Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: OcF/eQ+tacq/pJWIADyLTbtVd4Rnd3GjDKp8AVoM7to=
Subject key identifier: FA:E3:F4:49:EB:15:E6:DA:B7:75:C6:00:7B:58:4A:C5:47:27:08:20
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019CC6756CB862F1D213F26C2DFD1D06A999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1864
Signing time: Sat 07 Mar 2026 04:01:50 +0000
Manifest this update: Sat 07 Mar 2026 04:01:50 +0000
Manifest next update: Sun 08 Mar 2026 04:01:50 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: a++UE6ocPoFPu0MpwcgdyoGocxw0R9FonO6i0pQ9kYo=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:75:6c:b8:62:f1:d2:13:f2:6c:2d:fd:1d:06:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Mar 7 04:01:50 2026 GMT
Not After : Mar 8 04:01:50 2026 GMT
Subject: CN=fae3f449eb15e6dab775c6007b584ac547270820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:70:69:c3:57:49:14:59:71:86:01:5e:0b:
d8:91:64:54:57:2e:1a:21:51:38:ba:79:91:fe:4d:
e8:aa:fe:7e:80:ef:e8:3c:0c:22:09:64:b5:e1:8b:
dc:a9:88:c3:fe:c6:e5:a6:7b:b1:c7:b7:4d:95:75:
91:30:f9:d1:d0:62:13:92:b4:f7:fb:31:24:8d:fc:
01:78:ba:ac:60:aa:1c:9a:98:3f:dd:d3:b2:ae:0b:
dc:b2:28:bc:17:49:44:ed:e5:12:85:44:51:b7:8e:
0c:96:5a:e6:1e:4f:05:d3:a8:49:15:20:27:a9:cc:
3f:fb:27:dd:16:47:31:2b:fb:9e:f1:18:8a:d2:bd:
9e:98:b5:a1:d9:33:2b:95:aa:33:16:82:0e:09:09:
8e:d8:d6:a1:e9:fd:bb:01:5c:f9:f3:72:e9:cc:88:
6c:6f:df:f6:2f:8a:46:6c:46:b0:4a:28:15:6e:2f:
cb:57:77:d0:a8:fc:7b:c2:c1:75:88:89:5b:c7:eb:
7f:8f:0e:fe:1e:a1:6a:73:7c:43:d9:2b:a1:03:0f:
1e:20:0f:69:d2:b4:2b:21:4f:95:c7:ed:5c:16:5e:
8f:82:e0:02:8d:f6:83:77:25:55:8a:a5:b1:7c:ed:
7f:81:a6:57:d3:7c:15:a1:be:9c:59:db:34:9a:62:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:F4:49:EB:15:E6:DA:B7:75:C6:00:7B:58:4A:C5:47:27:08:20
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:58:03:bc:c1:03:97:4f:0c:db:23:b5:45:2d:74:eb:f1:fa:
b6:12:ba:6d:ca:07:00:58:71:b4:cf:8d:87:6f:a3:62:c0:42:
44:1b:38:36:62:23:55:ab:42:6d:61:03:1b:ef:15:55:12:e9:
20:50:e0:44:ca:73:d2:fd:51:29:db:06:3f:fb:64:7c:f8:8b:
a5:b7:1c:d3:96:71:d7:b3:03:37:a4:81:b3:9b:43:ff:50:fd:
ec:65:32:fe:01:70:5e:e2:9d:5f:e5:c3:4b:69:54:11:31:e8:
4b:e3:ba:fc:9a:f1:84:98:b5:67:2d:a6:8d:76:b7:67:ba:35:
14:b1:52:8b:37:a1:9e:dc:90:9e:af:ee:f8:7c:af:57:d0:13:
91:3f:da:88:14:9f:eb:3b:22:a4:9a:c9:9c:c7:1c:e2:07:05:
60:c1:37:aa:d3:25:16:97:fa:08:1a:58:fa:ad:7a:ec:1d:52:
db:66:5b:43:d4:0b:00:2f:4f:de:08:bc:95:4b:75:6d:c4:12:
c0:72:b0:f3:76:44:18:0b:26:d1:8a:c6:c9:4d:7c:fe:d3:93:
8d:35:95:57:e8:87:14:a6:4f:30:9e:29:86:6b:9d:4b:30:de:
06:01:28:27:c0:c2:f8:fc:0a:ae:99:26:74:19:d2:61:e5:41:
77:cd:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:58:54 2026 by rpki-client