Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: +mYQwVgd5Yog+yQGB7FAowce0dk6zKJYn+758JM+jWU=
Subject key identifier: DF:D2:4E:68:A0:4F:11:0B:FC:73:68:E2:A2:37:8E:5D:C7:A3:E5:15
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019D39AF32435247082A4F0B4E74260A6767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: LZoc3NH1xvdhaKtZh7r595LzWZA.roa (hash: cnGjanwZ2hKT1myBjJDNeESOJnTd39dvObuBgiZbmh0=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: pILyRG5Q61XHEc73s/q2RmqRj6o2M5b+6z+DEWM8zds=)
3: nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa (hash: Masava5utcSxI/yaL9ocWnZHgg2ad5NPlBu90wVNB2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:32:43:52:47:08:2a:4f:0b:4e:74:26:0a:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=dfd24e68a04f110bfc7368e2a2378e5dc7a3e515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:0b:ee:b9:cf:27:f0:ec:40:55:65:62:41:
af:2b:a6:fc:cb:d4:05:39:62:33:87:c9:96:e0:44:
39:0d:fe:cd:48:82:c1:29:0f:7a:3d:8b:19:89:4d:
ce:9c:6e:22:09:28:c6:76:b0:77:54:93:f2:6b:35:
0a:77:e6:03:1e:be:4f:0c:00:7b:e6:87:da:4d:29:
33:13:28:0d:14:ca:0f:d9:c3:be:4f:da:8c:f8:02:
04:70:4a:ff:b5:11:02:7e:35:e9:44:c0:d9:fc:4a:
09:a0:a2:f4:d9:8f:a0:2e:15:56:f5:ad:43:0e:35:
6f:40:5d:07:a2:16:5c:1d:fc:e8:da:e2:09:8d:7a:
cd:2b:2b:27:a2:88:16:70:20:37:68:46:42:c6:a5:
28:9d:e7:13:6a:6b:fc:bd:8d:99:c4:39:19:cc:2b:
2d:33:21:25:5a:4f:d3:aa:92:b5:bf:fb:a0:c3:98:
95:3d:d0:5c:40:cf:d9:7c:26:12:60:fd:5b:0d:22:
b0:41:ed:39:b4:78:ed:9b:b5:af:fa:63:c9:a9:1c:
75:67:e8:b6:ea:84:ef:22:ec:38:8c:7f:3f:ff:2e:
dc:c9:09:ba:c9:1c:21:a2:c4:ee:3e:6d:2e:71:34:
52:88:a9:fc:c9:c7:9d:8f:f4:8a:2f:14:d3:55:3d:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:4E:68:A0:4F:11:0B:FC:73:68:E2:A2:37:8E:5D:C7:A3:E5:15
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:9f:0a:56:3c:69:16:7b:1a:f0:a4:95:75:e2:6e:59:0f:
b8:19:f9:cb:62:3d:0a:a6:f2:cb:2a:0a:37:72:46:8a:dc:85:
98:26:1e:96:94:df:7c:32:da:a8:0b:6b:52:85:0f:dd:3b:9b:
f2:0b:32:dc:60:30:90:21:4e:2c:8f:9c:78:0a:69:fa:48:a9:
e6:82:92:7a:ae:c6:86:21:05:6a:e3:57:12:da:8d:cf:8f:39:
26:88:6f:6a:ce:f9:f5:8a:a7:88:8a:6d:97:17:44:e6:ff:04:
e9:35:a9:ec:7d:60:75:b1:da:6c:36:6b:1b:6f:8d:aa:4a:76:
58:79:89:26:13:b3:cc:2e:e3:64:93:b2:c1:08:ff:01:8d:fd:
c1:56:ee:fa:d0:2d:bd:ce:6a:fe:d8:02:b3:0e:bf:87:04:50:
44:06:f5:6b:11:56:11:65:04:9e:d1:0d:3c:e3:66:2e:f0:c5:
7a:a1:c8:1e:06:be:9d:57:32:86:a1:f4:51:34:88:b5:10:90:
a0:ad:fa:1b:bb:99:04:56:ee:98:20:06:50:65:93:2f:28:00:
2d:ac:71:8b:30:3b:77:a6:61:34:25:50:d2:5f:5e:32:06:ef:
18:94:b5:f5:ca:6f:fd:0a:40:29:b8:a3:25:a3:79:03:30:e1:
22:f2:a6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzJDUkcIKk8LTnQmCmdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjYwMzI5MTMwMTE2WhcNMjYwMzMwMTMwMTE2WjAzMTEwLwYDVQQD
EyhkZmQyNGU2OGEwNGYxMTBiZmM3MzY4ZTJhMjM3OGU1ZGM3YTNlNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcEL7rnPJ/DsQFVlYkGvK6b8y9QF
OWIzh8mW4EQ5Df7NSILBKQ96PYsZiU3OnG4iCSjGdrB3VJPyazUKd+YDHr5PDAB7
5ofaTSkzEygNFMoP2cO+T9qM+AIEcEr/tRECfjXpRMDZ/EoJoKL02Y+gLhVW9a1D
DjVvQF0HohZcHfzo2uIJjXrNKysnoogWcCA3aEZCxqUonecTamv8vY2ZxDkZzCst
MyElWk/TqpK1v/ugw5iVPdBcQM/ZfCYSYP1bDSKwQe05tHjtm7Wv+mPJqRx1Z+i2
6oTvIuw4jH8//y7cyQm6yRwhosTuPm0ucTRSiKn8ycedj/SKLxTTVT2g6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/STmigTxEL/HNo4qI3jl3Ho+UVMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrGfClY8
aRZ7GvCklXXiblkPuBn5y2I9CqbyyyoKN3JGityFmCYelpTffDLaqAtrUoUP3Tub
8gsy3GAwkCFOLI+ceApp+kip5oKSeq7GhiEFauNXEtqNz485Johvas759YqniIpt
lxdE5v8E6TWp7H1gdbHabDZrG2+Nqkp2WHmJJhOzzC7jZJOywQj/AY39wVbu+tAt
vc5q/tgCsw6/hwRQRAb1axFWEWUEntENPONmLvDFeqHIHga+nVcyhqH0UTSItRCQ
oK36G7uZBFbumCAGUGWTLygALaxxizA7d6ZhNCVQ0l9eMgbvGJS19cpv/QpAKbij
JaN5AzDhIvKmyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client