Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: UG3kRJebUJNU5eNX2XcJhXpB2dFMxjWf/+0GaoJsTns=
Subject key identifier: 9A:6E:10:E5:47:A0:34:31:2A:A9:86:F6:D1:9A:CD:94:98:ED:F6:53
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019D984FB1CD19F034958F99AD3325FB0277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0FE9
Signing time: Thu 16 Apr 2026 22:00:52 +0000
Manifest this update: Thu 16 Apr 2026 22:00:52 +0000
Manifest next update: Fri 17 Apr 2026 22:00:52 +0000
Files and hashes: 1: GbkvPI-kmfONtAuGoBOu2GW8-74.roa (hash: 2EzOh6hlkAJ6PDMBXoH3PL6bxWAgOzm9d8AoyksEql4=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: 51McNfe6LbB5UhNyr1XbstlCmwHtcas7lH5tULETLwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b1:cd:19:f0:34:95:8f:99:ad:33:25:fb:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Apr 16 22:00:52 2026 GMT
Not After : Apr 17 22:00:52 2026 GMT
Subject: CN=9a6e10e547a034312aa986f6d19acd9498edf653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:ff:cd:17:65:67:2e:43:cd:1f:b2:0f:7a:
61:2f:37:09:a1:df:2d:cc:6f:c4:46:71:28:03:77:
fa:60:8a:9a:e0:54:90:01:11:05:a0:5d:b7:86:1f:
d9:5e:26:11:3c:28:87:07:f4:ec:94:f9:f5:40:d1:
a8:3e:0f:bf:31:81:57:51:c6:cc:e1:7a:34:39:dc:
20:73:7f:49:e2:7c:94:43:23:da:1b:97:66:58:67:
c4:a2:4e:74:93:eb:2c:e6:f4:cb:78:50:77:ce:d0:
bb:61:2f:f4:3a:96:f3:95:71:27:e8:0c:05:24:f3:
67:e4:93:d1:b3:dc:b1:39:34:2f:71:dc:af:5c:87:
40:6b:04:d0:db:15:56:e4:c6:b6:96:ae:a8:ab:b7:
b2:2f:bf:c3:16:43:7b:1d:63:61:f2:ec:5a:dd:b7:
8c:fd:43:2d:00:e8:6a:c3:d4:c4:93:8f:f7:b6:1d:
67:21:12:58:1e:61:76:ea:c7:b6:67:f6:d4:c7:0b:
30:60:a8:48:b6:4c:e3:62:42:68:81:6f:f0:13:6c:
cc:23:d1:a1:8d:80:ea:99:5f:64:5b:27:18:6a:16:
79:b0:11:cc:d3:44:90:7c:7b:83:9b:fa:57:a9:81:
ca:83:15:8f:e7:70:92:11:61:02:29:bc:77:ae:60:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:10:E5:47:A0:34:31:2A:A9:86:F6:D1:9A:CD:94:98:ED:F6:53
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:3c:a8:37:a7:d7:3c:e4:4a:a0:06:8d:0e:3a:bd:32:f3:
fe:69:6f:32:c4:83:f1:e0:ec:29:0f:87:a0:d4:aa:dc:35:16:
e6:c1:32:ef:9e:00:07:75:de:ee:e5:df:c5:bc:36:a3:18:f8:
71:32:6f:c6:c0:2d:4d:24:92:a2:ec:6f:2a:08:8e:50:33:30:
a5:20:04:60:1e:56:08:c1:14:cf:da:c5:a8:ec:67:d8:c5:ab:
0b:72:66:77:9f:f3:66:8c:33:b2:94:22:42:50:3f:19:b1:a4:
3f:2e:08:0b:99:46:af:78:4a:8b:4a:63:c8:5d:92:94:52:55:
bb:8d:08:70:3f:64:07:50:10:69:9c:5c:2a:61:08:d8:12:de:
4f:0c:f6:46:d9:b6:20:65:fd:35:64:42:b6:8a:84:69:6c:e7:
ab:0a:e0:4f:30:ac:57:d4:94:a6:21:16:59:d7:d8:a3:6d:db:
a5:40:d5:11:d0:94:6a:eb:b6:0c:65:5f:97:3b:cf:06:06:2b:
72:6a:27:76:f2:cb:f0:16:4b:e1:f0:26:95:f1:e5:40:fe:c8:
2c:2f:ff:76:8d:c1:38:2a:1c:86:d1:61:38:68:ef:6a:b8:99:
21:81:3c:f5:c5:f8:49:ba:2d:9c:88:11:98:13:86:a9:dd:3e:
95:1b:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:55 2026 by rpki-client