Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: Y0y+qFxk820Q5DDl5a3Fr52QCugTD7gXGYHdLP7ZzQk=
Subject key identifier: EB:9D:81:FF:A0:AB:F2:59:B1:0E:1E:81:ED:2C:A5:39:C1:CC:84:A7
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01A0C3326738A2A999D7F8723B6BB5A26630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 048A
Signing time: Mon 21 Sep 2026 09:00:55 +0000
Manifest this update: Mon 21 Sep 2026 09:00:55 +0000
Manifest next update: Tue 22 Sep 2026 09:00:55 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: wXEh/V+CInE2ejYn2M72BZyXui/yWltK8qEO2b7RgqY=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:67:38:a2:a9:99:d7:f8:72:3b:6b:b5:a2:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Sep 21 09:00:55 2026 GMT
Not After : Sep 22 09:00:55 2026 GMT
Subject: CN=eb9d81ffa0abf259b10e1e81ed2ca539c1cc84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:c3:80:b2:bf:3e:75:4c:11:ca:e9:59:2b:
cb:c3:86:a1:22:8d:20:17:51:ac:ae:7a:ac:4b:9a:
2a:d9:cb:94:cf:fe:59:be:73:33:d3:a7:36:63:10:
6f:96:66:e3:f2:0c:72:02:a5:f4:28:13:4e:b5:d9:
4a:1a:69:7b:a2:14:ae:66:9c:b1:1d:73:c4:33:74:
5f:e1:1e:44:12:f2:19:ae:44:63:42:ec:ed:60:c1:
db:cf:6c:b1:fc:77:23:2d:8a:e3:63:4b:2d:6b:19:
7f:eb:c8:6f:15:7d:c4:cb:0f:10:2b:43:86:fe:ff:
db:e0:b7:b7:1c:90:22:ce:f4:13:33:bf:04:ca:d9:
83:9d:24:78:7f:a8:7e:37:47:18:18:69:30:8c:e9:
50:07:4b:55:f3:a8:06:b7:28:41:cf:02:bf:1c:f2:
8a:39:07:f1:41:d4:2a:99:61:13:29:ca:dc:6f:ec:
5c:4c:ad:d6:6b:96:d8:4f:1a:8d:2a:9e:81:75:28:
91:bb:63:95:3b:b2:f2:4d:9f:f0:da:11:15:57:8e:
19:9c:b0:fb:37:6b:d6:b9:59:62:66:4a:ca:41:2e:
37:63:7c:eb:55:8a:3e:70:b2:9f:05:46:4b:d9:d4:
39:17:ed:ab:ed:c6:2a:24:a5:14:1e:4f:bf:ee:c0:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:81:FF:A0:AB:F2:59:B1:0E:1E:81:ED:2C:A5:39:C1:CC:84:A7
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:80:e8:be:10:fc:55:d8:39:ef:c1:9a:05:87:a7:a0:24:
88:2c:e6:24:03:c9:0a:8e:5f:48:30:16:cd:4f:c4:38:2c:70:
29:42:40:14:a1:3a:1a:2a:c2:b5:cd:0f:d1:84:dd:e6:0d:85:
73:63:a9:97:d2:3c:b3:43:b8:a0:e7:d0:2e:42:78:76:53:32:
eb:78:9c:a9:c3:b8:0e:4d:b6:6f:7b:68:80:77:49:34:8e:37:
58:94:15:e2:44:e0:44:93:9d:dc:86:a0:18:f8:94:3e:5b:70:
33:4e:4c:12:79:af:d3:ab:23:7b:91:39:88:1f:af:34:27:67:
8b:94:23:46:89:92:11:27:e6:69:3f:cc:05:8d:07:c7:89:72:
67:45:04:60:d5:49:c0:28:29:43:78:b2:13:29:e5:1b:e9:31:
03:f7:12:59:ea:47:76:94:ec:27:cd:66:fc:af:80:50:ff:8a:
58:80:62:f3:e4:f1:86:bd:04:67:69:3f:7a:b9:2e:51:eb:3f:
16:fe:f5:b2:f4:4a:16:50:27:d9:1a:dc:16:25:af:ab:98:3c:
ae:4b:d5:66:56:36:f0:23:c6:58:15:7d:e8:7e:f4:c6:d8:24:
f0:3f:ae:0c:ff:f4:22:4e:00:42:97:64:6a:c3:a1:d2:15:ef:
a6:21:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:24 2026 by rpki-client