Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: 4qKloIOyB56PLLg4F8h486axLEpAhV0JGVPfQ1RNdTM=
Subject key identifier: DC:EE:51:04:AA:64:F4:BD:07:5C:68:A0:CB:89:68:B0:B1:70:91:DF
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019CB091B8EC7B3A96F6F6ABD6519ACA0042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 22:01:05 +0000
Manifest this update: Mon 02 Mar 2026 22:01:05 +0000
Manifest next update: Tue 03 Mar 2026 22:01:05 +0000
Files and hashes: 1: LZoc3NH1xvdhaKtZh7r595LzWZA.roa (hash: cnGjanwZ2hKT1myBjJDNeESOJnTd39dvObuBgiZbmh0=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: bwcHEK3LKcinkis8mWLkLlecP8GUF4WknqvKg8ufJEk=)
3: nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa (hash: Masava5utcSxI/yaL9ocWnZHgg2ad5NPlBu90wVNB2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:b8:ec:7b:3a:96:f6:f6:ab:d6:51:9a:ca:00:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Mar 2 22:01:05 2026 GMT
Not After : Mar 3 22:01:05 2026 GMT
Subject: CN=dcee5104aa64f4bd075c68a0cb8968b0b17091df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:c2:9a:da:e4:93:4d:47:5f:2a:6c:46:86:
e8:a3:91:9c:b6:18:87:56:49:02:17:82:50:47:73:
99:47:0f:75:e7:f9:30:c6:66:ca:12:04:c6:18:e0:
d7:f7:9e:f5:38:8a:53:b9:23:8c:9e:cc:52:4e:60:
50:ec:2e:a6:f3:35:fc:73:81:98:6b:45:8c:e5:08:
a4:5d:eb:37:c8:99:19:1e:53:00:84:c2:30:6a:4b:
fa:14:84:ad:cc:9a:72:7f:81:db:60:e2:a2:3f:03:
ce:65:19:05:92:12:f0:07:8e:cf:e8:5c:7f:fd:f8:
08:94:28:f0:9c:4e:e7:75:17:11:ff:3a:92:97:fb:
79:fe:0f:f6:17:58:74:19:97:c1:4b:de:ee:9f:a7:
68:93:05:b0:82:c2:19:30:39:ab:2c:ea:de:13:fd:
54:19:32:d4:97:e2:ca:e0:0b:b8:b7:60:9e:d2:fd:
02:a9:63:6e:de:fd:28:ed:66:db:0d:7e:fa:26:50:
23:87:07:a6:4c:63:f6:09:87:3e:ba:ba:7d:c2:ad:
41:83:ca:01:55:b4:16:e8:ce:6d:c1:97:c7:17:76:
2b:1f:73:de:eb:ac:c9:08:17:c8:e9:7f:9a:50:08:
07:8d:60:6d:16:a4:92:a5:86:a2:01:16:22:25:3e:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:51:04:AA:64:F4:BD:07:5C:68:A0:CB:89:68:B0:B1:70:91:DF
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3d:cf:14:e7:47:aa:02:8a:f7:b3:52:11:6f:dd:a0:e1:1e:
02:a1:88:e4:74:3c:6d:59:2b:f5:1a:95:7a:40:a7:ef:79:14:
f9:a8:aa:9e:d9:70:17:ca:a1:4f:bc:f2:e0:9d:54:9f:fd:f0:
88:83:f9:68:6a:5f:6a:96:b2:14:e0:3b:30:d6:4d:36:56:a6:
42:ea:8e:e1:52:d9:01:07:de:71:26:03:46:56:10:ab:4a:b8:
86:d6:e1:e3:b3:d9:14:d8:63:99:b9:29:86:bb:b2:6d:c9:e5:
96:6d:ae:de:b5:1a:dd:c8:ae:95:a9:84:e4:08:0f:34:0b:d6:
5b:29:eb:d5:f1:5a:35:20:cc:d0:05:48:b5:39:d4:8f:d3:33:
5c:38:71:f4:a4:9b:ca:52:f8:88:67:b8:0f:50:20:f0:36:21:
73:2f:62:25:20:0d:e8:15:c6:80:72:b7:8f:d2:55:68:47:0f:
e4:d6:ac:b7:e6:48:47:f6:65:9c:b0:ca:b0:35:31:6e:24:eb:
21:c1:83:92:b8:de:83:b6:78:a7:67:22:ef:4c:cc:f8:36:29:
70:af:94:e7:f7:7a:45:4a:19:fd:c1:d0:85:64:36:90:3c:8f:
d4:73:cf:1a:6a:ce:bf:21:82:92:f5:ab:35:31:6c:72:30:e0:
09:dd:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:02:15 2026 by rpki-client