Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: unLi/h2N6ICL0gkljVl6vSgGwj8S/Ja0ibCsev10xUM=
Subject key identifier: 56:85:5C:82:02:5C:C5:08:8F:FE:78:8C:58:B8:03:A3:06:40:49:A0
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019CACB51B7FFC0DE93862D9143928EB5217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: 0gaHf/CQAqDfhYSGl2KbyxpSdCLx9JykcdSXPXnGWE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1b:7f:fc:0d:e9:38:62:d9:14:39:28:eb:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=56855c82025cc5088ffe788c58b803a3064049a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:be:df:c7:e4:a9:cd:70:c7:fa:66:63:9c:
57:02:79:1a:29:d7:cb:9d:d8:9e:bd:2f:e3:cd:0b:
7d:ea:eb:01:bf:b3:94:fa:50:cf:82:eb:1a:ba:0e:
97:62:23:f9:a5:5d:27:c0:31:15:3d:5e:23:1f:f2:
a0:a1:e4:1d:8f:67:d4:d9:d3:c8:ba:da:3f:f2:8d:
48:52:62:d4:3a:17:cf:1e:fd:1e:08:8e:f2:b1:00:
09:cd:7d:5f:04:b1:09:a4:85:3c:cd:f2:7a:37:d2:
84:b7:00:d2:73:41:0b:08:ec:72:16:30:b7:9f:5a:
40:f9:3c:84:12:16:bd:f9:02:05:b4:d2:db:e6:b1:
aa:b1:30:20:dd:9d:78:55:31:c2:c4:1d:8e:2a:a6:
03:28:42:ba:55:40:24:2e:89:66:94:45:a0:42:1c:
fc:01:42:23:c8:c3:97:d5:1e:2f:de:a3:c1:f0:c6:
d8:d1:ee:b0:1f:37:59:7a:1e:f1:83:38:40:fd:ca:
c6:37:06:aa:df:1a:f3:8f:11:aa:bd:11:bb:08:ec:
71:77:f7:87:c8:ae:6c:4a:74:75:24:50:d3:26:f5:
14:03:2e:a1:ba:c0:79:56:a9:c9:1b:03:ce:9a:a2:
87:44:1d:8e:05:3e:8c:31:5c:4a:a4:5d:af:12:73:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:5C:82:02:5C:C5:08:8F:FE:78:8C:58:B8:03:A3:06:40:49:A0
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:a6:ce:9b:db:da:3d:16:14:d0:cc:43:a4:dd:63:e3:0f:
72:60:c4:92:cb:82:3e:b4:72:a3:a7:9c:c2:3e:e0:cc:a9:6f:
52:7b:a2:5d:54:13:de:b6:9c:c7:31:1c:ba:c4:dc:fd:65:05:
68:04:f6:a9:5c:3f:d6:15:23:61:57:6b:a4:93:44:2e:85:7e:
2b:07:ff:6f:5e:d2:f3:65:25:ac:2e:b7:30:03:02:12:57:e2:
54:22:76:15:42:03:e5:84:a0:62:24:fb:47:d4:6f:21:3f:d3:
1b:3c:21:46:bb:93:f2:58:18:b1:b9:b9:8b:69:3c:d3:28:46:
fe:9c:f2:f8:7e:15:ea:c4:67:b2:12:83:34:b3:aa:15:b9:d5:
e7:47:ad:1f:74:1d:64:43:cf:79:72:13:2d:65:05:36:bf:f0:
87:47:bb:97:6f:fc:2b:21:c3:b5:27:89:d1:bb:44:c8:d1:f5:
ba:ed:d3:14:bf:13:ff:9b:59:db:6b:e0:19:2d:8f:8a:f4:27:
e6:bc:72:33:29:8b:29:64:e6:b7:c1:f4:61:77:d7:ca:1a:d0:
66:0e:d5:d7:3f:db:0c:10:65:83:3c:5f:03:f3:8e:4f:d4:7f:
44:43:89:26:bc:9d:86:12:88:f6:40:b8:15:e9:bb:0a:41:29:
92:0e:fe:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystRt//A3pOGLZFDko61IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi
NjNlZTYwHhcNMjYwMzAyMDQwMTE1WhcNMjYwMzAzMDQwMTE1WjAzMTEwLwYDVQQD
Eyg1Njg1NWM4MjAyNWNjNTA4OGZmZTc4OGM1OGI4MDNhMzA2NDA0OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtta+38fkqc1wx/pmY5xXAnkaKdfL
ndievS/jzQt96usBv7OU+lDPgusaug6XYiP5pV0nwDEVPV4jH/KgoeQdj2fU2dPI
uto/8o1IUmLUOhfPHv0eCI7ysQAJzX1fBLEJpIU8zfJ6N9KEtwDSc0ELCOxyFjC3
n1pA+TyEEha9+QIFtNLb5rGqsTAg3Z14VTHCxB2OKqYDKEK6VUAkLolmlEWgQhz8
AUIjyMOX1R4v3qPB8MbY0e6wHzdZeh7xgzhA/crGNwaq3xrzjxGqvRG7COxxd/eH
yK5sSnR1JFDTJvUUAy6husB5VqnJGwPOmqKHRB2OBT6MMVxKpF2vEnN6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaFXIICXMUIj/54jFi4A6MGQEmgMB8GA1UdIwQY
MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt
YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk
LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh+mzpvb
2j0WFNDMQ6TdY+MPcmDEksuCPrRyo6ecwj7gzKlvUnuiXVQT3racxzEcusTc/WUF
aAT2qVw/1hUjYVdrpJNELoV+Kwf/b17S82UlrC63MAMCElfiVCJ2FUID5YSgYiT7
R9RvIT/TGzwhRruT8lgYsbm5i2k80yhG/pzy+H4V6sRnshKDNLOqFbnV50etH3Qd
ZEPPeXITLWUFNr/wh0e7l2/8KyHDtSeJ0btEyNH1uu3TFL8T/5tZ22vgGS2PivQn
5rxyMymLKWTmt8H0YXfXyhrQZg7V1z/bDBBlgzxfA/OOT9R/REOJJrydhhKI9kC4
Fem7CkEpkg7+OQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:52 2026 by rpki-client