Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: 3BCtf54CEC0SOcYcN6FLoowN+j1AZSS59gm+UpVBIqU=
Subject key identifier: 37:B0:F5:FE:96:DD:91:2F:3B:D5:BB:87:95:0C:7C:B2:16:F2:61:D9
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01A1DB38615570543C91319EE000EC6F68DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 051B
Signing time: Sat 14 Nov 2026 18:01:07 +0000
Manifest this update: Sat 14 Nov 2026 18:01:07 +0000
Manifest next update: Sun 15 Nov 2026 18:01:07 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: AiXSg9spSOrakio8Z24uC9oQ4nl+1wZLdZ4o1EUDMUQ=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:61:55:70:54:3c:91:31:9e:e0:00:ec:6f:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Nov 14 18:01:07 2026 GMT
Not After : Nov 15 18:01:07 2026 GMT
Subject: CN=37b0f5fe96dd912f3bd5bb87950c7cb216f261d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:d3:ee:37:54:47:54:34:95:78:62:23:fc:
f1:c3:35:5b:75:b2:3d:32:32:95:14:12:a1:b7:44:
0b:7e:25:ca:13:55:2a:d5:a3:ac:a6:db:f5:b8:0f:
59:0c:53:9b:3f:c8:91:09:bc:eb:3f:4c:06:94:32:
46:36:65:87:f3:4e:42:f6:75:19:56:fd:e4:d9:5b:
22:c5:4a:ac:78:76:eb:3a:97:99:d3:e1:9d:a3:3d:
05:c8:54:a0:b4:20:1f:7b:02:6b:c2:b2:d8:32:c4:
8e:03:7d:d7:c2:1f:62:10:95:d2:ea:a2:58:e0:bd:
5f:09:72:12:6f:6f:43:99:3d:f0:8f:bd:c7:11:8f:
bf:09:5b:cf:a3:6f:b2:09:79:47:f6:0d:69:80:35:
45:63:32:e9:62:1a:1d:bd:d6:61:7b:b7:62:06:52:
e2:93:83:f5:46:5a:32:80:d4:1c:33:c7:60:73:c3:
bd:08:a5:d8:54:94:d5:7e:b8:19:f6:5e:74:42:79:
6e:bd:ae:84:b3:5f:74:a6:be:66:69:de:48:0f:b7:
a4:7b:41:cb:49:eb:20:c3:11:ca:b9:84:ee:d9:5e:
7c:92:3a:f3:f8:12:dc:16:ca:95:84:3e:94:a4:a5:
55:66:75:d0:97:80:1e:b3:56:20:1e:8a:b6:97:b2:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:F5:FE:96:DD:91:2F:3B:D5:BB:87:95:0C:7C:B2:16:F2:61:D9
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4c:d0:8e:a3:27:e9:b1:69:fb:35:c3:21:9c:ce:be:60:e6:
c9:68:8f:5b:8c:38:bd:74:06:77:da:7d:0b:58:8b:5b:3c:90:
b8:f5:74:f2:4a:0f:83:7a:c4:7c:17:ee:ad:e7:c3:80:da:35:
be:b4:71:18:6d:c3:c2:c8:0b:c5:93:cd:54:ef:7a:8c:78:4f:
0f:74:4b:d8:a3:b7:44:a9:8d:d3:6b:86:00:cc:9c:83:1a:ae:
f4:96:e1:97:85:52:04:d5:ed:d0:0b:a1:87:0c:08:c6:59:10:
d1:6f:bf:cd:36:84:50:19:f0:84:c4:6d:8d:4b:5b:9f:87:0e:
54:1d:6c:78:f2:54:41:a5:fb:1b:b1:e6:eb:52:b1:a3:0d:26:
8c:7f:ce:c0:e1:6b:30:b8:d6:3e:26:3b:0b:86:38:3b:1a:26:
fb:64:eb:c4:b5:ce:bd:36:c8:2f:00:a7:e6:1e:da:e6:7b:c8:
a0:04:36:87:84:0c:cd:66:a4:4f:54:09:65:43:52:b6:b9:f8:
f2:c4:23:c5:3c:58:af:58:3d:e6:4c:5c:8f:a3:58:21:9e:c8:
dc:96:68:a6:0d:94:7e:3a:6a:60:02:00:13:d4:5d:3e:df:7a:
72:ba:90:a5:64:40:4d:1d:d5:cd:68:fa:b2:71:92:b6:a0:34:
bb:ba:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:09:03 2026 by rpki-client