Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: 96a9HIqbSazgTyOojoY1ULEEJbSGGN6VrMubX4WcPZY=
Subject key identifier: 45:B1:25:22:E9:AA:FB:11:B0:94:66:B2:7D:3E:47:67:6E:4F:5C:E5
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 01A118CFDF71E44531DA29A4F09341E843E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 1A8F
Signing time: Thu 08 Oct 2026 00:00:38 +0000
Manifest this update: Thu 08 Oct 2026 00:00:38 +0000
Manifest next update: Fri 09 Oct 2026 00:00:38 +0000
Files and hashes: 1: 3crDSEyG7ySob_hijxcTMyYUys4.roa (hash: kLSowjdlSNlo/Kmz1F6vDoMD6uNefpXjhMVjlDyIcNM=)
2: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: 3YVqPUpApIO4EHL8aT0xd+etWMcbuIABVqCfi4xdmoE=)
3: rIn8nuXIe5ah0WrNMb3X6_abjqo.roa (hash: 204By/4s2fRNwF4+6Yhppe1fwGO2Tcsoo2WrNB73Sr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:df:71:e4:45:31:da:29:a4:f0:93:41:e8:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Oct 8 00:00:38 2026 GMT
Not After : Oct 9 00:00:38 2026 GMT
Subject: CN=45b12522e9aafb11b09466b27d3e47676e4f5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:17:14:40:1d:5d:f7:82:27:c1:2e:1f:10:
2d:b6:b8:dc:a8:e9:43:3d:81:4b:70:51:a7:84:5a:
1e:2e:b3:a1:5e:6e:fb:6a:e1:f7:24:36:c3:b8:5f:
05:6f:c6:85:db:1d:da:94:9e:86:5c:ef:83:d9:7d:
58:f0:e8:fd:57:1f:72:e4:4f:32:02:32:90:ad:74:
d9:98:b0:cc:3d:28:5e:25:d5:41:ab:7b:c3:65:b4:
55:5c:32:b2:6f:ea:dc:90:01:3e:6c:a0:58:da:c2:
b0:eb:46:6c:c8:04:87:22:e4:9c:55:8b:db:9b:1b:
69:c3:35:a2:a7:54:ce:bf:2f:aa:d0:ee:8a:2d:3c:
31:88:af:18:53:dc:61:a1:b2:ca:93:31:44:46:19:
d3:85:19:0c:13:ba:36:76:b3:ea:88:6f:15:fa:0e:
8c:68:7d:33:8b:08:3f:ca:4b:bf:43:64:fb:cf:04:
67:b5:cc:38:3e:ef:53:d8:32:b7:14:07:26:46:b0:
98:5b:0e:27:42:0b:60:19:23:df:06:0e:9a:95:58:
52:01:62:48:2a:ea:d8:e9:62:e5:3c:ec:79:b0:28:
fa:c9:ba:60:87:33:9b:2a:9e:6c:95:7f:fc:a5:51:
fb:df:9c:4c:ba:77:ca:3b:da:dd:d3:09:1c:e6:06:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:25:22:E9:AA:FB:11:B0:94:66:B2:7D:3E:47:67:6E:4F:5C:E5
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dd:f5:93:a2:7d:dd:67:7a:47:3b:d6:75:f6:60:77:58:8a:
3b:6b:d6:e2:af:d5:a5:c5:e1:94:a6:78:c4:39:06:4d:12:79:
f1:9f:c5:04:5d:d7:df:bb:80:af:fd:2a:55:9a:61:02:bd:71:
7c:2b:32:aa:ee:7c:74:ee:e3:5c:fb:5c:66:0a:86:be:4a:36:
7b:52:1d:54:e6:5c:c6:c0:70:db:0e:84:61:c2:e0:af:74:ba:
af:a5:8c:0f:81:54:0f:e5:eb:40:d5:bd:8d:99:45:fd:cd:86:
18:27:b4:54:32:a2:3c:5e:2f:55:e6:2e:bd:01:97:45:99:e2:
b4:af:80:8e:f6:a0:ec:2d:62:33:57:f6:27:66:17:88:40:a2:
e3:fa:11:78:7d:3c:dd:29:e1:bf:28:d4:1d:74:6e:08:f7:c2:
41:cc:49:30:3a:1c:a4:3c:7c:09:d3:50:f0:ce:73:ff:c6:50:
56:96:08:f8:3e:8c:78:2e:e8:c1:6d:2b:6a:40:a1:e0:46:99:
e3:fe:82:65:92:ed:82:88:d8:f6:4a:4f:30:90:ac:6f:17:f3:
b7:58:34:43:da:16:b9:0a:5c:c8:70:0c:cf:25:09:0d:d7:f0:
3c:49:0f:75:8c:e0:69:8a:8f:f6:f1:79:be:5c:3b:12:97:be:
b2:4d:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:29:09 2026 by rpki-client