
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier: g++QPgg7kelw0NtwEC3N2SK5uaiuilA7kRfjLN1bLVI=
Subject key identifier: 2B:21:DB:FA:F1:66:A8:54:D7:A9:E7:13:BE:B7:85:F1:3C:09:6B:A3
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019CACEBE51E6824F9203984707436BB91FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number: 7E
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: TrNwDKDG6q9yrOnWK6r6lkscbb3gtCm0K16SvLeDvMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e5:1e:68:24:f9:20:39:84:70:74:36:bb:91:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=2b21dbfaf166a854d7a9e713beb785f13c096ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:e4:3a:08:d9:6b:ef:af:d4:4e:11:06:79:
d7:36:7c:4d:d0:53:cf:a7:18:0d:9f:3e:68:f7:a5:
d0:43:44:6f:54:b3:0a:ef:3a:25:f0:f9:ac:8e:58:
09:0b:a2:86:28:f1:ef:64:39:f3:3f:20:98:bd:4e:
1a:d9:de:fc:db:18:36:05:d2:f1:5a:91:20:10:ae:
af:c4:1a:c2:fb:a1:e3:9b:cf:b6:a3:22:58:e3:0d:
d2:18:f9:39:44:89:fb:84:22:dc:a5:0c:6e:f3:a2:
2b:79:5b:78:da:2e:53:8d:25:97:52:45:c1:b7:a7:
00:3b:ec:1e:62:c7:29:68:8f:ff:74:f6:1d:66:e8:
ef:43:76:af:f8:c6:f1:8c:6e:01:9a:fc:07:de:6b:
8c:75:96:3e:90:e1:fe:7d:fe:c3:d8:00:4c:dd:9d:
51:2d:ff:15:de:e2:e8:b9:a7:21:bb:b5:15:2b:31:
72:64:8d:b4:b7:0d:aa:51:d0:d6:a7:87:7f:ed:d9:
70:94:89:c7:17:e5:ac:19:ab:a4:04:29:22:72:23:
22:2e:0d:d5:8d:85:e3:40:2d:13:6d:86:37:3a:a1:
0a:91:43:10:52:b4:c3:69:75:da:f5:e9:8a:f5:03:
90:a8:f9:c0:00:fd:e7:24:72:60:c4:03:eb:da:cf:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:DB:FA:F1:66:A8:54:D7:A9:E7:13:BE:B7:85:F1:3C:09:6B:A3
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:ce:c6:1f:69:1f:bb:68:41:43:90:06:00:16:33:ea:05:
f2:bb:8b:08:3f:22:31:22:23:45:de:63:fa:3a:86:c1:f3:fa:
57:48:60:64:0b:14:b0:12:8f:ef:fa:45:5c:37:89:99:7a:8a:
49:0b:d4:f3:f6:00:75:7a:7b:6a:15:1e:8e:4f:4b:57:94:b0:
c9:cd:0c:a7:b1:82:54:94:77:1d:19:8b:50:6a:a2:64:05:a9:
63:0b:ae:fc:16:c5:5e:52:99:2e:4c:f7:8a:79:c2:42:a5:a0:
2f:b8:68:9a:cb:08:e0:40:fc:9e:78:ed:99:80:aa:cb:45:0a:
26:66:fa:c1:51:3a:41:1f:96:51:51:5a:4c:44:34:47:fe:c4:
50:9d:36:31:86:cf:a1:a8:30:e9:0f:cc:a9:d7:00:b9:74:59:
c5:62:2f:20:30:c0:a4:ee:21:c6:56:db:30:99:a9:90:61:a3:
ba:53:9a:ad:e2:b8:0e:cd:1a:59:a7:6b:18:64:d2:15:f8:0e:
e2:db:d4:7d:5c:08:30:80:cd:b6:81:ea:b8:35:9e:d7:64:4f:
c5:86:1f:2a:d2:3e:99:9e:60:78:9b:f6:91:c3:48:86:3c:3f:
8a:af:fa:16:23:8e:65:07:bb:e6:32:98:c4:34:f1:45:f9:06:
68:50:2f:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+UeaCT5IDmEcHQ2u5H7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0
MTQzNjgwHhcNMjYwMzAyMDUwMTA2WhcNMjYwMzAzMDUwMTA2WjAzMTEwLwYDVQQD
EygyYjIxZGJmYWYxNjZhODU0ZDdhOWU3MTNiZWI3ODVmMTNjMDk2YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIrkOgjZa++v1E4RBnnXNnxN0FPP
pxgNnz5o96XQQ0RvVLMK7zol8PmsjlgJC6KGKPHvZDnzPyCYvU4a2d782xg2BdLx
WpEgEK6vxBrC+6Hjm8+2oyJY4w3SGPk5RIn7hCLcpQxu86IreVt42i5TjSWXUkXB
t6cAO+weYscpaI//dPYdZujvQ3av+MbxjG4BmvwH3muMdZY+kOH+ff7D2ABM3Z1R
Lf8V3uLouachu7UVKzFyZI20tw2qUdDWp4d/7dlwlInHF+WsGaukBCkiciMiLg3V
jYXjQC0TbYY3OqEKkUMQUrTDaXXa9emK9QOQqPnAAP3nJHJgxAPr2s/9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsh2/rxZqhU16nnE763hfE8CWujMB8GA1UdIwQY
MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt
ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi
LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9DOxh9p
H7toQUOQBgAWM+oF8ruLCD8iMSIjRd5j+jqGwfP6V0hgZAsUsBKP7/pFXDeJmXqK
SQvU8/YAdXp7ahUejk9LV5Swyc0Mp7GCVJR3HRmLUGqiZAWpYwuu/BbFXlKZLkz3
innCQqWgL7homssI4ED8nnjtmYCqy0UKJmb6wVE6QR+WUVFaTEQ0R/7EUJ02MYbP
oagw6Q/MqdcAuXRZxWIvIDDApO4hxlbbMJmpkGGjulOareK4Ds0aWadrGGTSFfgO
4tvUfVwIMIDNtoHquDWe12RPxYYfKtI+mZ5geJv2kcNIhjw/iq/6FiOOZQe75jKY
xDTxRfkGaFAvCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:31 2026 by rpki-client