Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: Hz+TGtm8c6M7e/Dq+dzqyD+YK+chMMs+yt1mVky7lsc=
Subject key identifier: 7F:3C:41:95:FE:0E:FF:52:28:D9:72:02:23:58:D1:55:88:2D:1A:D1
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01A03FDFF93891A6DB02C8A700585250AAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 0446
Signing time: Wed 26 Aug 2026 21:00:37 +0000
Manifest this update: Wed 26 Aug 2026 21:00:37 +0000
Manifest next update: Thu 27 Aug 2026 21:00:37 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: kdufRl9VEfrQ6aZZKP9XbVNK+ytXbnUI8AAWPRKVRFc=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:f9:38:91:a6:db:02:c8:a7:00:58:52:50:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Aug 26 21:00:37 2026 GMT
Not After : Aug 27 21:00:37 2026 GMT
Subject: CN=7f3c4195fe0eff5228d972022358d155882d1ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:d3:f6:d3:8e:2f:1f:b2:08:20:39:0c:c2:
10:c9:c3:93:bb:6e:98:c9:cf:03:45:80:b9:d8:93:
c8:f7:bf:f5:97:b8:0b:0b:a4:ed:77:b2:3d:8a:70:
bf:cf:88:21:bd:fb:8a:a0:f4:d4:4e:9b:77:18:e1:
c9:8a:79:d3:cb:4e:be:a0:f3:35:72:62:5f:64:c4:
e7:d0:63:9a:56:c7:f8:0f:8a:9d:2e:67:62:5d:2b:
1d:33:44:ea:3d:aa:be:41:52:2a:e3:c7:d6:36:c2:
fc:e9:db:c2:21:80:85:5f:e1:0d:b0:ce:47:c1:24:
87:7a:3c:59:6d:f2:82:9b:88:9b:1c:01:04:70:3c:
e8:84:c0:78:ea:cf:8c:7a:1e:e4:d0:df:2f:85:26:
5f:cd:c5:5b:b0:93:69:b3:8d:90:10:ad:70:8b:42:
2a:e9:d3:8e:09:80:d4:be:6a:45:52:b6:2b:bb:ea:
be:87:71:7d:d3:5f:b1:0b:18:ed:d0:d1:3f:d6:24:
cd:c5:97:de:a8:e5:5e:86:b2:b2:e9:4f:37:d4:55:
79:be:30:17:9f:ed:0d:d1:8e:9c:7f:53:96:f9:1c:
4b:d8:c7:b4:47:d7:77:02:be:ee:67:0d:b7:87:8b:
28:ad:5c:f3:63:d7:98:50:6d:c1:3d:cb:9b:f2:22:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:41:95:FE:0E:FF:52:28:D9:72:02:23:58:D1:55:88:2D:1A:D1
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:33:57:98:f4:75:d4:1d:23:52:23:d9:22:f8:6f:4c:3c:71:
5a:fb:91:8e:63:02:3d:88:d7:83:83:22:ac:55:17:7d:9f:23:
16:47:ec:54:1f:73:dc:6d:d5:0d:f9:18:09:6f:c1:3d:b7:52:
7a:ec:2f:ce:e9:dd:a0:90:5d:19:6f:a9:b6:7e:7e:62:29:2b:
86:d1:f7:9a:30:33:7f:a5:0d:b8:6c:3a:59:18:d5:e5:de:73:
1b:74:60:f2:fa:59:55:49:88:c5:c0:91:b7:43:5f:f2:3c:8b:
45:7b:6d:a0:70:c8:30:7a:4d:b2:74:43:1b:f3:46:be:6a:00:
c0:ac:e6:ae:6b:62:74:f8:82:9e:b5:97:14:3c:e3:7c:96:9f:
cf:bd:26:82:d1:80:13:61:5c:c6:2e:df:a7:61:54:db:eb:31:
7f:53:a4:ea:c1:b3:42:17:dd:12:a1:f3:2e:fa:cd:5c:41:d1:
cc:5a:f4:d8:68:dd:44:bb:d1:02:64:7f:1e:f3:cd:70:3f:14:
55:89:b1:cf:42:fd:99:95:8f:b0:a6:b8:ee:9a:38:12:9b:eb:
37:dd:34:70:27:15:b2:7e:fd:9b:8c:1e:69:46:96:3f:86:09:
a3:7a:73:4b:5b:81:6b:a1:6a:96:44:60:ca:19:c0:74:69:0c:
6e:ae:d9:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/3/k4kabbAsinAFhSUKrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi
ZGIzYjkwHhcNMjYwODI2MjEwMDM3WhcNMjYwODI3MjEwMDM3WjAzMTEwLwYDVQQD
Eyg3ZjNjNDE5NWZlMGVmZjUyMjhkOTcyMDIyMzU4ZDE1NTg4MmQxYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JnT9tOOLx+yCCA5DMIQycOTu26Y
yc8DRYC52JPI97/1l7gLC6Ttd7I9inC/z4ghvfuKoPTUTpt3GOHJinnTy06+oPM1
cmJfZMTn0GOaVsf4D4qdLmdiXSsdM0TqPaq+QVIq48fWNsL86dvCIYCFX+ENsM5H
wSSHejxZbfKCm4ibHAEEcDzohMB46s+Meh7k0N8vhSZfzcVbsJNps42QEK1wi0Iq
6dOOCYDUvmpFUrYru+q+h3F901+xCxjt0NE/1iTNxZfeqOVehrKy6U831FV5vjAX
n+0N0Y6cf1OW+RxL2Me0R9d3Ar7uZw23h4sorVzzY9eYUG3BPcub8iLbBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH88QZX+Dv9SKNlyAiNY0VWILRrRMB8GA1UdIwQY
MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt
NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk
LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATNXmPR1
1B0jUiPZIvhvTDxxWvuRjmMCPYjXg4MirFUXfZ8jFkfsVB9z3G3VDfkYCW/BPbdS
euwvzundoJBdGW+ptn5+YikrhtH3mjAzf6UNuGw6WRjV5d5zG3Rg8vpZVUmIxcCR
t0Nf8jyLRXttoHDIMHpNsnRDG/NGvmoAwKzmrmtidPiCnrWXFDzjfJafz70mgtGA
E2Fcxi7fp2FU2+sxf1Ok6sGzQhfdEqHzLvrNXEHRzFr02GjdRLvRAmR/HvPNcD8U
VYmxz0L9mZWPsKa47po4EpvrN900cCcVsn79m4weaUaWP4YJo3pzS1uBa6FqlkRg
yhnAdGkMbq7Z7Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:27 2026 by rpki-client