Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: j03PJrQwzpoq4LYJ+3F1fK6u8jfT+D5KzZJkPgwNfvU=
Subject key identifier: 11:2F:E0:F4:7B:E2:2E:CA:5D:3A:D1:DF:A8:E9:27:71:F3:70:7B:45
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019E1F47ACB7AC0B3AF005989615C9D9E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 1208
Signing time: Wed 13 May 2026 03:00:51 +0000
Manifest this update: Wed 13 May 2026 03:00:51 +0000
Manifest next update: Thu 14 May 2026 03:00:51 +0000
Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=)
2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: FW2DVuf88g4ssg+7vvqn5hDdZBLBbraL//dR4RaroJw=)
3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ac:b7:ac:0b:3a:f0:05:98:96:15:c9:d9:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: May 13 03:00:51 2026 GMT
Not After : May 14 03:00:51 2026 GMT
Subject: CN=112fe0f47be22eca5d3ad1dfa8e92771f3707b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:f1:52:ea:fe:18:6e:29:dd:57:cf:d1:9d:
5c:d4:f3:8d:9c:4d:ec:ea:cc:a0:08:38:43:96:fc:
d4:63:60:cd:1a:4c:6b:27:74:6b:93:fd:36:0d:26:
dd:07:20:8a:08:bf:27:2b:84:83:a2:6c:56:eb:7e:
13:b9:bb:5b:c7:9e:16:21:00:fe:e0:1b:db:03:aa:
7b:8a:d0:d7:a0:71:0e:6d:55:74:9f:86:82:e2:a7:
88:28:d5:60:75:63:58:5e:4b:4a:a1:48:8d:ef:df:
01:c3:22:77:c7:57:f0:ee:f5:80:ae:37:29:59:77:
54:ed:ed:1f:a9:89:6c:93:d2:b1:f2:83:fa:17:30:
1b:54:af:06:89:6b:27:de:27:93:51:26:aa:84:0c:
c5:bf:87:3b:11:d8:a7:8b:db:a4:84:a0:56:90:ba:
a4:50:cf:54:7d:dd:ab:bb:a1:98:10:e2:25:e4:4a:
5e:22:c9:dd:a5:36:b5:9f:98:60:8b:f5:98:33:f2:
b9:0b:1d:c6:e2:fc:67:b3:d4:d3:20:12:b1:4b:f8:
71:67:1e:aa:e6:f0:48:53:44:43:e6:e5:7b:01:f2:
73:a0:e7:c6:55:ee:29:06:96:c9:1d:28:53:1d:53:
58:89:9f:d5:8f:a4:73:b3:ce:79:3b:ef:04:78:90:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:E0:F4:7B:E2:2E:CA:5D:3A:D1:DF:A8:E9:27:71:F3:70:7B:45
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:98:03:d8:17:c7:88:8d:99:cf:fe:0d:de:5d:24:aa:82:10:
d4:c5:7f:b4:29:ae:c4:e3:43:bb:88:27:7b:a7:89:8b:bd:e9:
3e:3a:95:37:bc:a9:fb:c1:68:1f:41:05:9d:8b:6a:0c:fc:62:
7f:25:0e:37:85:60:67:d6:7d:2e:ca:e5:12:a6:f3:c2:95:cc:
40:eb:7e:2a:55:91:0e:a9:6e:f1:16:6c:7d:95:b9:43:a7:2f:
55:4d:bc:9a:aa:1e:b0:85:63:1d:e4:8e:5a:02:9c:2b:7d:c1:
5d:28:80:88:d8:ad:a4:45:b4:15:ec:74:f3:39:18:96:a4:fe:
35:6f:38:0a:cf:5a:b9:da:1f:83:3a:bc:cd:68:42:ce:71:44:
7c:4d:da:47:b5:66:ff:0d:91:1f:95:0c:dd:0c:b9:9b:27:55:
e8:8b:98:6b:ee:e1:56:3c:e3:d7:17:80:7e:e0:5d:37:eb:40:
ce:33:ac:9b:52:db:aa:c0:5b:53:c1:67:71:aa:82:35:11:06:
fb:b8:5d:25:80:e2:22:c0:ed:ea:93:e1:e3:5d:04:6c:2c:14:
64:86:dc:9f:06:f8:f7:70:3a:97:15:02:0a:7b:90:59:17:38:
28:b9:49:8a:14:92:f9:3d:a7:a3:7f:63:8e:c3:6a:3c:38:2a:
a5:53:ff:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR6y3rAs68AWYlhXJ2eShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjYwNTEzMDMwMDUxWhcNMjYwNTE0MDMwMDUxWjAzMTEwLwYDVQQD
EygxMTJmZTBmNDdiZTIyZWNhNWQzYWQxZGZhOGU5Mjc3MWYzNzA3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6fxUur+GG4p3VfP0Z1c1PONnE3s
6sygCDhDlvzUY2DNGkxrJ3Rrk/02DSbdByCKCL8nK4SDomxW634Tubtbx54WIQD+
4BvbA6p7itDXoHEObVV0n4aC4qeIKNVgdWNYXktKoUiN798BwyJ3x1fw7vWArjcp
WXdU7e0fqYlsk9Kx8oP6FzAbVK8GiWsn3ieTUSaqhAzFv4c7Edini9ukhKBWkLqk
UM9Ufd2ru6GYEOIl5EpeIsndpTa1n5hgi/WYM/K5Cx3G4vxns9TTIBKxS/hxZx6q
5vBIU0RD5uV7AfJzoOfGVe4pBpbJHShTHVNYiZ/Vj6Rzs855O+8EeJBIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEv4PR74i7KXTrR36jpJ3HzcHtFMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZgD2BfH
iI2Zz/4N3l0kqoIQ1MV/tCmuxONDu4gne6eJi73pPjqVN7yp+8FoH0EFnYtqDPxi
fyUON4VgZ9Z9LsrlEqbzwpXMQOt+KlWRDqlu8RZsfZW5Q6cvVU28mqoesIVjHeSO
WgKcK33BXSiAiNitpEW0Fex08zkYlqT+NW84Cs9audofgzq8zWhCznFEfE3aR7Vm
/w2RH5UM3Qy5mydV6IuYa+7hVjzj1xeAfuBdN+tAzjOsm1LbqsBbU8FncaqCNREG
+7hdJYDiIsDt6pPh410EbCwUZIbcnwb493A6lxUCCnuQWRc4KLlJihSS+T2no39j
jsNqPDgqpVP/0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:07:43 2026 by rpki-client