Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: 2op+/PGZL5c2snPqJs6hvv7YENVEQOP+zvj5GE4GMLg=
Subject key identifier: 47:2D:62:00:00:FF:3F:6A:BB:FA:AA:84:0E:89:6D:AF:7B:20:93:2A
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019F93FF8438EDE03DBADF7CAFD14D69F397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 12C9
Signing time: Fri 24 Jul 2026 12:00:23 +0000
Manifest this update: Fri 24 Jul 2026 12:00:23 +0000
Manifest next update: Sat 25 Jul 2026 12:00:23 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: peBxFzVt7xlPAM37L9cmcoMRFcQchCWLreQtnWNimEY=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:84:38:ed:e0:3d:ba:df:7c:af:d1:4d:69:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jul 24 12:00:23 2026 GMT
Not After : Jul 25 12:00:23 2026 GMT
Subject: CN=472d620000ff3f6abbfaaa840e896daf7b20932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:a4:cb:86:7b:ef:a8:70:77:73:c7:92:9d:
68:b5:75:78:2d:06:cb:74:31:3d:31:bb:5f:99:07:
2d:15:32:d5:12:ae:27:15:23:2f:74:d5:c1:15:a5:
52:02:d2:bf:33:09:76:f9:6f:f5:7f:a4:13:95:d7:
50:41:6a:81:f8:48:7d:f8:db:a7:43:d0:05:e3:dc:
4e:fa:fc:84:2f:7c:88:54:a4:a4:b9:f0:07:08:16:
59:ae:ee:46:26:53:e7:68:26:02:0a:89:f7:14:09:
e8:71:47:36:f1:ab:2b:5a:8e:95:91:fd:2b:a3:78:
eb:68:52:2d:6d:06:ad:1f:7a:87:22:c5:3d:f2:a0:
fd:07:b9:a8:69:f0:73:37:f7:c0:62:8c:6e:cc:9c:
ed:b1:79:f1:0d:31:70:eb:93:da:e5:41:a9:3c:eb:
ca:26:9b:d4:c8:0d:2d:68:d7:2d:64:f0:c6:db:11:
61:91:e0:95:2f:b0:82:7e:ec:6b:cd:dd:73:b5:61:
4c:37:11:a6:73:e8:1a:71:44:96:6f:a1:ae:03:d8:
55:4c:66:b4:f7:08:53:f9:0d:7b:30:25:35:b4:6f:
e7:30:5a:4d:60:d3:de:c9:6a:82:30:08:a5:6f:45:
87:cf:63:0b:b9:48:24:48:65:48:8b:5b:ac:6e:29:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:62:00:00:FF:3F:6A:BB:FA:AA:84:0E:89:6D:AF:7B:20:93:2A
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:ea:8d:c1:e4:c3:de:97:f8:8d:fe:53:50:a3:5c:ad:f4:
30:a2:14:57:1a:2a:50:ad:17:0a:2c:7a:5b:1d:42:f7:69:15:
37:32:26:6d:43:3b:f5:62:22:71:f6:b6:d0:bd:b6:2c:b5:8d:
03:e1:d0:1c:ea:c7:de:74:f8:2b:b0:eb:44:44:da:be:ef:0c:
d7:b2:a4:88:d2:e6:e9:e5:d7:a0:b3:95:5a:6a:c7:bd:0a:ce:
63:62:32:83:91:57:fa:83:99:4f:4c:52:a5:f2:9c:c0:49:fa:
d1:aa:4f:be:2c:92:b0:54:2e:0a:e1:df:45:5d:11:3e:bd:5d:
c8:74:5a:c5:ad:a8:e7:78:e8:05:e0:ee:2c:5f:ba:88:1d:75:
83:a3:1a:f3:24:98:2e:e3:1f:b5:36:4c:22:73:c8:9a:63:12:
91:bf:c6:9e:7a:38:b9:9e:ed:87:92:81:f5:9a:d5:bb:68:d2:
cf:a8:2f:61:d8:f1:68:e5:5c:06:de:74:65:8f:9c:a1:b1:4b:
e4:c1:c5:4e:4f:d7:6b:ae:46:2f:5c:8f:5c:e3:eb:01:21:ca:
1e:a2:94:8d:aa:4b:4d:29:0a:8e:f9:e9:b9:74:61:32:b4:a5:
65:01:40:ce:5c:71:18:17:ab:a2:dd:fc:ff:bb:6d:66:1e:fc:
73:ca:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:21 2026 by rpki-client