Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: todFt8dGjYSwVeLdx1wdaFh4fSO8JlQXICDD0H7mv1o=
Subject key identifier: 2F:72:5C:C7:8E:AC:5C:F4:CD:C2:94:5F:78:C5:03:09:24:91:B3:B0
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019CE6A4713E64F4C3B42F22EEB6CD43815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 10:01:02 +0000
Manifest this update: Fri 13 Mar 2026 10:01:02 +0000
Manifest next update: Sat 14 Mar 2026 10:01:02 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: bZc26lITwD0yLVv+lQb56mG3Y8+U/hY1Ta7wFBYGSBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:71:3e:64:f4:c3:b4:2f:22:ee:b6:cd:43:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Mar 13 10:01:02 2026 GMT
Not After : Mar 14 10:01:02 2026 GMT
Subject: CN=2f725cc78eac5cf4cdc2945f78c503092491b3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:1c:5e:e1:43:26:a9:3f:79:a0:8f:25:ea:
0b:5f:41:97:a6:9a:c1:78:f5:4f:f5:14:76:32:96:
e9:ff:4a:ce:e5:f9:2d:7c:38:35:6a:78:f7:c0:39:
66:fb:e7:0e:c4:de:de:3e:df:2a:76:1e:d3:00:cf:
0e:65:69:66:55:ad:d6:7f:c0:31:e3:61:35:16:20:
29:7f:6d:b4:2c:a7:e0:a1:c0:d1:ed:ac:16:6c:cd:
47:1d:ad:4c:0e:5e:aa:18:1b:0e:15:7a:85:9f:3b:
c5:5a:33:3f:fd:40:3f:6d:7b:6a:75:37:ee:4f:ae:
64:11:4d:f3:cb:f7:13:8c:65:7b:ea:14:ed:2f:38:
40:c5:b6:3b:51:86:e7:15:26:66:67:f2:c2:a0:11:
a7:8c:fe:cc:93:69:83:88:05:64:b6:6e:e4:f1:fd:
16:eb:b3:44:07:4d:21:ea:f9:0c:b0:33:02:88:7f:
b6:0a:af:c6:f7:cb:21:f6:c0:bd:3e:3b:34:91:b7:
6c:7f:07:8c:3e:a4:31:fc:6d:41:39:57:4f:07:bd:
f8:02:da:7d:b3:fb:f2:4a:90:b4:ef:9c:2f:35:32:
a0:4c:30:6e:9f:9b:7c:e8:b8:54:7e:c0:f8:c3:15:
fb:54:d5:24:14:79:0f:44:b9:f4:df:87:18:ff:67:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:5C:C7:8E:AC:5C:F4:CD:C2:94:5F:78:C5:03:09:24:91:B3:B0
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:fc:e7:d3:c7:c3:17:da:2d:e9:59:ce:f7:21:53:87:6c:
a8:7f:65:b0:7f:b0:ac:dd:33:8e:25:56:33:1e:cd:0b:92:df:
34:8a:d0:d1:8e:c1:50:d9:22:9f:d4:a7:7b:83:1b:5f:ab:11:
0c:7c:3e:08:fd:0c:27:69:ff:52:1c:9e:13:29:1b:fc:ea:95:
52:ae:da:d6:7d:d1:49:05:61:a3:69:c7:77:20:f2:15:80:53:
c4:aa:3e:5a:b4:d0:30:7d:28:00:a4:85:5f:c5:41:6b:90:c6:
75:3b:0c:ed:c7:5e:54:e0:33:cd:4a:97:90:5f:6f:c0:a3:56:
b8:a8:8c:a7:23:8c:46:13:54:b7:a0:f0:a8:fb:fd:61:92:8a:
bf:cb:61:e0:d5:71:17:d0:97:a1:9a:d9:3c:9f:69:d5:36:57:
a9:2a:b8:bd:77:ff:52:d3:15:02:9e:14:01:ef:0f:0e:f3:bc:
90:5b:d1:ce:3a:86:90:ec:bc:59:bf:39:10:61:be:f7:cb:93:
55:d6:77:27:65:17:b7:73:ee:62:e3:38:5c:73:39:54:fd:c1:
f7:f2:71:b2:da:ac:3e:20:46:51:c4:4f:9f:8b:a2:11:ff:e2:
f3:f6:19:23:ee:ea:05:5f:18:c8:f5:7d:cf:6a:0a:f5:72:31:
39:39:62:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpHE+ZPTDtC8i7rbNQ4FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi
NjNlZTYwHhcNMjYwMzEzMTAwMTAyWhcNMjYwMzE0MTAwMTAyWjAzMTEwLwYDVQQD
EygyZjcyNWNjNzhlYWM1Y2Y0Y2RjMjk0NWY3OGM1MDMwOTI0OTFiM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EAcXuFDJqk/eaCPJeoLX0GXpprB
ePVP9RR2Mpbp/0rO5fktfDg1anj3wDlm++cOxN7ePt8qdh7TAM8OZWlmVa3Wf8Ax
42E1FiApf220LKfgocDR7awWbM1HHa1MDl6qGBsOFXqFnzvFWjM//UA/bXtqdTfu
T65kEU3zy/cTjGV76hTtLzhAxbY7UYbnFSZmZ/LCoBGnjP7Mk2mDiAVktm7k8f0W
67NEB00h6vkMsDMCiH+2Cq/G98sh9sC9Pjs0kbdsfweMPqQx/G1BOVdPB734Atp9
s/vySpC075wvNTKgTDBun5t86LhUfsD4wxX7VNUkFHkPRLn034cY/2eCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9yXMeOrFz0zcKUX3jFAwkkkbOwMB8GA1UdIwQY
MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt
YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk
LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSv859PH
wxfaLelZzvchU4dsqH9lsH+wrN0zjiVWMx7NC5LfNIrQ0Y7BUNkin9Sne4MbX6sR
DHw+CP0MJ2n/UhyeEykb/OqVUq7a1n3RSQVho2nHdyDyFYBTxKo+WrTQMH0oAKSF
X8VBa5DGdTsM7cdeVOAzzUqXkF9vwKNWuKiMpyOMRhNUt6DwqPv9YZKKv8th4NVx
F9CXoZrZPJ9p1TZXqSq4vXf/UtMVAp4UAe8PDvO8kFvRzjqGkOy8Wb85EGG+98uT
VdZ3J2UXt3PuYuM4XHM5VP3B9/JxstqsPiBGUcRPn4uiEf/i8/YZI+7qBV8YyPV9
z2oK9XIxOTliGg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:19:33 2026 by rpki-client