Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: Zh0l69NQwVo29sEpIFZP65qkIadMIYHOwJ45/PDV54M=
Subject key identifier: A8:22:D1:0B:3A:90:86:C8:AB:69:50:5B:56:3C:57:6E:3A:D9:D5:7C
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 019D2695CCED159D21F9BB470F38CA17FB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 05F5
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: Iz+tsg1VaAk9T+Rj2vCPteayxJCbBIr5En75FjN0ovI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cc:ed:15:9d:21:f9:bb:47:0f:38:ca:17:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=a822d10b3a9086c8ab69505b563c576e3ad9d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:f8:b8:10:83:85:4f:74:19:94:fc:6f:8a:
8e:d6:01:3e:ae:f4:53:0d:07:1b:73:42:e9:49:df:
75:bb:19:94:a5:bc:b2:11:bb:b1:bc:65:e2:ca:f3:
a0:8e:f3:f2:7a:9b:ea:fd:68:1a:09:2b:07:fb:d9:
e5:85:2f:f9:eb:6e:50:f5:af:c6:54:e2:3f:7b:5c:
42:1d:bc:c3:46:98:ac:15:d4:54:1b:2c:53:19:65:
0b:77:74:a3:cc:71:9f:d6:46:a4:bb:bc:af:8b:c9:
ef:2e:92:a1:b3:05:23:8c:46:c2:49:e3:1c:27:b7:
0d:64:64:a5:36:2f:dd:ff:df:dc:0f:a5:51:e3:df:
b3:ec:ac:af:7f:47:12:a9:81:7a:99:41:ec:d2:1b:
4d:ad:4f:33:d2:3c:06:33:01:32:99:04:bc:ec:7a:
ae:8f:9b:03:05:5b:95:02:8b:97:cb:a8:63:3b:24:
d5:35:08:20:c5:16:dc:5e:8b:a6:d8:d7:90:07:1e:
5a:f8:10:5c:b8:ec:13:36:76:5e:ba:22:4e:3a:5a:
db:a1:49:49:04:72:a2:4a:86:c4:37:43:a7:78:ed:
63:58:9e:3f:3c:19:89:cc:76:e4:15:9d:2d:d7:16:
41:cd:4a:0a:49:be:38:1c:99:fb:90:8c:cf:13:be:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:D1:0B:3A:90:86:C8:AB:69:50:5B:56:3C:57:6E:3A:D9:D5:7C
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:6e:58:84:d6:e1:1a:15:af:0e:9f:f1:f3:22:bb:b6:2c:
ed:9d:1d:b0:90:dc:d0:cb:a5:d7:fd:30:87:e9:54:07:d1:86:
ed:72:78:d9:2a:ab:4f:f3:47:fa:93:26:f9:28:26:63:f2:34:
d7:77:1e:ad:56:83:3c:e1:92:77:d8:dd:f5:8a:e3:71:56:df:
20:40:85:5f:5a:cf:bb:a5:6c:d9:7f:fa:3b:06:d9:0e:47:c8:
13:7e:32:69:85:c2:cd:9d:46:90:cc:fb:d4:52:39:41:8a:b2:
c6:0b:86:2d:50:6b:3a:d1:e8:6b:8d:ab:3a:72:d2:2a:61:b1:
24:07:27:85:24:b0:7a:a1:af:d8:6f:d2:78:77:1d:0c:a1:f1:
a2:ce:82:e9:cd:54:04:af:81:6e:ec:34:d6:3b:2d:a0:da:ab:
13:4f:4b:75:58:87:52:5b:d5:52:4c:54:c3:ae:ec:20:c3:2d:
c3:48:4a:f4:43:e1:f0:37:b0:78:15:7f:dd:ef:a6:34:ac:75:
43:0a:6c:8b:7f:28:86:b1:ef:dc:95:3d:16:77:10:55:88:45:
9b:7e:e1:31:78:41:bb:50:ef:d1:a8:90:62:77:e1:c3:24:b5:
ee:b0:76:dd:3c:df:d3:98:03:53:a7:38:19:5a:b8:f4:1b:79:
ad:45:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client