Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: MYhimLIva/H73NXOBBV78ZwYIKQWcX/xMIVpaEgt/JM=
Subject key identifier: FB:EE:4F:A3:B3:ED:07:B5:3B:DC:97:A7:2F:7E:7B:33:52:3A:21:B6
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019CACB552A4C6C887422AFC07EC665246A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0F6F
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: GbkvPI-kmfONtAuGoBOu2GW8-74.roa (hash: 2EzOh6hlkAJ6PDMBXoH3PL6bxWAgOzm9d8AoyksEql4=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: SmRI646LGdIWSr9riZk8lJyYCvWDdrbj+ydQjSb7+fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:52:a4:c6:c8:87:42:2a:fc:07:ec:66:52:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=fbee4fa3b3ed07b53bdc97a72f7e7b33523a21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:2c:4a:c8:66:c0:09:18:96:ac:b3:10:d1:
fb:c8:bc:b9:00:5f:73:91:4d:4a:a0:f5:0b:db:00:
3a:ba:f2:30:ae:0a:ea:ef:be:7b:db:2e:e6:b4:9c:
85:11:1a:d3:7c:6d:26:55:e7:92:dc:22:a8:70:82:
18:06:87:ef:2f:fd:75:b6:3b:65:0a:63:7f:45:a1:
a4:e4:4e:bf:ce:3c:6f:13:32:a5:b3:25:05:b7:7d:
88:37:05:4d:78:51:ed:c1:ef:b2:29:27:4b:58:f9:
53:3c:d2:cc:c2:ef:bf:5e:be:c0:55:ee:0a:0c:68:
9f:82:ed:4b:67:c3:bd:82:07:ac:35:86:e1:c2:89:
2c:bc:b6:87:a1:93:a6:3e:2a:6c:fd:f7:53:03:2f:
54:d5:7f:38:36:7f:b7:df:62:08:5a:6a:7e:2d:0a:
ce:9d:02:2d:a3:82:05:43:bc:59:f1:94:a3:8d:5b:
e7:45:47:73:a3:1e:f6:78:32:16:bf:65:11:24:0d:
32:dd:96:bc:89:08:c3:b9:a5:40:96:32:b9:dc:3e:
7a:1e:80:56:55:cf:9c:ec:77:c3:eb:99:3c:29:2a:
2c:8b:e9:85:42:1e:24:91:4e:11:ba:bd:69:83:9b:
3c:d9:7c:e5:9c:15:8f:ee:05:98:02:62:25:17:e3:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:4F:A3:B3:ED:07:B5:3B:DC:97:A7:2F:7E:7B:33:52:3A:21:B6
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:2e:29:55:0f:54:89:c0:2f:41:58:43:68:97:ef:35:a1:
68:11:40:c7:22:ce:bc:a6:b7:f0:3c:4a:e6:83:73:03:84:c8:
af:4d:e2:fb:29:30:2e:b0:c9:49:42:c1:06:39:77:ec:3c:e1:
71:1b:2d:0e:b8:88:dc:50:ec:29:de:e5:4c:58:58:41:71:ab:
0c:cd:bc:1f:dd:7b:2d:c8:88:6b:63:ec:e2:91:41:3d:fb:11:
05:5d:6c:c5:75:a4:32:9a:49:ff:a0:ed:2a:33:c5:27:7e:2e:
4c:8d:73:f8:5c:c8:b9:5f:e3:45:6f:95:d1:d0:95:c1:72:52:
9f:ca:48:30:4a:f6:eb:25:d8:99:d4:12:f3:dd:eb:b4:8f:69:
09:95:68:4c:e9:36:25:5f:86:71:33:ab:ea:1b:62:61:71:c2:
c6:5d:4e:fa:03:fb:d8:d5:3f:25:56:bf:19:2e:22:cc:7f:44:
17:d7:18:da:cd:72:95:7e:21:ec:86:80:b7:d8:e1:44:7b:ae:
38:e3:0d:0e:66:bc:6f:9e:b2:b0:6e:0a:5b:60:7b:eb:b7:d8:
7f:db:4b:21:d9:e5:6d:9b:b5:52:28:ba:8a:86:54:b8:95:c7:
97:29:83:44:9a:3b:96:9c:51:e4:2a:5d:d6:89:1f:f9:bb:b0:
b1:75:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:54 2026 by rpki-client