Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: 3nHgOhNX8ZrUQrUstx3ED37rX8M3GlXmT9Fd0Jjq0Zc=
Subject key identifier: B0:BC:F5:3A:3F:38:1A:F4:99:FB:28:EE:CA:F8:DD:30:2C:36:72:40
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019FFB366D2CF51D7A1487D903B9FC794EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 1404
Signing time: Thu 13 Aug 2026 13:01:15 +0000
Manifest this update: Thu 13 Aug 2026 13:01:15 +0000
Manifest next update: Fri 14 Aug 2026 13:01:15 +0000
Files and hashes: 1: C8ndRUP4mG5i6Z7S5iDRwDHVA7s.roa (hash: x5nMtbiYKs0LuaiMOIAvyWWd3XFr7UWf1LhYWiYg0uo=)
2: NVB0QUSWgn0ALHFZa2k8iucL56s.roa (hash: SyvOCJbzAEZ79Mu8MDdowadmy7cSY/kE23r919PmAwQ=)
3: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: Jchx8Z025cJzwwMipqfaELx9mcdi87woSGe+HaoQ/pU=)
4: RFdgeXyJzaQXqawAZmyh_6uuX5k.roa (hash: 9nqya6lUrZRFhvWTm9DptAWjhBaMFWO/dD6cJBwy0vo=)
5: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (hash: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8=)
6: eFwfcJ8TYubsvnJGV3ToNuHTt0E.roa (hash: 6yiyUfT0vs7d3osCrcXjtKOvrYeh/el2zH8u6misslY=)
7: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (hash: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY=)
8: w7tyGuDyXYF09C0kbacUlcISVeU.roa (hash: JmfNdkolCzw/kkNxz7vb2sntLGDQEoDk1YvI0uf3pXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:36:6d:2c:f5:1d:7a:14:87:d9:03:b9:fc:79:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 13 13:01:15 2026 GMT
Not After : Aug 14 13:01:15 2026 GMT
Subject: CN=b0bcf53a3f381af499fb28eecaf8dd302c367240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:85:28:76:fe:d0:60:2d:59:74:50:a2:f8:
20:fc:e1:fa:cb:4d:2b:99:d9:a9:22:a1:0e:51:41:
86:02:fb:07:a0:56:b6:ac:12:4b:c2:b0:af:28:8d:
74:56:a5:d1:00:8b:e8:d4:34:a5:76:72:21:e2:03:
29:c2:6c:c6:97:15:19:d7:15:c2:01:7c:1e:86:ea:
63:24:51:88:f8:95:35:b8:26:b2:49:64:5e:37:5d:
0b:34:ff:4d:12:90:44:93:af:ac:7a:c9:7c:f1:9e:
a0:3c:8b:e2:fe:27:f0:58:6b:95:83:4c:66:9d:cb:
30:8f:5d:05:d6:57:40:89:6a:49:05:29:53:58:f9:
48:a2:33:3b:36:64:e9:2f:b3:44:4d:92:a8:c6:5f:
c6:a4:ce:48:b0:3a:04:0f:9d:8c:56:d3:5b:b0:15:
84:a3:2c:ff:fa:24:b3:a6:76:7f:6d:93:ad:94:cd:
76:87:9e:52:c8:29:61:2e:a5:ec:e2:9e:46:42:07:
c1:b9:f6:fc:84:34:70:86:8b:3d:3f:37:7d:17:d8:
e9:30:82:6a:43:2f:b1:e7:dc:ce:97:80:73:b6:bb:
3e:99:0d:3d:0d:99:60:e0:ba:a1:ab:db:b6:9d:fa:
1d:5c:2f:1f:5d:06:3d:2e:34:bd:93:32:35:13:f0:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:F5:3A:3F:38:1A:F4:99:FB:28:EE:CA:F8:DD:30:2C:36:72:40
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3c:29:9b:d7:0e:8a:13:31:e0:fc:23:29:f7:76:67:13:68:
ee:9c:00:c5:c9:26:00:1d:f1:e2:26:97:88:c7:65:a6:a3:9b:
ac:57:53:26:28:46:16:cf:18:13:6c:74:a2:61:33:2b:f9:ed:
8c:de:cd:96:d9:bc:fa:59:70:0e:5b:11:0e:c1:7e:a5:48:53:
c0:80:eb:a6:45:0d:07:cb:8a:fc:e1:74:7f:a9:ca:21:c0:e3:
7e:46:46:6f:da:68:6d:88:14:3c:62:54:40:9a:0c:8a:d2:86:
17:1b:33:34:67:9c:f1:13:65:ea:cb:b8:0c:d1:15:08:cb:12:
b2:18:db:4e:11:db:ca:ca:3e:02:5d:ea:7e:46:65:a6:8f:ce:
d6:b3:bb:b7:4c:27:7c:c6:c1:24:10:ee:c3:ca:86:8e:2f:3a:
cb:4a:56:27:01:2b:84:57:c7:20:48:13:d3:78:34:29:05:90:
9a:69:5b:c7:c8:97:ce:f6:fa:40:f2:d6:5f:82:13:b0:38:b1:
f8:bf:b0:27:56:1e:8f:bb:13:4a:0e:e5:84:c8:70:bd:34:99:
17:fd:eb:e0:a6:d0:dd:ca:cb:b8:26:c0:33:24:89:0c:20:bf:
9a:38:83:44:45:f5:f9:ae:63:91:f6:72:b1:1d:68:6d:8a:42:
ed:c8:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:13:58 2026 by rpki-client