Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: +rxY1A/pc0/MXhuVNEQHkK6cK9YAmVkCHb9qczk/gHY=
Subject key identifier: 58:21:E1:5F:7F:F6:37:81:D9:9D:8B:50:77:3A:4E:1F:FA:3D:39:1D
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019FA93E2FFEED3B72135C33F4FA9089C601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 03F8
Signing time: Tue 28 Jul 2026 15:00:52 +0000
Manifest this update: Tue 28 Jul 2026 15:00:52 +0000
Manifest next update: Wed 29 Jul 2026 15:00:52 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: jQK+xTYikNQKCRc+uoTuSlVEgzM7KAZB5M3Y1NE9s9s=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:2f:fe:ed:3b:72:13:5c:33:f4:fa:90:89:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Jul 28 15:00:52 2026 GMT
Not After : Jul 29 15:00:52 2026 GMT
Subject: CN=5821e15f7ff63781d99d8b50773a4e1ffa3d391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:99:d0:99:1e:77:12:bd:23:09:5f:69:c8:
c2:40:0c:cb:6a:c4:77:7f:fd:47:6d:c4:b7:86:d9:
6d:18:6e:96:6f:76:a6:11:44:de:c4:ba:f2:42:41:
e1:d2:44:5f:9a:f8:98:ca:e0:cf:69:79:c2:c8:d8:
f7:51:8b:82:3c:08:d7:c5:a1:7c:0d:9a:40:e9:9b:
38:5e:05:81:82:a4:fe:c2:27:7d:04:9e:0c:b7:eb:
21:9a:c8:2b:9d:45:7a:04:e1:02:da:ed:30:b2:c4:
07:90:c0:ad:a4:f2:15:1f:1b:e2:3d:8b:4a:2f:91:
f0:4d:0b:31:5d:05:28:5d:c0:9c:a0:3e:7a:15:a6:
22:95:43:0b:a0:c5:1e:76:e8:ff:4b:06:0a:0f:19:
6f:86:48:82:78:f7:70:b0:57:a4:e2:69:8b:e0:aa:
2f:3b:eb:ab:ae:48:de:ee:b7:80:09:62:dd:45:9e:
57:4f:80:57:4e:65:1c:b7:d8:ee:7d:e1:be:28:74:
d3:1f:20:f4:ef:f1:f1:a5:b6:55:0f:68:27:08:d9:
2f:4e:62:2b:08:40:29:e7:1d:4d:9c:9d:de:2f:3d:
27:6e:58:32:77:1b:2f:a5:ab:ba:e1:d0:42:fb:ff:
74:a7:53:db:21:66:b4:8d:33:11:7f:d9:eb:52:1b:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:E1:5F:7F:F6:37:81:D9:9D:8B:50:77:3A:4E:1F:FA:3D:39:1D
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:e5:b4:a2:54:f9:b1:b1:41:87:ad:b2:eb:98:12:4f:60:
7d:d0:67:1d:35:fd:0f:90:84:2f:90:34:4e:83:4e:8e:95:65:
2c:8a:51:fb:8e:18:bb:fe:b4:2d:eb:d3:d9:f2:e5:71:7c:2c:
87:17:0a:b0:94:c7:bc:3c:29:5c:93:fd:f2:39:f8:ad:75:53:
5a:82:a7:15:6a:0c:4e:09:fb:5a:4c:95:ed:cb:09:2c:aa:12:
60:72:07:72:12:09:2a:fe:f6:70:90:b7:a6:e5:af:32:77:f6:
59:ec:53:a5:92:18:fc:7b:d5:4d:5b:c2:87:69:52:d8:c8:25:
31:fd:0c:00:81:ee:58:12:75:86:ee:25:8d:80:44:4c:4f:a5:
e6:66:8e:e0:2d:a8:aa:47:fc:03:0f:12:06:94:0d:9b:ad:fb:
b4:12:74:16:d4:86:95:22:48:cf:dc:86:9f:2e:d9:ae:ac:ca:
27:0f:1a:c4:24:e2:44:e8:95:90:88:9d:6d:6b:b4:8d:54:c9:
9b:12:c0:47:3d:ba:6c:5c:95:9e:1c:f2:f1:21:47:05:2d:ad:
47:26:c7:c7:cb:90:4d:e7:e9:06:6c:16:a3:e2:1a:1e:f6:dc:
fb:95:55:dc:2c:da:20:ef:08:16:0d:25:6f:20:6f:9b:25:a5:
fb:af:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:02 2026 by rpki-client