Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: 5vWSHZf4Hdhrz1ZmVaakoBbzmsG9iitMOUE6CCoxlWg=
Subject key identifier: 64:C8:AD:79:E6:CD:0B:67:65:4E:70:22:29:18:74:07:87:E7:94:51
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019D9A071DB9D5744E4DA65CDA863617FEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 02E7
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: +Wk+cqxcBvn3H6zYOqlyQrxt5V4zY8hGMu00gXNrHmI=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1d:b9:d5:74:4e:4d:a6:5c:da:86:36:17:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=64c8ad79e6cd0b67654e70222918740787e79451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:f6:a5:4f:c1:75:aa:e2:c6:ce:69:a5:ef:
70:35:04:31:6e:46:72:1a:a8:55:5e:3d:e9:ec:7f:
7e:25:4a:0f:ad:75:92:be:58:90:7f:5c:d5:eb:c5:
41:21:7f:80:4e:03:ea:04:cb:1f:8d:b6:53:2e:2b:
e5:14:93:4f:0c:bc:e9:f5:03:57:0a:2c:14:a0:f8:
f8:be:cd:d7:c9:01:ed:a6:59:87:cf:c9:dc:65:11:
a8:f5:8a:93:6b:2f:b5:ed:06:85:3c:b8:3d:8a:92:
21:3c:42:2a:be:70:4a:4f:b3:5a:dd:4d:03:8a:b5:
04:78:5f:ec:99:63:5b:d0:ce:cd:8d:9b:f9:a7:4d:
01:c6:96:6e:b5:4b:61:18:b8:54:0e:23:c3:2a:8d:
0c:bf:4a:d4:70:5d:f6:f6:c6:44:ad:de:c8:45:50:
e3:30:d6:e8:3f:43:31:cd:53:ad:57:31:2d:13:62:
81:ef:7c:f6:b3:23:22:2e:3d:cb:04:1d:e0:79:5f:
74:6b:63:37:01:49:a3:86:fc:c3:9f:01:bf:cb:6e:
63:4c:88:d8:14:20:d4:6d:04:03:d5:56:6f:94:84:
38:19:9b:0a:f9:49:d9:21:8b:a2:0f:6d:36:b4:e1:
fc:47:1b:e0:e5:07:42:17:19:83:8f:f1:9f:f4:15:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:AD:79:E6:CD:0B:67:65:4E:70:22:29:18:74:07:87:E7:94:51
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:cd:ee:6b:73:e2:74:f5:a6:6a:bf:f4:1c:5e:fc:74:98:
ed:a1:0b:bc:d7:47:de:8e:c4:18:e6:43:e3:73:6b:a4:62:a4:
da:6a:0e:f0:ec:07:5a:59:99:bb:a4:b2:33:e9:c0:ff:09:31:
ca:a3:63:6d:d6:b8:cb:40:ed:62:01:67:b6:9b:e0:38:1b:59:
de:99:90:4a:4a:58:93:19:80:06:aa:8c:6d:6b:fd:66:0c:ad:
36:2f:c3:87:d7:84:86:37:b1:0d:8f:96:3f:22:15:cd:b7:3c:
9b:73:8d:1a:96:cc:d3:d6:86:86:76:07:c8:c3:d3:b0:3c:ee:
b2:9e:18:e3:76:68:08:3a:f3:6d:1f:83:9a:58:27:eb:7d:dd:
2c:29:5f:e5:b5:70:e2:56:6a:85:b5:0b:4a:03:e6:b1:3e:24:
cd:c4:b6:f0:0b:42:a5:f1:4e:3e:75:2d:ad:50:e3:55:18:b4:
23:96:54:eb:19:6d:29:3e:d5:2b:fb:d5:05:e9:0d:75:7d:01:
38:ca:c0:83:7d:72:78:5b:fa:1d:aa:db:7e:c1:6a:ac:52:2d:
c8:a1:e4:d9:b7:9d:7f:6f:28:4c:a4:07:8f:b5:be:d7:35:07:
54:69:80:5b:78:fb:f8:76:1d:56:77:b3:ac:fe:da:b9:e9:db:
f2:11:d8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBx251XROTaZc2oY2F/76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi
ZGIzYjkwHhcNMjYwNDE3MDYwMDUwWhcNMjYwNDE4MDYwMDUwWjAzMTEwLwYDVQQD
Eyg2NGM4YWQ3OWU2Y2QwYjY3NjU0ZTcwMjIyOTE4NzQwNzg3ZTc5NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cT2pU/Bdarixs5ppe9wNQQxbkZy
GqhVXj3p7H9+JUoPrXWSvliQf1zV68VBIX+ATgPqBMsfjbZTLivlFJNPDLzp9QNX
CiwUoPj4vs3XyQHtplmHz8ncZRGo9YqTay+17QaFPLg9ipIhPEIqvnBKT7Na3U0D
irUEeF/smWNb0M7NjZv5p00BxpZutUthGLhUDiPDKo0Mv0rUcF329sZErd7IRVDj
MNboP0MxzVOtVzEtE2KB73z2syMiLj3LBB3geV90a2M3AUmjhvzDnwG/y25jTIjY
FCDUbQQD1VZvlIQ4GZsK+UnZIYuiD202tOH8Rxvg5QdCFxmDj/Gf9BVAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTIrXnmzQtnZU5wIikYdAeH55RRMB8GA1UdIwQY
MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt
NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk
LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWHN7mtz
4nT1pmq/9Bxe/HSY7aELvNdH3o7EGOZD43NrpGKk2moO8OwHWlmZu6SyM+nA/wkx
yqNjbda4y0DtYgFntpvgOBtZ3pmQSkpYkxmABqqMbWv9ZgytNi/Dh9eEhjexDY+W
PyIVzbc8m3ONGpbM09aGhnYHyMPTsDzusp4Y43ZoCDrzbR+Dmlgn633dLClf5bVw
4lZqhbULSgPmsT4kzcS28AtCpfFOPnUtrVDjVRi0I5ZU6xltKT7VK/vVBekNdX0B
OMrAg31yeFv6HarbfsFqrFItyKHk2bedf28oTKQHj7W+1zUHVGmAW3j7+HYdVnez
rP7auenb8hHYYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:31 2026 by rpki-client