14:1f:06:b5:98:c0:38:18:5d:0e:
05:1e:0b:7b:fd:18:0f:1a:47:d9:10:fc:73:b1:47:25:92:19:
40:b1:a6:db:93:34:d1:82:a0:8e:f2:df:52:77:bc:2c:f4:39:
08:d5:74:35:a8:d2:b4:8e:61:f5:fc:f2:45:f6:75:c6:f9:ff:
a0:ec:78:a7:12:62:56:85:1e:ff:f7:71:39:92:97:e2:8f:9c:
df:94:95:03:f8:fd:36:aa:4b:e2:74:96:75:df:1c:50:6f:ef:
f2:c3:59:86:56:40:5d:d0:76:e3:01:2d:23:60:25:a3:a7:22:
f5:bc:5a:01:93:82:5e:00:7d:0e:8c:a9:ba:31:38:a6:b9:b7:
4a:97:95:5e:79:84:64:6e:0d:5b:80:7e:f9:af:01:51:bc:12:
e1:44:62:13:18:64:2b:ff:47:d3:d3:50:dc:d7:dc:18:f1:7e:
11:9c:dd:33:b8:9f:34:be:e1:cd:16:b6:eb:64:39:24:87:bc:
d3:4f:6c:eb:5d:0e:24:dd:7f:e5:fc:bc:b3:f2:7c:c1:2f:67:
8c:96:64:71:24:63:1f:31:3c:b5:56:dc:fd:0a:ab:bc:4d:3a:
23:7f:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:17 2026 by rpki-client