Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: ooA9VP/HXdtVCbrP88Wz3Dn254qcxBBhybmokcT96BI=
Subject key identifier: D7:1F:57:E4:15:A6:AD:43:63:15:6E:14:1F:EE:50:12:2C:C2:35:79
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019D37897D521B96D234C5A7242B29CAA724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 02B4
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: IXZ++ZgSKf6mI3w2XDIvpJFwcIDIWdcTcxA8+4774Sk=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7d:52:1b:96:d2:34:c5:a7:24:2b:29:ca:a7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=d71f57e415a6ad4363156e141fee50122cc23579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:e8:23:9d:eb:bf:ae:95:3c:a7:db:44:05:
4e:e7:89:b6:f3:7b:84:66:55:25:5c:d8:01:6e:9d:
c0:76:8c:43:48:d2:da:a6:9f:dd:d5:6b:ec:fd:0f:
7e:e7:99:96:82:79:58:82:b6:5f:b9:50:67:63:85:
73:bd:30:c1:a0:8e:29:e7:3a:54:e3:e9:c9:e1:21:
7c:1e:db:05:59:59:9c:7d:bb:cd:f5:02:15:55:8a:
c7:23:3e:e0:da:5e:39:25:1a:cd:ac:ef:5f:00:4d:
2d:a7:da:a3:ae:7d:cd:b3:d9:b7:d9:c8:b6:24:74:
98:e9:26:7c:98:a6:c3:d8:1a:bc:0e:c4:1f:31:fc:
e3:2a:fc:f1:f7:18:38:7d:54:70:c5:e1:7c:bf:8c:
97:d2:60:04:01:b7:94:b1:3b:f3:7d:78:82:69:e0:
b1:53:d7:33:92:ca:35:1b:49:b4:b9:9b:66:a6:8d:
47:a2:f3:b2:82:a0:d4:02:8b:ba:7f:85:9b:1f:64:
72:d9:b2:bf:44:58:b2:e2:13:4e:6a:17:9f:c5:7d:
9b:53:70:04:11:20:a4:9d:3f:b2:c7:05:b4:ec:15:
d7:d9:05:cb:37:e0:c3:70:a1:35:05:79:90:5f:fb:
ed:26:2b:f9:78:4b:9d:d1:89:78:7a:14:d0:e6:c6:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:57:E4:15:A6:AD:43:63:15:6E:14:1F:EE:50:12:2C:C2:35:79
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:49:19:08:c3:8c:29:36:8f:d2:d4:77:8f:96:46:31:f8:
42:74:bb:9c:80:a5:f7:f3:62:1f:78:16:d3:73:8d:4c:34:f5:
14:e5:c0:af:15:4a:36:38:e8:df:22:27:32:eb:92:69:be:4b:
a0:fd:53:1f:1a:20:bb:df:00:14:ed:13:c0:2a:2a:9a:ee:7e:
e9:a8:1b:60:f4:f4:4c:23:99:3b:a1:14:6d:d5:91:28:ed:f9:
42:8d:35:b9:84:0d:2e:5d:b2:ee:44:42:44:38:3b:79:1c:a3:
00:c7:70:43:40:f3:17:80:73:87:f1:8e:ea:6a:f7:23:6c:97:
3c:dc:33:b8:70:ed:c6:73:66:c4:73:cd:a9:f8:50:5d:6b:ba:
56:95:25:72:27:25:31:33:a1:c6:53:42:75:48:9e:2e:6a:19:
46:f5:52:84:90:1d:d7:e3:6c:fb:da:c0:17:14:e1:65:85:68:
5f:1e:d6:19:f3:55:f7:1a:18:b5:ee:fc:3e:ea:22:c3:4d:7b:
4a:79:dc:2b:75:9a:b4:e9:66:9f:22:58:0b:a1:54:5c:88:2c:
a3:87:cc:5e:60:d7:8b:a5:ec:b0:e3:03:39:57:f3:5c:1f:a0:
c4:55:b3:47:1c:1d:7a:6b:94:fb:e5:75:20:0e:8b:52:1f:9e:
54:e9:30:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iX1SG5bSNMWnJCspyqckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi
ZGIzYjkwHhcNMjYwMzI5MDMwMDUwWhcNMjYwMzMwMDMwMDUwWjAzMTEwLwYDVQQD
EyhkNzFmNTdlNDE1YTZhZDQzNjMxNTZlMTQxZmVlNTAxMjJjYzIzNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnoI53rv66VPKfbRAVO54m283uE
ZlUlXNgBbp3AdoxDSNLapp/d1Wvs/Q9+55mWgnlYgrZfuVBnY4VzvTDBoI4p5zpU
4+nJ4SF8HtsFWVmcfbvN9QIVVYrHIz7g2l45JRrNrO9fAE0tp9qjrn3Ns9m32ci2
JHSY6SZ8mKbD2Bq8DsQfMfzjKvzx9xg4fVRwxeF8v4yX0mAEAbeUsTvzfXiCaeCx
U9czkso1G0m0uZtmpo1HovOygqDUAou6f4WbH2Ry2bK/RFiy4hNOahefxX2bU3AE
ESCknT+yxwW07BXX2QXLN+DDcKE1BXmQX/vtJiv5eEud0Yl4ehTQ5sYjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcfV+QVpq1DYxVuFB/uUBIswjV5MB8GA1UdIwQY
MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt
NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk
LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCxJGQjD
jCk2j9LUd4+WRjH4QnS7nICl9/NiH3gW03ONTDT1FOXArxVKNjjo3yInMuuSab5L
oP1THxogu98AFO0TwCoqmu5+6agbYPT0TCOZO6EUbdWRKO35Qo01uYQNLl2y7kRC
RDg7eRyjAMdwQ0DzF4Bzh/GO6mr3I2yXPNwzuHDtxnNmxHPNqfhQXWu6VpUlcicl
MTOhxlNCdUieLmoZRvVShJAd1+Ns+9rAFxThZYVoXx7WGfNV9xoYte78Puoiw017
SnncK3WatOlmnyJYC6FUXIgso4fMXmDXi6XssOMDOVfzXB+gxFWzRxwdemuU++V1
IA6LUh+eVOkwpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:38 2026 by rpki-client