Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: WpFxHAw7jvSpKdTCo87DlLDcDZiZtgKTRgjjp2keWGM=
Subject key identifier: DB:EF:3F:56:E7:A6:B4:54:38:9C:48:14:36:A5:F7:4D:78:CD:25:D7
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019D284E34D9DB584A07197D22D480CA67EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: LZoc3NH1xvdhaKtZh7r595LzWZA.roa (hash: cnGjanwZ2hKT1myBjJDNeESOJnTd39dvObuBgiZbmh0=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: qnHozVNkWHVz77CmWn7UPjGbjP1lpZM4BnqagGAOAUk=)
3: nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa (hash: Masava5utcSxI/yaL9ocWnZHgg2ad5NPlBu90wVNB2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:34:d9:db:58:4a:07:19:7d:22:d4:80:ca:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=dbef3f56e7a6b454389c481436a5f74d78cd25d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:ef:7b:a4:9d:e7:72:53:ed:d6:ac:98:69:
b8:43:45:23:49:48:a4:43:b3:91:1e:2f:92:1f:96:
c6:b1:70:38:83:b8:f7:f4:bc:07:1e:c1:4b:67:a2:
4c:2c:e3:b0:a2:31:81:fb:31:c4:6d:7c:43:99:42:
b6:6b:a0:30:32:c9:26:33:e6:2b:fd:71:c6:52:8b:
72:d8:a0:7c:f0:94:f1:fb:0f:83:d7:18:05:02:54:
b8:73:2e:ba:0a:aa:f5:0c:22:c1:d1:a6:0c:8b:f7:
11:d0:1f:ad:2a:42:52:8a:72:29:f4:4f:9a:e8:46:
d0:ac:ce:24:5b:ae:c4:00:05:7d:18:30:ca:0b:37:
ce:0f:69:cc:8f:4a:08:c6:9f:50:5d:2a:03:b4:be:
67:16:c7:6f:b2:28:fe:55:83:68:1c:52:2c:92:72:
27:ac:aa:6e:37:48:0a:ad:3b:51:c2:83:58:ec:25:
11:34:8f:fa:b3:de:aa:fa:82:d6:af:33:e3:33:76:
3f:62:5b:0b:e8:35:f6:f3:22:34:59:a3:40:b9:7d:
41:08:bb:2a:f0:99:08:d5:3d:02:e3:05:e0:36:d8:
c0:0e:18:d7:87:72:9c:17:ef:76:22:a6:fb:f1:ea:
60:06:1c:53:25:03:49:55:76:35:72:78:a4:cf:e5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:3F:56:E7:A6:B4:54:38:9C:48:14:36:A5:F7:4D:78:CD:25:D7
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:48:92:49:06:91:a6:67:36:f4:40:81:1f:cd:ef:62:47:
49:75:51:67:db:1b:4c:f1:4a:dc:2c:23:54:7e:56:75:52:47:
cf:76:b6:48:35:96:a2:de:09:9f:12:73:55:9b:fb:9e:1f:7b:
4b:7b:0a:a4:d8:cd:61:b8:97:16:e4:7d:37:12:80:8c:d5:d5:
47:be:d7:5f:0b:d0:e3:1e:6f:bf:13:4c:1a:d6:f7:3e:90:bb:
f8:b8:f3:67:a8:53:84:80:7c:4c:e3:bd:f9:26:28:c7:d0:53:
b8:90:7a:12:38:94:26:c6:93:a3:d2:0d:f5:26:6a:bb:30:0c:
bf:86:bd:66:36:57:08:31:32:ae:9b:37:e2:24:8c:da:d7:3d:
57:ad:9b:ee:dd:58:f6:ec:a5:32:32:32:9c:b4:0e:fd:40:69:
00:ef:69:7b:22:2a:81:0a:6a:aa:36:2a:33:9a:9f:e3:de:81:
71:e0:32:f8:7c:34:e1:df:39:19:f3:2b:2a:67:e0:90:46:da:
9c:17:04:5b:c4:af:7e:2a:97:32:19:dc:9a:55:c7:d8:5f:54:
ae:a9:ae:a3:37:be:4f:73:91:3e:3a:74:f3:71:aa:4d:8f:9e:
3a:bc:b3:4a:3e:ed:1c:3b:84:94:8f:1b:30:91:60:05:fa:ac:
42:f5:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:45 2026 by rpki-client