Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: atbWIZSk3P2J9m90S7bnAchaGKTFrMeSViFECSvQGc8=
Subject key identifier: 7C:EE:FF:B7:95:E3:F9:71:2F:7C:16:D7:39:6E:6F:5E:79:DC:22:F7
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019D38D2B0CE8738EC9AC1A01567C23CA56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 09BF
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 9XSwptV-ZNILwy4i5DW_tgPkgSU.roa (hash: 1gOGH6Fm4nuBFJfCO9Q2Mvfqz47h/JLm40saj0YTiOk=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: flNuhtZjeFW5p8jGj7mRbpHg/PgdraWNW9erLkyPTKY=)
3: W-UYkYcFpRXJXOLdeRe7OrV0cZ0.asa (hash: u3Eh32uzo3YgryhEMHYkmoOOlYuyFVQMTVeW1RRgVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b0:ce:87:38:ec:9a:c1:a0:15:67:c2:3c:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=7ceeffb795e3f9712f7c16d7396e6f5e79dc22f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:af:58:43:fb:61:a1:ce:9a:2a:d2:84:f4:
6b:44:33:3e:ed:f1:f8:1d:9c:9c:f0:36:50:18:ac:
a2:0f:64:08:2c:ec:d6:5a:31:99:21:7e:f5:d9:76:
78:6c:e3:78:e7:a5:41:56:bf:70:d8:0a:7b:f9:bb:
7f:3d:ad:12:96:e6:f7:ce:80:27:0d:c3:d0:64:06:
d4:b6:0a:d5:ad:ad:ad:1d:13:71:73:01:80:47:05:
72:09:02:81:08:1c:0a:32:a8:fd:b3:d9:a4:91:03:
f5:ac:43:7d:5b:ef:4a:ba:25:1e:17:42:04:81:72:
f8:1e:8f:5f:97:90:1a:a2:4a:9b:c6:aa:17:95:2f:
d7:6a:f3:78:65:42:44:1a:44:1f:14:cf:93:45:80:
cc:e7:a9:56:25:37:31:1b:e9:6b:b4:d5:b0:19:13:
37:0b:ec:7b:f1:62:c6:75:3c:ce:86:2f:94:4a:4b:
d5:e2:9d:d5:3f:9a:c2:ac:4e:10:ba:ed:1e:dd:11:
26:cb:cc:e0:af:4e:f0:4b:f8:17:54:92:5b:59:2c:
86:e2:2e:eb:a9:7d:9d:4d:3b:13:77:bf:da:94:a4:
a9:50:4e:00:d7:c0:85:43:cf:1d:5b:0d:ba:ea:25:
8a:58:fe:a3:8a:7d:32:b7:8f:20:57:e5:f5:f9:a1:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:FF:B7:95:E3:F9:71:2F:7C:16:D7:39:6E:6F:5E:79:DC:22:F7
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4b:08:89:88:5c:de:41:62:49:05:96:57:24:74:12:01:a2:
0a:69:ae:26:de:b1:a9:93:9d:2a:03:95:7d:60:48:3b:78:91:
47:c2:62:34:4a:84:b2:93:15:e2:fb:c3:9c:6d:14:49:e1:33:
1f:fb:36:ef:31:4e:5b:86:ee:af:cc:88:08:34:50:be:43:f0:
ad:ff:1c:8f:74:3d:1a:59:b6:fb:e7:62:82:f0:c7:ec:4a:2c:
5d:60:0b:45:b2:0a:c7:55:83:47:fb:e0:e8:00:7f:fa:de:2e:
75:e6:68:bc:da:a3:25:07:87:ed:66:ee:19:25:8c:36:df:c4:
8c:6d:4d:88:97:11:fb:b1:af:68:3c:0a:74:d7:bd:37:8b:b4:
74:7b:24:f8:d5:ab:4a:5c:b7:27:07:8e:d2:f1:80:66:a4:58:
0c:43:b6:18:73:aa:5b:73:b8:e9:fe:e9:eb:cd:e6:3f:bd:52:
d5:55:50:d5:d6:28:20:f6:18:6d:d6:f9:96:47:fd:cc:79:76:
2c:b8:68:e5:45:0c:36:55:66:a3:4b:3c:7d:7f:f9:57:fa:50:
50:e9:1d:a1:5d:aa:84:9f:7a:6e:b9:82:82:b8:8d:a0:57:fa:
45:6f:4a:e3:b0:f5:5e:15:f4:2e:df:15:24:5f:57:58:ea:d4:
80:e2:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:14 2026 by rpki-client