Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: hWXZ0bfst8w6Cicmi9vAbIoCvzygMFVlkjZcVWDGa6w=
Subject key identifier: 83:11:C9:BA:BF:21:BB:CF:5F:56:12:75:B0:68:AB:21:66:22:FF:3A
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019FAABEBFCC34F0E1E011E037083B4C5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 03FC
Signing time: Tue 28 Jul 2026 22:00:55 +0000
Manifest this update: Tue 28 Jul 2026 22:00:55 +0000
Manifest next update: Wed 29 Jul 2026 22:00:55 +0000
Files and hashes: 1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: KILvLCaCZKs34E02tijqt5Hg7D4Rf/W54WOrxdQU70k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:bf:cc:34:f0:e1:e0:11:e0:37:08:3b:4c:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Jul 28 22:00:55 2026 GMT
Not After : Jul 29 22:00:55 2026 GMT
Subject: CN=8311c9babf21bbcf5f561275b068ab216622ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:de:b8:7b:5c:b1:9e:b6:37:51:2f:b8:a5:
13:11:e1:24:70:b7:b2:6d:a6:97:01:df:ef:13:87:
76:53:77:ab:3c:c9:a0:7a:83:2e:dd:19:af:70:21:
c3:e2:f3:62:c7:26:93:9b:0a:af:06:e7:39:6f:08:
19:d2:d0:65:18:f6:f3:2d:02:cf:63:18:5c:18:41:
45:75:e4:6c:30:20:1c:26:da:75:65:db:5a:da:62:
70:78:e2:73:f4:8a:8d:ed:45:ba:4a:36:bc:ef:f4:
1c:ee:22:61:1d:74:7f:c5:ab:76:26:f4:17:36:c9:
81:d0:34:de:4b:27:f5:61:d2:37:b7:42:84:94:bd:
1b:a4:41:56:a0:f4:1a:a3:c8:98:30:4a:a2:94:8e:
b1:3b:8d:44:d0:c2:79:4d:01:98:67:74:5f:b8:7d:
89:3c:80:ed:c0:61:df:51:bb:9e:33:f2:ed:ba:f3:
2d:d9:84:9a:c8:25:f6:f8:3f:f9:68:ba:db:1b:4c:
47:56:c4:ea:b9:8f:89:54:9f:f3:60:b6:f0:76:54:
cd:9b:7a:5e:c6:7b:0d:0d:0b:d1:57:c1:de:6f:f6:
bb:88:48:9a:08:45:d8:9e:3f:d2:0a:92:f8:39:3d:
0a:34:cc:cd:e1:49:be:f5:5e:07:cc:ae:4a:ca:d5:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:C9:BA:BF:21:BB:CF:5F:56:12:75:B0:68:AB:21:66:22:FF:3A
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:eb:85:28:bd:c9:68:7b:a4:ff:ed:ec:33:59:8c:70:af:
6e:d2:35:ee:42:21:d8:ac:9c:12:36:e9:f8:82:6b:7e:dc:2a:
6b:1e:be:a3:95:8e:79:eb:37:14:df:e7:58:b6:fc:ea:a7:0b:
4f:78:22:f5:a8:c1:d3:ac:14:d5:f8:34:19:20:bb:af:c2:4f:
e2:af:8d:81:12:21:8a:ab:20:8b:cd:d7:65:0c:e0:0f:19:d1:
b9:02:f5:86:d4:b8:32:ab:e0:2a:f2:a4:56:5d:fa:05:88:1b:
c0:f3:42:47:09:14:47:69:21:54:bb:d2:57:56:25:bb:df:f6:
ab:c6:0f:d2:2b:03:16:7d:54:74:f3:5b:c6:4e:f6:81:6d:f8:
f7:4b:c6:c2:1d:07:a1:b6:79:98:61:49:e0:4f:c5:bb:d7:aa:
65:79:53:31:1d:b2:03:72:55:9e:5c:c7:8e:0f:01:7b:73:a4:
da:9f:57:cf:c8:45:1e:5c:70:fb:f2:f4:ba:75:a5:5d:bb:5b:
e1:2f:59:48:06:c1:72:c2:88:1a:fb:0a:57:bc:cb:94:50:85:
8e:01:39:64:cd:17:e1:06:13:91:0a:0c:af:ce:60:31:e6:86:
ef:85:54:f3:56:d9:b4:07:9a:de:5e:a1:50:47:6c:2f:be:78:
5d:53:c3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvr/MNPDh4BHgNwg7TFMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YzZlMTUyZWMwMGQyYjBlMzA3ZDYxOWU3N2YzYzFkMTQy
NmVlZjAwHhcNMjYwNzI4MjIwMDU1WhcNMjYwNzI5MjIwMDU1WjAzMTEwLwYDVQQD
Eyg4MzExYzliYWJmMjFiYmNmNWY1NjEyNzViMDY4YWIyMTY2MjJmZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dzeuHtcsZ62N1EvuKUTEeEkcLey
baaXAd/vE4d2U3erPMmgeoMu3RmvcCHD4vNixyaTmwqvBuc5bwgZ0tBlGPbzLQLP
YxhcGEFFdeRsMCAcJtp1Zdta2mJweOJz9IqN7UW6Sja87/Qc7iJhHXR/xat2JvQX
NsmB0DTeSyf1YdI3t0KElL0bpEFWoPQao8iYMEqilI6xO41E0MJ5TQGYZ3RfuH2J
PIDtwGHfUbueM/LtuvMt2YSayCX2+D/5aLrbG0xHVsTquY+JVJ/zYLbwdlTNm3pe
xnsNDQvRV8Heb/a7iEiaCEXYnj/SCpL4OT0KNMzN4Um+9V4HzK5KytVsMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMRybq/IbvPX1YSdbBoqyFmIv86MB8GA1UdIwQY
MBaAFBbG4VLsANKw4wfWGed/PB0UJu7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTct
NDlmNGUzZWRkODc1LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTctNDlmNGUzZWRkODc1
LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4zrhSi9
yWh7pP/t7DNZjHCvbtI17kIh2KycEjbp+IJrftwqax6+o5WOees3FN/nWLb86qcL
T3gi9ajB06wU1fg0GSC7r8JP4q+NgRIhiqsgi83XZQzgDxnRuQL1htS4MqvgKvKk
Vl36BYgbwPNCRwkUR2khVLvSV1Ylu9/2q8YP0isDFn1UdPNbxk72gW3490vGwh0H
obZ5mGFJ4E/Fu9eqZXlTMR2yA3JVnlzHjg8Be3Ok2p9Xz8hFHlxw+/L0unWlXbtb
4S9ZSAbBcsKIGvsKV7zLlFCFjgE5ZM0X4QYTkQoMr85gMeaG74VU81bZtAea3l6h
UEdsL754XVPDFw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:10 2026 by rpki-client