Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: xRPL7HVJL3saztW2MPgz6UDLHzYEM/JA2z/7br36nyw=
Subject key identifier: BA:F3:65:54:C7:41:2D:18:B7:56:47:6A:7D:E3:FC:35:5E:B9:EA:A9
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019DA3AECA400906F0B3B3827F592E4AC002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 02EC
Signing time: Sun 19 Apr 2026 03:00:34 +0000
Manifest this update: Sun 19 Apr 2026 03:00:34 +0000
Manifest next update: Mon 20 Apr 2026 03:00:34 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: qbMr0EqFZo3q/fNTQEezRPcrw+ph+U4knGTQqct2ZB4=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:ca:40:09:06:f0:b3:b3:82:7f:59:2e:4a:c0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Apr 19 03:00:34 2026 GMT
Not After : Apr 20 03:00:34 2026 GMT
Subject: CN=baf36554c7412d18b756476a7de3fc355eb9eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:0a:60:c7:3d:d7:c5:d3:20:e6:2a:5f:55:
ab:83:f7:33:32:b2:b7:42:8d:9c:61:2d:a6:6c:47:
00:6c:c3:81:b1:67:de:e0:94:9d:dd:34:08:60:19:
67:91:4e:16:02:72:f7:9f:40:03:e4:6a:b6:a2:43:
3f:07:cf:44:56:36:ef:0e:08:f9:f9:68:5c:70:9b:
0d:2c:d2:b2:d2:fe:04:f1:99:c2:3c:b1:4c:a3:ad:
1d:1c:4a:0a:a4:40:e6:90:8a:00:47:20:99:16:d2:
40:d0:87:a9:ef:fc:1c:48:7e:a7:7c:c3:aa:44:05:
40:fd:0b:b5:ce:26:b5:5d:8f:47:a9:4b:ce:4a:bf:
8a:0b:23:c3:80:db:b4:39:c2:3c:c1:01:c8:56:68:
54:db:15:34:d4:56:4d:47:c6:ac:da:a4:52:fe:4d:
f0:66:cf:4a:b8:11:c0:a8:52:9b:44:64:b6:0f:05:
b7:26:ae:f5:58:94:46:0b:4d:77:94:02:4d:a9:94:
18:18:c3:fd:83:92:76:08:2a:8f:21:cf:89:7b:7d:
c4:5d:9a:01:41:dc:c4:94:27:e2:de:dc:b1:89:5f:
1b:87:90:3b:cb:6e:68:00:c5:7c:c3:fd:58:3e:9c:
a0:76:a9:30:4e:3a:3b:96:a9:8b:1c:ef:9e:23:28:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:65:54:C7:41:2D:18:B7:56:47:6A:7D:E3:FC:35:5E:B9:EA:A9
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:5d:44:7b:7c:b1:16:01:48:7b:9f:4a:2d:1f:f6:73:c5:
53:1a:0d:0f:45:df:b5:46:60:a7:8e:4c:6d:a8:ef:e8:96:d0:
6e:45:3d:1a:eb:75:3e:f2:de:0c:64:8f:a1:54:b2:57:bb:74:
7b:0e:89:15:db:5d:71:54:6c:fc:ff:92:eb:ff:3b:0d:2a:f6:
e2:01:f8:0b:5c:4d:87:8a:d8:cf:2e:54:de:73:b9:6f:f7:e6:
14:df:a5:9f:6f:9c:65:fd:0a:d7:d8:50:05:ff:77:63:ff:0f:
79:4e:b4:ff:fc:82:68:5f:4b:cc:95:62:16:bc:4f:0e:88:39:
d5:e8:ad:fd:6b:b3:44:6e:ef:3b:36:ee:91:bd:07:05:2d:25:
bd:fa:41:cf:55:d3:6e:2d:20:e5:f2:0a:ce:05:05:d9:32:fe:
39:e4:57:e9:d0:9d:4c:cc:6e:d2:3e:61:3b:6b:de:d3:32:74:
58:55:52:29:83:0c:ef:59:3c:03:2d:80:fe:60:64:dd:12:00:
93:88:40:7e:57:92:96:04:b5:65:97:90:8b:93:3e:e4:b7:5c:
ca:a1:9b:0f:07:f4:e4:9b:05:70:7a:80:0a:b6:bc:b8:61:39:
46:11:f6:8f:48:5c:d8:4c:ac:1d:06:93:39:07:f7:5d:fd:b2:
ad:68:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:08 2026 by rpki-client