
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier: K737xdLYulVdy9lL4xY+9YGiIHqKTMYl/+5w8s3WBP8=
Subject key identifier: 55:53:C1:73:47:22:7F:23:58:99:9B:D3:3A:81:7F:F0:06:66:91:F2
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019D2C60C66BFDB527241C7FA278F577482D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number: C0
Signing time: Thu 26 Mar 2026 23:00:32 +0000
Manifest this update: Thu 26 Mar 2026 23:00:32 +0000
Manifest next update: Fri 27 Mar 2026 23:00:32 +0000
Files and hashes: 1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: AjNzpiMKcLPm/r3IdGPevR5fic1SkCb7E4wdO7sTseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:c6:6b:fd:b5:27:24:1c:7f:a2:78:f5:77:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Mar 26 23:00:32 2026 GMT
Not After : Mar 27 23:00:32 2026 GMT
Subject: CN=5553c17347227f2358999bd33a817ff0066691f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:75:f8:d1:27:14:56:bf:2a:b7:4c:d7:89:
c3:96:37:3f:11:99:ce:4c:f7:56:95:1d:97:06:8c:
94:a4:1f:94:b6:f4:af:a6:35:42:90:3d:80:c8:00:
c5:2f:e0:9b:96:f4:1d:ca:e5:31:27:df:46:a7:de:
6e:3a:1b:dc:ae:f3:e9:29:57:8f:6a:f9:5e:67:67:
26:0a:77:e7:b1:ef:aa:f6:bf:27:e1:a0:c4:fb:ea:
9c:f7:dc:42:b2:8d:6b:43:fc:e4:88:82:fd:81:05:
b3:27:47:7a:f3:7f:5c:13:72:50:be:1b:32:75:c4:
8b:c3:e1:f8:ad:15:ef:d4:33:7e:68:91:57:b5:d4:
46:98:5a:cf:b4:60:04:6e:a1:2f:b0:7b:83:17:16:
f9:3a:56:3a:dd:a5:f6:b8:c4:d3:77:4c:04:0b:98:
4b:5a:3f:38:71:7f:e1:62:c3:c7:7c:2c:51:e4:9b:
57:57:11:de:80:10:e7:ac:fb:22:83:b4:e4:a6:fa:
0c:92:69:8f:4b:0a:35:46:8f:60:9f:2c:79:e2:99:
1d:7b:55:c6:9e:79:80:fd:47:4f:a2:f8:63:a5:fa:
a0:2c:cf:3b:82:6e:b7:ee:ad:77:cd:36:a4:cc:1d:
d8:6e:cc:26:48:6a:80:07:1e:09:77:ba:13:2e:7d:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:C1:73:47:22:7F:23:58:99:9B:D3:3A:81:7F:F0:06:66:91:F2
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:db:6b:1c:f5:f9:5a:33:ab:4a:7d:24:a3:ba:27:13:b0:49:
1f:47:83:9c:66:6e:3a:ae:35:49:7a:c6:5e:1f:da:13:2b:78:
78:67:25:89:ec:92:22:fa:61:80:5c:b8:c7:3f:1f:c8:0c:46:
4b:1a:85:48:ed:df:a1:37:5a:d5:b2:70:ef:51:26:19:83:1e:
44:b4:4f:1b:10:8d:fa:6e:92:4c:90:21:52:e8:72:83:8e:a7:
bd:6b:d5:2e:65:ce:91:69:e4:f3:bb:fb:7f:8d:2e:52:74:15:
b9:51:32:a7:62:e6:13:ff:e9:91:8f:f3:30:59:a7:44:54:f9:
2d:35:cd:86:9f:0b:21:44:92:c1:d2:43:e6:ee:22:1a:d9:99:
99:24:cc:27:3e:3b:17:b5:7b:bc:c3:93:dd:fd:80:a7:59:fe:
3b:89:e1:3d:b2:75:9f:45:45:b3:34:91:e5:56:6c:1f:5a:1f:
25:ee:1a:73:37:a9:4d:d0:0c:90:10:b2:74:4a:13:6d:3c:a9:
13:42:a8:f9:e9:43:5e:41:13:76:1a:20:62:d3:3b:7b:6e:1f:
c8:45:89:9c:5c:3c:99:19:f4:13:99:eb:03:4d:b4:17:95:c0:
09:63:1f:36:46:4d:8b:b5:72:a7:ba:9a:c9:3e:b2:d0:3d:18:
2e:47:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:52 2026 by rpki-client