Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: tYNyUdTQvpw7DdopBKG2s8Bx/D/fAB1tgWQW37uL1tk=
Subject key identifier: C2:24:DA:FE:F7:0B:5B:DA:42:D6:D3:B7:1E:4F:42:54:07:30:DB:33
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019F54458D2B2E50FD3AC01E43A12366F67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 03CC
Signing time: Sun 12 Jul 2026 03:01:11 +0000
Manifest this update: Sun 12 Jul 2026 03:01:11 +0000
Manifest next update: Mon 13 Jul 2026 03:01:11 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: ooH36JN+OtjjIrUDzvEjrtBeYSQV8h9Fj/LTUuFgSq4=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:54:45:8d:2b:2e:50:fd:3a:c0:1e:43:a1:23:66:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Jul 12 03:01:11 2026 GMT
Not After : Jul 13 03:01:11 2026 GMT
Subject: CN=c224dafef70b5bda42d6d3b71e4f42540730db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:20:6d:cd:be:96:7e:cf:62:e0:e3:92:3a:
db:ad:9e:97:42:31:a0:1c:5c:90:72:ae:ad:75:39:
08:11:fe:b5:59:fc:f7:6e:d8:ad:85:4f:47:d0:d7:
5c:4e:0c:f3:52:63:fa:7a:98:ed:6b:36:70:1c:a9:
a1:7d:43:39:96:89:9c:07:8f:b5:ad:02:b6:d3:a0:
c6:0c:3c:f4:30:2d:d9:c2:13:c8:87:0c:b0:26:82:
70:79:d0:0c:1f:3a:f3:48:80:5f:3a:6a:b4:d4:cf:
e9:66:18:34:40:8b:5c:1f:d3:20:2a:0c:7e:34:46:
3c:82:ab:a7:59:41:8f:1c:99:05:56:8a:ad:80:13:
33:82:5a:9e:05:22:40:bc:cd:df:61:59:cf:63:8b:
2b:61:3f:99:56:ca:03:07:8d:db:aa:e2:e5:1d:cb:
ea:c6:a9:b7:79:34:e9:f2:22:00:d6:e1:1c:4d:35:
58:bd:06:94:c0:16:85:92:3d:9a:5e:98:0f:ef:01:
a4:48:17:21:3e:ad:d1:3d:07:ed:8f:86:86:17:c4:
6a:d8:f6:25:d0:f2:e9:db:ea:fe:af:8b:f6:18:12:
ba:bf:2c:07:50:12:b1:a2:86:ed:7f:62:e4:09:4e:
62:5c:52:76:81:4e:f9:1e:7c:cc:c7:32:b2:35:94:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:DA:FE:F7:0B:5B:DA:42:D6:D3:B7:1E:4F:42:54:07:30:DB:33
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:88:3f:41:e2:da:9e:b4:13:57:81:e8:c2:d3:e9:05:bb:06:
6c:6c:ed:5b:28:9e:2b:e6:0e:3e:87:b2:55:e5:cb:07:a7:06:
65:37:66:b1:ed:e1:da:bd:77:8d:e3:35:a6:0b:51:d7:05:30:
79:3f:11:a2:ed:ad:51:fb:74:a1:e4:5d:3d:84:0b:b9:93:b6:
08:e0:76:f3:1b:bf:37:25:4b:55:01:62:32:2c:05:ca:17:5d:
bf:d2:af:92:7e:d2:d0:81:9c:8a:fd:f9:e9:99:35:17:ed:2e:
5d:24:ef:e3:35:99:8f:e0:4e:bb:da:64:2c:81:ce:de:c0:29:
ff:17:02:6a:8d:c1:fd:dd:a7:99:f1:64:e1:f6:3d:11:15:22:
11:cf:26:c9:30:7d:07:c6:a4:6d:56:84:a5:b3:fe:80:8d:6d:
ef:e5:19:96:39:9c:a9:45:ca:ad:a7:64:3b:0c:e3:2c:69:62:
10:f9:42:98:96:ce:54:e5:28:cf:64:94:14:4e:45:6d:78:71:
12:1c:5c:7b:9c:9b:4a:05:71:b2:f6:da:e4:14:5a:02:86:da:
7e:8a:c9:98:ac:82:20:46:9a:92:8b:7e:6a:f5:2d:91:06:53:
1f:17:9d:e6:ee:6e:df:67:25:a4:63:fc:84:18:ff:82:fa:5b:
93:4c:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:06:29 2026 by rpki-client