Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: N0SkBZf+WbW3ZNs3V4kDJQ6pZLggTm3XxArbrvXMs7Y=
Subject key identifier: 92:27:AD:35:48:A8:ED:50:6D:25:4B:01:8F:B7:8F:D5:0A:B6:CB:38
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 01A101DB1AC6CAD8F9C1648772B0FFF3E955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 04B9
Signing time: Sat 03 Oct 2026 13:01:38 +0000
Manifest this update: Sat 03 Oct 2026 13:01:38 +0000
Manifest next update: Sun 04 Oct 2026 13:01:38 +0000
Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=)
2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: G4SWdKqI4Z9FPo8p6pWmpnJ5ih2P54iTyNFITIkcSgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:db:1a:c6:ca:d8:f9:c1:64:87:72:b0:ff:f3:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Oct 3 13:01:38 2026 GMT
Not After : Oct 4 13:01:38 2026 GMT
Subject: CN=9227ad3548a8ed506d254b018fb78fd50ab6cb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:af:09:5a:72:44:1a:ed:fa:81:09:b8:8b:
15:67:3d:a6:c5:8f:11:62:57:56:19:4a:7e:98:67:
af:6a:bb:45:a4:76:f3:38:2d:28:80:44:c8:32:28:
21:6d:18:9e:c6:48:0b:85:df:76:e9:c5:5b:e1:a5:
59:10:e6:49:61:a0:99:6f:e0:c6:ee:01:34:a4:36:
b1:28:20:a7:15:e6:76:01:68:79:d6:60:db:9b:76:
c4:f9:6e:5c:77:8e:7b:d7:33:4d:ad:a7:9a:aa:9d:
ae:0e:fe:5c:d8:32:f8:96:44:3e:58:01:61:61:c4:
87:2b:65:30:be:77:16:21:6f:92:a5:47:c5:d7:07:
75:2e:47:02:68:c4:28:d2:3d:d5:4c:09:0a:a0:54:
e1:1b:74:8d:92:e6:c2:dc:e7:37:02:64:a6:76:74:
96:a0:2d:8e:e6:7d:38:4e:4e:d2:9f:9a:2d:02:27:
9a:e7:3f:58:e9:fd:3c:c7:51:58:b8:3e:b3:bc:26:
59:6f:42:ac:c5:01:5a:47:0a:0e:3f:fe:1a:f4:0e:
41:7f:1f:95:ee:57:a8:ce:a1:53:98:ec:f2:0d:0c:
f7:ba:d9:6c:a5:a2:e1:49:f0:16:de:99:37:2e:02:
ae:9b:9c:af:7e:93:c8:49:fa:12:95:c2:2a:39:cb:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:AD:35:48:A8:ED:50:6D:25:4B:01:8F:B7:8F:D5:0A:B6:CB:38
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:99:8d:09:8a:47:c8:a8:8d:5a:ab:d9:98:99:7c:6b:90:
c7:a6:b6:b3:cd:9e:58:0a:94:4f:7e:48:02:53:d4:7e:90:3a:
2e:d3:2b:53:6f:66:06:df:ae:ff:7e:de:e6:2f:4f:43:b4:f1:
6d:18:0b:15:97:df:42:82:fc:f1:88:39:fb:52:dc:e1:99:b6:
ab:ac:02:62:d1:4e:10:45:8b:97:f8:4d:c0:f6:8e:06:ab:57:
e0:a0:9f:99:aa:2a:75:19:24:38:42:2e:4d:c8:2f:ed:b8:c3:
17:bc:70:17:95:71:76:5a:d0:06:ed:45:82:ff:7a:0e:97:8f:
86:36:e2:28:34:95:bf:b1:40:d1:0c:2e:94:49:27:a9:c5:22:
a3:c1:cf:6c:1b:b5:a8:c6:1e:63:b0:f1:f6:21:1d:78:9d:4b:
d2:d3:8a:64:fb:84:5f:27:6a:d8:fa:08:5c:7c:69:cf:4c:aa:
13:3b:62:9e:cf:5d:92:35:40:02:cf:9f:72:b1:bb:90:5f:a7:
13:c2:04:fc:6f:9c:22:c9:93:3e:95:27:1a:97:33:5b:6d:f5:
f2:91:7d:d5:6a:87:f9:28:4a:cb:16:89:a1:a2:c2:9e:6d:35:
d9:ad:0f:f6:4d:7f:0a:b5:fe:28:cc:45:3e:7a:7e:fc:96:7e:
89:01:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:56 2026 by rpki-client