Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: TYCaSTxe2+TOjrelsrxVApObk8zPvRhyC76JaynC/G8=
Subject key identifier: 89:84:D7:F5:BB:91:32:FB:F0:06:35:D3:B8:AA:40:F7:77:20:3E:E5
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019D39AF336ED51C71C3ABF48EB1068273CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0FB8
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: GbkvPI-kmfONtAuGoBOu2GW8-74.roa (hash: 2EzOh6hlkAJ6PDMBXoH3PL6bxWAgOzm9d8AoyksEql4=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: uloCBowEUW+XIRPmTMnekUKiNf7tlBR7ebOn7r2rolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:33:6e:d5:1c:71:c3:ab:f4:8e:b1:06:82:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=8984d7f5bb9132fbf00635d3b8aa40f777203ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:54:62:bc:52:af:aa:a4:10:07:4f:15:f6:
dc:db:4f:50:b2:7c:d2:e5:18:e6:0f:59:51:6e:44:
9c:18:33:d6:05:bf:a7:0a:42:ab:b1:37:36:c5:3a:
52:43:06:47:da:4a:60:f6:94:a0:27:be:db:bc:88:
5a:31:c9:33:3b:25:ab:76:24:cd:51:d4:b1:84:e3:
62:2d:b2:e8:01:a8:87:5e:71:a7:55:9d:a1:d9:b7:
57:ed:a1:b4:72:ea:9e:9f:4b:6c:50:e6:19:50:fd:
f2:64:59:80:ce:6b:52:fe:e2:61:40:39:c7:56:25:
17:d8:2f:bc:a2:ea:82:fc:fe:d7:58:92:0a:a8:d0:
94:91:51:2e:ba:df:29:07:45:34:c6:9f:04:44:65:
c8:22:c9:34:02:ae:42:02:36:0e:12:a5:5b:56:9a:
a0:dc:ed:fb:11:15:ff:7c:e6:5e:0f:21:52:54:2d:
b2:a7:2f:f9:ae:3b:55:bb:3a:2a:08:59:84:98:73:
27:fe:98:2a:76:82:e5:88:30:f1:46:a8:9a:21:3d:
de:a2:dc:17:4c:6d:ee:78:ec:0d:51:e8:10:94:73:
b8:62:cd:0a:c4:a3:97:7d:da:94:61:33:3b:eb:34:
73:9c:66:cb:8f:c9:b6:e0:85:b0:c4:62:37:8c:0b:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:D7:F5:BB:91:32:FB:F0:06:35:D3:B8:AA:40:F7:77:20:3E:E5
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:91:b0:cb:73:b1:eb:b0:80:06:59:38:ad:9a:6c:43:38:
2e:59:e8:e4:ac:c2:71:3a:cf:fd:9c:bc:73:f1:ea:d4:91:67:
5e:3c:33:7f:a5:71:90:34:45:27:ff:3d:29:a0:83:d8:77:79:
2e:f3:f1:8e:1d:a0:39:3c:f6:64:9f:79:c1:08:04:89:5f:b1:
71:bd:49:01:25:5a:76:58:6e:01:e1:87:17:9a:0f:3e:d9:b4:
71:0e:7a:7f:dc:91:86:3d:60:c2:ec:19:d2:37:6f:18:90:f1:
47:6c:49:b7:4e:96:a4:de:0e:bf:0c:83:5d:d3:55:4c:ae:26:
97:80:b4:c8:e1:cc:a7:aa:f9:16:89:37:9a:e5:cf:4a:38:3c:
5f:ee:44:b1:8c:bc:77:84:ce:fd:f9:91:8d:27:31:13:82:82:
5f:78:43:ca:5c:13:38:8c:9c:bb:86:b2:01:32:0d:ec:2d:bb:
0b:c7:98:8c:99:eb:11:60:c5:0c:fc:5d:7c:3a:5b:f6:ef:a8:
db:0d:65:e7:26:71:40:5c:3e:5e:23:18:fe:8e:d4:4b:7f:66:
de:af:ac:7b:eb:db:8d:94:05:62:56:35:89:f7:49:33:81:62:
9a:71:23:b3:b9:8e:40:b0:ec:2b:07:40:95:3d:a1:d9:8a:78:
34:58:8e:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzNu1Rxxw6v0jrEGgnPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjYwMzI5MTMwMTE2WhcNMjYwMzMwMTMwMTE2WjAzMTEwLwYDVQQD
Eyg4OTg0ZDdmNWJiOTEzMmZiZjAwNjM1ZDNiOGFhNDBmNzc3MjAzZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+NUYrxSr6qkEAdPFfbc209QsnzS
5RjmD1lRbkScGDPWBb+nCkKrsTc2xTpSQwZH2kpg9pSgJ77bvIhaMckzOyWrdiTN
UdSxhONiLbLoAaiHXnGnVZ2h2bdX7aG0cuqen0tsUOYZUP3yZFmAzmtS/uJhQDnH
ViUX2C+8ouqC/P7XWJIKqNCUkVEuut8pB0U0xp8ERGXIIsk0Aq5CAjYOEqVbVpqg
3O37ERX/fOZeDyFSVC2ypy/5rjtVuzoqCFmEmHMn/pgqdoLliDDxRqiaIT3eotwX
TG3ueOwNUegQlHO4Ys0KxKOXfdqUYTM76zRznGbLj8m24IWwxGI3jAv8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImE1/W7kTL78AY107iqQPd3ID7lMB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPViRsMtz
seuwgAZZOK2abEM4Llno5KzCcTrP/Zy8c/Hq1JFnXjwzf6VxkDRFJ/89KaCD2Hd5
LvPxjh2gOTz2ZJ95wQgEiV+xcb1JASVadlhuAeGHF5oPPtm0cQ56f9yRhj1gwuwZ
0jdvGJDxR2xJt06WpN4OvwyDXdNVTK4ml4C0yOHMp6r5Fok3muXPSjg8X+5EsYy8
d4TO/fmRjScxE4KCX3hDylwTOIycu4ayATIN7C27C8eYjJnrEWDFDPxdfDpb9u+o
2w1l5yZxQFw+XiMY/o7US39m3q+se+vbjZQFYlY1ifdJM4FimnEjs7mOQLDsKwdA
lT2h2Yp4NFiOww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:01 2026 by rpki-client