Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: zKK4xdzAtPaHAPtMz40uNSDkU4V8KZw0fxXABbtz4qg=
Subject key identifier: 2A:5C:00:1D:33:B4:1A:11:A8:00:15:F4:44:C0:6B:FF:57:38:C7:7F
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01A138FFE82FD7AD6AD878B9E8733A0012A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 04C7
Signing time: Wed 14 Oct 2026 06:00:57 +0000
Manifest this update: Wed 14 Oct 2026 06:00:57 +0000
Manifest next update: Thu 15 Oct 2026 06:00:57 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: eGyil8qnKzpkPJ0XyqKu40WkSFY6XhYCAStVXEu2PcI=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:e8:2f:d7:ad:6a:d8:78:b9:e8:73:3a:00:12:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Oct 14 06:00:57 2026 GMT
Not After : Oct 15 06:00:57 2026 GMT
Subject: CN=2a5c001d33b41a11a80015f444c06bff5738c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:f7:45:d9:b6:f8:32:43:9f:c6:87:95:b1:
99:18:64:06:1f:c5:74:5d:e4:71:c0:c4:c6:a3:fa:
fb:4c:d0:88:f6:e2:d1:7d:e0:3a:e6:e3:6f:13:56:
a3:a4:fc:3a:42:0a:65:41:57:51:9d:68:52:e7:46:
b1:0d:85:49:b0:e9:0f:51:48:41:48:43:9b:44:a7:
25:02:d6:06:98:95:52:fe:67:11:9b:60:be:d9:1b:
11:bc:82:34:d6:3c:9a:32:4f:59:43:6b:9e:fb:f0:
48:94:10:15:14:6f:2a:74:bd:0b:6b:e1:88:06:32:
2d:2d:ba:5f:32:6e:59:42:dd:fe:e6:85:6b:58:d8:
c9:4e:99:25:34:6b:b6:a6:0f:3a:5f:e2:07:a7:e8:
08:d1:88:70:9c:50:67:85:a8:ed:05:93:59:72:b3:
e7:c6:a3:60:de:c6:d6:11:eb:ea:c2:12:95:c8:26:
98:17:5e:59:cf:58:38:2d:07:af:e1:e2:10:26:70:
a0:bd:72:75:dc:fa:6d:6b:96:c1:f5:f0:aa:69:98:
52:06:80:f3:58:be:2c:06:fa:e0:86:aa:0a:00:2d:
42:00:f5:9b:39:a5:d6:7f:92:3e:13:fc:1c:b8:89:
8c:a1:d7:0d:de:12:ea:43:08:88:77:b7:30:4c:c7:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:00:1D:33:B4:1A:11:A8:00:15:F4:44:C0:6B:FF:57:38:C7:7F
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:d5:3c:6f:06:ca:95:ca:4d:11:0b:65:3f:34:5d:e8:24:
8f:f5:3c:8c:4b:d0:dc:23:c6:04:0e:7b:0c:24:b7:9e:4b:9f:
ab:ad:91:50:b2:1d:b7:d8:65:ed:56:f4:b6:15:09:57:f2:05:
f2:a8:b0:b9:36:a0:cc:af:9e:d1:82:0d:99:9e:3f:5e:45:18:
b4:da:9e:88:3c:02:e6:9a:e0:bc:46:9f:79:1c:04:a2:58:54:
c3:3a:53:78:d5:55:b6:d2:fc:0a:2b:5f:03:86:ea:0c:bf:d6:
64:9d:2b:9c:3b:d2:d1:c3:83:6c:ee:aa:02:c7:c3:1c:d2:5d:
31:7a:0a:8e:4b:7c:ac:45:7d:13:5e:be:65:83:0c:11:2d:f5:
ef:34:32:75:f2:1e:40:ac:b8:53:e8:06:bd:17:f2:1e:f2:84:
97:b2:ff:ab:18:29:e1:82:b0:20:f8:f7:c3:3b:c9:b3:5c:09:
21:b4:ff:1d:5a:e4:45:40:0b:a0:9d:e8:51:2b:24:73:c7:ee:
59:5e:d6:ee:7a:3d:63:b6:e5:4f:90:b9:67:8c:f2:62:c1:0d:
c4:c4:50:2a:ef:ca:8d:43:76:63:84:78:2e:f1:21:9f:32:a8:
1f:a4:b8:52:29:2a:1a:d6:e8:d4:03:78:03:06:aa:75:53:5d:
55:1b:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:53:25 2026 by rpki-client