Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: eWHQqlv9Rhq6pala0lHhoYmAHjUs+dlLJFxTPz30qZ8=
Subject key identifier: 09:B2:FE:4F:E5:F2:7D:F2:A0:6B:3F:BC:4E:1B:8A:82:6D:E0:90:6A
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019E1D90C177AC8A9A5140A267188B4E02A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: q7UunOn61oezZkbf4jMJlZr//hnsWhY1StuEKaXqSN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c1:77:ac:8a:9a:51:40:a2:67:18:8b:4e:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=09b2fe4fe5f27df2a06b3fbc4e1b8a826de0906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:8a:85:09:a8:b8:7f:53:ab:d6:c7:80:76:
2a:de:2d:be:ee:ea:bf:b7:f8:19:d8:bc:75:74:c8:
5b:86:99:3b:e3:b9:85:31:6d:29:df:8c:b9:f2:83:
c9:db:86:ef:c9:7d:6f:43:e6:f7:7f:3c:0c:71:b3:
68:36:3c:79:2f:a8:92:35:01:b1:cd:a4:b0:2e:c1:
db:fe:01:e9:c0:e9:71:f4:93:39:20:1c:6f:d7:9c:
f1:34:a9:b8:a1:2c:c5:72:c3:df:e0:42:20:ef:2a:
7b:21:b7:80:17:e9:21:92:52:7d:40:c2:c4:45:90:
60:61:30:39:a1:f0:bc:50:d2:37:ce:13:81:9a:b9:
f2:c5:c7:6c:a4:22:ec:b4:4a:7e:4f:79:7e:ff:ba:
47:6f:ab:18:13:1e:00:18:89:67:c0:e9:e9:13:2b:
c3:ac:9f:e9:fb:79:1c:72:f3:73:62:db:2d:6c:3a:
1c:0d:d9:df:84:b0:c7:84:25:48:5c:45:b9:26:3e:
16:b5:e2:2c:21:6c:bd:51:bf:90:aa:e2:b4:0d:7c:
9e:5d:04:34:72:ef:7b:f1:9b:47:57:3f:a2:25:a2:
d2:bf:c9:a1:e0:dd:0d:10:18:9b:cc:a4:c6:f7:58:
fc:9c:38:4e:8b:76:f1:10:e6:5d:17:49:0f:5a:30:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:FE:4F:E5:F2:7D:F2:A0:6B:3F:BC:4E:1B:8A:82:6D:E0:90:6A
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:7b:a8:8a:14:67:38:f5:86:d8:64:8a:a3:ab:d6:80:68:
e4:ce:b8:57:40:ad:0e:c4:83:a7:a7:ee:34:a6:e7:35:11:a6:
4c:9a:aa:f5:12:5e:b3:4d:97:67:d1:17:87:a6:08:fd:95:bc:
26:67:84:c4:88:08:b0:9e:dd:78:0d:ba:1e:2c:1f:af:e3:46:
b9:9c:d0:5f:1b:a9:29:1f:9b:1b:96:b8:cd:0f:a3:df:fc:39:
a7:01:40:f4:55:16:a0:31:f9:92:91:08:75:c2:85:5e:4e:e4:
dd:a2:41:63:d7:60:39:4e:81:2b:50:f0:2a:c9:9c:41:b4:a4:
25:cc:46:ab:9d:83:c9:46:89:b1:f9:01:71:fa:03:46:cc:49:
66:ea:d3:af:7c:d5:6f:b4:b1:9a:03:f1:40:7a:c9:0e:b3:e8:
61:7d:77:ed:11:69:a3:46:72:9a:23:74:ed:06:f6:98:23:87:
f0:66:78:af:76:26:8a:ac:d6:1b:3a:1f:86:bf:b6:2d:4a:0a:
f2:37:e8:04:38:6e:8b:5b:35:30:34:57:9b:a8:c4:fe:fa:02:
28:05:22:ba:fd:68:d4:e8:e9:3a:43:57:09:fb:11:66:69:d0:
73:97:05:e6:bf:92:74:b4:ef:ac:1e:a8:29:2b:4a:55:96:5d:
7f:4a:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:34 2026 by rpki-client