Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier: ZVvbgEBkLpA4+nNUK0br1mMCqbVs+EqoeyT6/MJtMPQ=
Subject key identifier: AC:62:B7:84:95:E1:AC:F8:FF:6F:33:52:5D:E7:AD:58:20:4A:9D:F3
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019D2A72B71A222D1C0D0E4F7A5A2775C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number: BF
Signing time: Thu 26 Mar 2026 14:00:54 +0000
Manifest this update: Thu 26 Mar 2026 14:00:54 +0000
Manifest next update: Fri 27 Mar 2026 14:00:54 +0000
Files and hashes: 1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: hggbI/WSEys88wdWdx6ZNPL116LjTYlneQLnn56pYN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b7:1a:22:2d:1c:0d:0e:4f:7a:5a:27:75:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Mar 26 14:00:54 2026 GMT
Not After : Mar 27 14:00:54 2026 GMT
Subject: CN=ac62b78495e1acf8ff6f33525de7ad58204a9df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:8d:15:06:1b:fa:73:61:e0:2c:b1:bd:08:
de:3c:5d:16:4b:19:c7:12:60:00:ef:27:cc:3e:60:
e0:75:ca:9d:12:d8:56:49:42:41:d2:b8:a0:a3:3d:
92:a7:36:84:45:23:91:2f:a7:04:12:a5:6e:36:b1:
69:dc:52:a7:a9:31:6e:bd:90:37:43:51:b7:c4:fa:
5c:d2:59:17:be:93:b3:66:01:90:5e:fa:2b:4a:6e:
4c:46:8c:00:3f:97:0c:95:4f:11:ba:5b:14:7e:68:
4a:3e:51:79:c8:14:54:60:4e:2b:68:8e:ed:07:2b:
65:4f:07:72:de:d7:6c:40:f4:10:0d:4a:a9:88:a7:
8a:4b:1c:10:81:ca:ff:65:34:4e:32:09:69:44:4c:
a5:9d:54:6e:b0:a4:99:b2:89:0a:7c:92:09:35:36:
a6:57:a0:ae:9f:32:a8:9d:af:b4:f3:51:c3:c1:db:
8f:61:06:60:98:8a:18:91:8e:10:10:a0:6c:81:3c:
64:1d:e9:d8:74:b5:3c:da:9a:d8:95:4e:43:49:f1:
ee:59:87:3a:9e:0b:58:86:f9:c5:ca:ca:fb:1c:2c:
a9:f7:7f:c2:ff:32:44:58:17:44:e3:b2:ea:38:39:
7c:97:31:51:9f:37:78:55:b2:6f:d6:00:eb:38:95:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:B7:84:95:E1:AC:F8:FF:6F:33:52:5D:E7:AD:58:20:4A:9D:F3
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:ee:f4:ff:14:6c:8e:b9:79:c7:a5:ce:2b:b7:b0:5f:17:
03:04:0c:13:54:10:7b:4e:52:8f:13:71:fb:2d:47:bb:64:ed:
a9:0f:f0:e8:da:19:45:02:62:ee:1e:ea:70:09:84:f6:8d:56:
2d:99:1a:54:5f:a3:c5:4f:8a:b1:6e:8c:09:97:ff:f8:7b:0f:
20:89:4b:26:e1:ef:9a:e7:66:c4:b0:39:4c:c8:93:ad:f2:9c:
a3:33:d9:e6:d8:f9:a5:f1:e0:02:d4:be:20:f1:d3:6f:cb:12:
72:c6:14:08:d9:29:69:3a:19:21:49:6f:66:4e:99:5c:a1:34:
28:5f:46:cf:ab:b9:7d:83:c8:96:eb:cf:67:73:28:15:21:1c:
69:e1:6a:e5:83:ee:8a:3f:e6:05:c9:c5:74:f3:e0:66:5e:ce:
d2:88:81:33:f3:83:ee:f1:57:30:05:04:31:86:ec:2b:ad:bb:
b0:35:2a:26:58:fd:76:06:d5:30:01:72:ee:88:be:b4:95:cd:
d5:65:eb:9a:f2:5e:9f:05:3f:da:19:df:dd:5c:fb:0a:91:17:
df:c0:83:26:d2:59:1d:18:54:62:5b:6b:47:71:3e:3d:ec:a1:
a3:06:ea:47:6d:b5:63:ca:62:00:4c:e7:14:1b:ea:85:fd:53:
d6:51:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:15 2026 by rpki-client