Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: O1FG45VAAqjSAbPFbaoOQ6OBiQ3hMIH4h8LYuT9KjhU=
Subject key identifier: 90:33:DB:CA:5C:38:15:71:96:BE:AE:40:D7:D7:9F:B4:73:AE:84:23
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019E1E35F83BB3F9B988B220E90595AC50C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 033A
Signing time: Tue 12 May 2026 22:01:53 +0000
Manifest this update: Tue 12 May 2026 22:01:53 +0000
Manifest next update: Wed 13 May 2026 22:01:53 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: IRGVEF3goXTpwp547jQIte3F+wMxh8PyJEMUZY1ejnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f8:3b:b3:f9:b9:88:b2:20:e9:05:95:ac:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: May 12 22:01:53 2026 GMT
Not After : May 13 22:01:53 2026 GMT
Subject: CN=9033dbca5c38157196beae40d7d79fb473ae8423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:10:0f:0b:b2:26:69:92:66:0f:5b:b3:2e:
18:fe:cb:75:04:72:7d:00:ae:63:1a:91:b6:db:ac:
4b:0d:c8:ff:c0:0f:3d:4b:27:35:02:50:25:a1:4d:
22:83:83:12:23:f3:15:a0:32:84:fe:49:f6:52:8b:
6f:db:d6:b4:ab:a7:48:51:23:6a:1b:7d:1a:b5:fe:
c5:18:98:94:b9:2c:76:d7:fc:cc:9e:0d:f8:1e:d6:
bf:3c:f1:a8:3b:20:e4:09:13:ea:a7:1a:52:14:fd:
68:af:3d:41:bc:28:aa:8e:33:04:ec:52:a6:8b:cf:
c6:a7:08:cb:db:05:32:f6:ea:86:e5:26:df:51:e9:
5e:b9:43:69:f3:bb:c4:dc:f6:74:15:79:7f:15:95:
e2:b1:e5:34:36:8e:91:95:db:74:c4:15:0d:e2:2b:
db:b4:14:20:69:2e:55:8c:bc:28:9d:85:b4:da:d4:
42:55:c5:03:09:5b:70:04:9e:30:82:c1:30:fe:7c:
ec:78:17:4f:4c:e0:a0:d6:c1:9c:14:b7:03:4e:a5:
34:d7:6e:37:f8:e4:2a:ac:04:5c:57:c8:2e:0e:c6:
4a:db:46:92:07:a0:77:5c:9b:a8:0e:fc:07:15:03:
31:f6:99:f2:8c:9e:bf:52:34:80:ec:6a:8a:91:0d:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:DB:CA:5C:38:15:71:96:BE:AE:40:D7:D7:9F:B4:73:AE:84:23
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:40:87:d7:f8:74:5c:6b:b5:65:fd:47:27:8d:ec:ce:f4:
74:ed:b5:81:d1:3d:5f:2b:4c:cc:29:a1:c6:31:a3:f2:aa:59:
c5:ba:2b:41:d5:e7:55:b6:b0:df:2a:c7:46:96:83:de:f3:c9:
1b:5d:e6:47:9c:ff:ff:f5:b2:f1:44:3f:1f:82:d9:48:f1:27:
e8:1d:1a:d3:8a:3f:22:55:3a:14:78:74:e0:31:f7:2a:fa:94:
84:9a:86:42:95:64:4c:6e:28:c0:ff:4a:9b:00:61:53:da:11:
72:f6:b5:48:c3:eb:b0:ac:e9:5c:06:8d:1e:16:66:c8:fc:cf:
a5:7c:37:32:ae:8d:15:0c:90:ee:0f:93:85:c2:8c:13:0b:17:
f9:70:dd:74:c8:47:10:36:c4:c0:0d:b8:57:58:6e:e8:c6:b7:
ac:21:ae:e4:0d:61:94:1f:e4:2b:57:85:68:9e:e5:4b:62:70:
08:94:af:bd:ab:d3:4b:be:4e:27:7e:cb:72:44:39:03:40:2e:
97:11:fe:50:3f:d6:3b:37:0e:bf:fb:70:3c:ed:9e:4c:96:02:
a7:f5:95:f2:5b:7d:a6:a8:89:6c:61:a9:a2:5b:0d:dc:7a:df:
e3:a3:73:c4:91:78:af:ec:c8:ec:21:3a:19:75:89:86:c4:47:
ec:9c:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:25 2026 by rpki-client