Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: aqqY41gDZKC733+PLkXHNhzBX3zzjKNB+6K5OVumJlM=
Subject key identifier: 4F:7F:FF:CE:B6:D2:BC:F5:9C:D4:39:63:DA:0B:7D:50:94:24:FF:BF
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019CAE6BEC4E0AC15F48C92684F35F28201A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 026D
Signing time: Mon 02 Mar 2026 12:00:34 +0000
Manifest this update: Mon 02 Mar 2026 12:00:34 +0000
Manifest next update: Tue 03 Mar 2026 12:00:34 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: bSQUmlrm+UB8ojJfWzfY2HgcnukhJPCDIlfQnM3Ling=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ec:4e:0a:c1:5f:48:c9:26:84:f3:5f:28:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Mar 2 12:00:34 2026 GMT
Not After : Mar 3 12:00:34 2026 GMT
Subject: CN=4f7fffceb6d2bcf59cd43963da0b7d509424ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:64:98:6f:3d:00:66:82:b7:49:96:b7:51:
48:42:ab:92:73:77:5d:5a:8e:7a:47:6a:70:85:9a:
67:bc:77:16:73:31:6c:1e:17:b4:bd:cd:f2:57:c2:
d4:8a:38:c4:3b:aa:0a:2c:f7:b7:38:5d:2b:12:cc:
73:9b:e9:f6:a2:a2:0e:45:1b:14:c3:3e:e3:77:e7:
2d:16:17:c6:d3:f8:65:0d:5d:fe:91:06:bf:e9:0b:
10:2b:fd:23:9b:f6:9f:79:1b:06:4b:45:b0:06:59:
fe:f2:c1:58:32:5f:5e:82:14:0e:5a:9c:a5:e0:0d:
ad:68:1b:9b:79:2f:9e:f4:32:99:c7:76:e8:ae:41:
ab:4c:fc:f8:37:04:56:72:d8:22:f5:7b:99:6a:22:
36:18:ec:42:a5:6b:f9:68:81:49:06:0e:34:d6:fb:
c1:f1:44:03:b5:cf:d8:0b:b6:00:40:0d:e4:c1:21:
1a:94:07:eb:b5:a3:d9:a2:74:22:d4:1c:fb:2a:3c:
c8:36:c5:ee:c3:f6:e7:b8:ce:35:c8:db:6a:59:c5:
0e:a1:51:65:58:65:5d:63:7b:7f:bc:8b:a6:dc:c6:
7f:22:5f:1a:94:fa:e1:fd:ac:aa:a8:30:1c:91:58:
fe:0a:60:86:f4:38:35:48:8d:3d:ce:1a:54:2c:3d:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:FF:CE:B6:D2:BC:F5:9C:D4:39:63:DA:0B:7D:50:94:24:FF:BF
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:b7:fd:c4:48:d4:eb:47:4e:3b:6c:71:af:0e:24:6d:5f:
ff:73:73:13:86:bf:c3:16:28:aa:d1:13:d0:67:46:85:2e:e1:
d4:a5:b3:b1:de:b5:81:da:7c:e3:bb:c8:7f:76:bd:f8:27:3b:
f8:60:a0:29:7b:14:0b:53:5f:a1:0b:24:2a:d2:4d:66:e7:93:
ba:05:2d:c3:40:1c:c5:42:15:e9:8e:40:93:2b:80:d6:d3:4b:
1f:63:d4:cb:06:50:b1:c1:80:44:b5:c0:09:a4:4c:44:23:ae:
f6:73:b9:69:3a:fb:fc:63:0c:3d:04:88:28:2f:bc:d3:4b:b8:
a6:9d:72:f4:49:7b:6a:03:bc:12:87:6a:89:f1:3a:1f:23:5f:
4c:5f:fd:62:4d:39:74:50:83:dc:32:25:a7:1a:85:08:71:b5:
15:1e:4f:c9:fc:94:11:98:34:e2:a7:7c:5c:28:87:01:24:36:
83:07:b5:bc:7f:e5:e8:cc:ed:b9:77:e3:18:93:e0:fa:5f:5b:
e1:93:1b:53:bf:f1:1f:58:e9:03:c5:4c:b0:05:e5:cc:df:ca:
26:8d:8e:f0:e4:38:5f:9a:61:fe:f7:cf:64:1e:49:17:42:3b:
a5:b1:1d:6f:e0:25:ef:f5:24:3d:06:f7:42:de:15:f3:73:e3:
6f:97:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:12 2026 by rpki-client