Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: wSjhAl/5sBb0o1N3hRKji2n3YlodWtjOr5MCGsiDSfs=
Subject key identifier: FD:26:28:DF:B5:AD:F2:5A:BE:10:64:8D:24:85:30:43:FE:98:4E:D2
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019D29617B31926197C5B32ABDC203F108EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0CC4
Signing time: Thu 26 Mar 2026 09:02:27 +0000
Manifest this update: Thu 26 Mar 2026 09:02:27 +0000
Manifest next update: Fri 27 Mar 2026 09:02:27 +0000
Files and hashes: 1: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (hash: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=)
2: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: O+BS8wZgMQUnazBlYABRhhbOqIG5K9JIb/QcY1Xeb/I=)
3: zvHw3KmhzvEgU4W6InBqUBX0yjg.roa (hash: CGIpxT3J1vn2/tgM/8XQPPrlvlWSOI9UHhs/JfCuu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7b:31:92:61:97:c5:b3:2a:bd:c2:03:f1:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Mar 26 09:02:27 2026 GMT
Not After : Mar 27 09:02:27 2026 GMT
Subject: CN=fd2628dfb5adf25abe10648d24853043fe984ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:e7:68:1a:39:00:b5:ee:2d:b0:dc:e6:19:
fe:db:4e:b1:59:9f:11:72:9c:d5:82:b2:11:9d:d1:
bf:18:53:93:7a:98:6a:38:88:e7:fd:d9:10:58:10:
0f:bc:76:95:22:d8:4c:f2:1c:c8:5a:37:16:41:b0:
30:a3:0d:88:7c:06:3d:42:e0:e9:55:4f:ab:8a:26:
aa:72:23:96:8c:16:e3:8b:47:06:9e:4f:b0:74:5c:
d7:e5:e8:63:a6:d0:a9:5a:37:9d:61:53:2a:79:f2:
ca:2c:17:45:b9:44:fc:e5:5d:e0:b1:bf:c8:a2:1b:
a1:b8:24:81:36:74:c9:19:a4:e7:64:74:68:e3:39:
73:ad:3b:2d:20:21:ff:04:1d:80:c1:90:8d:e4:22:
f7:46:cf:51:e4:1d:21:37:b3:cc:b0:23:f6:36:09:
6c:18:7a:bd:19:52:2b:e9:cf:97:ae:8c:82:7e:e0:
81:18:7f:f8:bb:67:1b:0a:10:8b:65:47:b2:97:7c:
ae:df:ad:6f:29:a6:3e:5e:b1:d7:5c:15:94:20:f2:
fc:09:a6:0b:e3:00:92:b7:f4:5a:94:63:06:58:6e:
7c:10:29:82:32:8b:77:b5:e5:7e:66:bd:49:61:73:
e6:d1:1d:c5:9d:5e:9e:7a:1c:61:61:fc:9b:c7:6b:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:28:DF:B5:AD:F2:5A:BE:10:64:8D:24:85:30:43:FE:98:4E:D2
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:33:49:02:0f:86:81:4f:3f:33:b5:36:e0:8c:ef:f7:98:
af:63:f4:96:fa:f1:55:78:e2:03:b8:1b:5e:7b:ed:d6:13:fc:
b9:e7:ff:d5:53:e9:b4:af:4b:e7:16:55:74:88:3d:db:22:df:
ba:0e:13:f5:49:c2:8c:b9:bc:62:8e:62:37:ee:4f:0f:4c:7b:
0e:ee:2a:68:1e:a4:d7:86:ef:1b:7a:cf:48:58:da:1e:07:78:
d8:e1:b1:2d:2a:f4:30:4a:aa:80:73:a0:56:fa:14:56:7e:b8:
47:5d:93:90:9b:98:3b:d2:80:2f:9f:be:a9:f7:63:88:64:fa:
41:8d:52:d7:00:92:f2:56:a0:6a:5a:fc:0e:c5:8e:9d:a0:bd:
87:98:57:f8:3e:52:3d:a9:cc:06:dd:9b:27:a7:c2:dc:69:55:
5a:88:1e:56:3d:60:33:6e:40:8f:6f:75:9d:10:cf:b9:50:75:
07:37:8a:12:54:37:75:4e:d4:46:d0:54:b6:29:a9:04:b9:42:
57:28:90:91:8e:36:b1:6c:72:f1:ba:77:45:aa:b2:59:59:c8:
10:9e:62:c9:0d:a1:05:79:c2:94:16:a5:1b:c5:40:ca:92:33:
f6:fb:3e:90:90:7c:e9:ed:5f:7e:07:32:90:9f:65:12:56:35:
fc:48:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:07 2026 by rpki-client