Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: oWOenYtm0y5uneF+xYyvKTxtYau/bfwM8csQ3FQcEtQ=
Subject key identifier: 2B:CB:36:59:F1:10:1D:05:A2:51:EF:4F:3D:3E:CE:82:A1:91:79:B5
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019CACB4D16EA0E19B6413AEF61A37A23B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: 0eijyRxD9tjFpYCpbYh/uVAo6Lmd/x3pilbxrkS8lhE=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d1:6e:a0:e1:9b:64:13:ae:f6:1a:37:a2:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=2bcb3659f1101d05a251ef4f3d3ece82a19179b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:90:2d:84:77:33:6b:51:52:c6:67:6a:7e:
5f:f9:57:7d:49:93:d6:fc:88:41:14:aa:b2:fd:68:
74:af:13:89:7b:95:2d:1f:7e:a3:b6:44:b3:08:68:
22:1a:d2:b0:08:c9:61:8a:27:d5:a8:76:94:8e:67:
40:34:fd:f9:a9:fa:30:a5:57:5c:c8:1e:8d:0d:d2:
93:16:e7:53:be:e2:ce:d1:99:e4:5c:6a:88:15:f0:
71:46:f6:82:ea:96:d3:e8:9f:14:aa:5f:1a:33:a3:
85:1b:64:31:26:50:bb:07:f2:d3:5b:0e:f0:a7:ce:
0c:ff:ac:63:17:c8:29:87:e5:b5:4a:14:b8:3a:cb:
3e:e1:88:d1:cd:ec:6e:c7:bb:54:b8:91:b3:bb:a4:
31:4f:6b:7d:a9:e2:ba:fc:20:6e:f8:e6:c6:08:de:
18:dc:c2:1f:7e:9f:37:58:e8:e1:67:8f:29:de:b6:
b4:03:37:98:38:65:c6:17:f9:5f:9f:61:8b:3e:4d:
4c:a1:d4:51:f4:ca:17:21:9c:69:6f:ca:dd:16:1f:
7c:99:7a:0c:44:3d:5d:24:75:40:b7:a4:f1:57:66:
02:12:f8:ba:55:23:f2:b4:01:ab:08:35:4d:f6:3b:
cb:67:53:b6:61:d3:d4:79:79:33:1a:ab:6a:ea:50:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:36:59:F1:10:1D:05:A2:51:EF:4F:3D:3E:CE:82:A1:91:79:B5
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f5:89:65:31:70:7c:d2:5c:75:d2:bd:92:c2:fd:ef:83:60:
fa:f9:a3:1f:ec:8a:c0:47:4a:b4:6f:40:f4:3a:eb:8c:56:98:
5e:dd:40:e9:87:44:f8:58:45:81:a7:a2:99:43:67:50:44:1d:
a6:03:5e:20:2b:9b:21:9e:59:ea:31:57:ce:46:8b:1f:77:6e:
42:07:0c:ca:74:35:e6:37:bc:08:32:ee:dd:86:6e:78:02:73:
13:48:fb:08:e4:34:0a:e8:86:b6:76:f9:55:e3:de:18:b0:ee:
2f:94:c1:bd:5a:ed:ed:01:05:fc:3d:49:1f:48:b4:d4:f3:2d:
48:cc:2c:ec:fc:61:3a:df:d7:5b:6f:82:34:8b:b5:49:a6:05:
5b:b2:82:c9:e9:8a:46:45:e5:e4:e6:17:bc:13:c7:ac:fb:cd:
19:97:ff:2c:55:da:30:f7:c4:28:b2:f8:68:5c:26:ba:88:cd:
df:61:54:29:44:27:b5:08:71:52:04:32:fc:4b:6c:08:7d:c8:
f3:3d:7a:a5:b8:24:ad:ab:02:a0:99:7b:bb:56:ce:31:66:2e:
09:d1:65:8c:47:3c:cc:6b:c3:01:8a:24:d4:70:bb:b6:3c:70:
58:8d:cf:d1:4a:80:a6:52:d9:7e:59:29:c7:fd:a5:8d:f0:8d:
68:b6:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:43 2026 by rpki-client