Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: fl91BVYTqZqPx+aKmNjR6j3qlUCRQI0WaYIJNssCc5g=
Subject key identifier: 72:B1:1B:E5:D4:97:F3:96:41:54:5B:75:20:03:22:A8:C3:DE:FC:0A
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019F90230DBDBBEDD589BCD33BE380249B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 03EB
Signing time: Thu 23 Jul 2026 18:00:44 +0000
Manifest this update: Thu 23 Jul 2026 18:00:44 +0000
Manifest next update: Fri 24 Jul 2026 18:00:44 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: 7DwKcIuQpkRIioM1IejtKm0v+FGExt+xpt/uvtf0RYI=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:0d:bd:bb:ed:d5:89:bc:d3:3b:e3:80:24:9b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Jul 23 18:00:44 2026 GMT
Not After : Jul 24 18:00:44 2026 GMT
Subject: CN=72b11be5d497f39641545b75200322a8c3defc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:3b:de:99:85:dd:a3:52:f4:7a:63:99:9c:
62:7d:ed:cb:db:6e:af:6d:92:6b:51:44:0a:4a:4f:
3c:8c:ad:70:90:b4:12:9a:4f:20:06:dc:52:54:a3:
b6:70:51:d1:62:aa:4e:24:a3:fb:0a:3a:8a:2d:d6:
3e:da:d1:ba:31:34:ed:54:1b:25:b9:a6:9d:bb:a0:
e9:6d:85:a3:cc:17:d5:35:a7:2a:5c:44:84:db:5f:
b5:cb:ba:48:32:74:9c:ed:aa:ff:20:3c:e6:90:c6:
21:3f:46:84:87:05:0a:e1:5c:b3:be:d9:3e:ee:c3:
e6:cf:44:6e:a3:59:0e:05:d7:2b:43:5e:52:3b:74:
b1:7f:81:07:18:a9:b1:95:ce:85:a6:cd:18:9d:04:
63:15:3c:0d:c4:28:a7:33:a6:d3:cc:b4:5c:8d:e3:
98:41:ae:42:35:7c:9f:eb:21:a8:b8:15:17:ea:4a:
92:6e:2a:b7:89:6c:bb:6b:66:de:37:47:8f:7e:18:
6b:35:44:cb:ae:3b:33:01:07:62:b3:f4:6f:d3:09:
f2:b5:72:81:68:07:f1:ec:6b:21:d1:a5:ff:44:77:
2f:4e:10:c8:8e:95:61:79:a2:49:43:1f:19:79:91:
b1:e6:ec:35:0d:2b:d2:8c:49:3e:8a:d4:00:28:29:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:1B:E5:D4:97:F3:96:41:54:5B:75:20:03:22:A8:C3:DE:FC:0A
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:2c:c6:51:cc:41:75:f5:4f:b6:68:a2:2e:5c:61:5e:12:
95:6c:1a:df:d9:86:af:0e:5c:70:ac:7b:d0:ab:3f:7c:9a:37:
80:fe:cb:11:6e:d9:09:54:d9:25:a8:3b:c9:24:7e:12:24:22:
c0:b0:be:68:8a:4c:66:32:38:e7:02:5a:3e:d0:86:1e:cc:5f:
f1:39:36:a5:61:16:0e:cc:f7:c5:20:ca:c2:56:66:c6:7f:a5:
7d:ef:21:72:58:14:f9:be:1c:b6:f4:18:c5:9d:1c:75:17:d0:
44:a3:7d:e0:d4:53:72:bb:6e:d1:d0:5c:3c:cd:a3:87:5d:2e:
ae:be:27:82:ab:b3:ec:c3:d9:12:e3:2d:14:f8:aa:5f:25:7a:
56:6f:89:b6:55:48:17:80:fd:cd:33:bc:9d:74:6f:ba:01:47:
fc:46:69:ee:ef:c1:bb:3b:c2:1a:1e:27:31:34:32:80:69:f3:
cf:09:1e:7b:d4:d3:84:ba:99:95:a6:22:79:7a:ef:2d:60:7f:
83:c2:6c:78:3f:96:6e:4f:f0:3e:5a:06:26:2e:c7:e3:fe:54:
76:20:14:00:fb:71:8b:d2:5d:e8:75:8c:66:39:a0:ab:d7:b4:
bb:8f:04:49:f7:63:ad:3c:4c:60:74:4c:dd:e0:82:74:31:31:
96:82:ec:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIw29u+3VibzTO+OAJJuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi
ZGIzYjkwHhcNMjYwNzIzMTgwMDQ0WhcNMjYwNzI0MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg3MmIxMWJlNWQ0OTdmMzk2NDE1NDViNzUyMDAzMjJhOGMzZGVmYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn473pmF3aNS9HpjmZxife3L226v
bZJrUUQKSk88jK1wkLQSmk8gBtxSVKO2cFHRYqpOJKP7CjqKLdY+2tG6MTTtVBsl
uaadu6DpbYWjzBfVNacqXESE21+1y7pIMnSc7ar/IDzmkMYhP0aEhwUK4Vyzvtk+
7sPmz0Ruo1kOBdcrQ15SO3Sxf4EHGKmxlc6Fps0YnQRjFTwNxCinM6bTzLRcjeOY
Qa5CNXyf6yGouBUX6kqSbiq3iWy7a2beN0ePfhhrNUTLrjszAQdis/Rv0wnytXKB
aAfx7Gsh0aX/RHcvThDIjpVheaJJQx8ZeZGx5uw1DSvSjEk+itQAKClN3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKxG+XUl/OWQVRbdSADIqjD3vwKMB8GA1UdIwQY
MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt
NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk
LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbssxlHM
QXX1T7Zooi5cYV4SlWwa39mGrw5ccKx70Ks/fJo3gP7LEW7ZCVTZJag7ySR+EiQi
wLC+aIpMZjI45wJaPtCGHsxf8Tk2pWEWDsz3xSDKwlZmxn+lfe8hclgU+b4ctvQY
xZ0cdRfQRKN94NRTcrtu0dBcPM2jh10urr4ngquz7MPZEuMtFPiqXyV6Vm+JtlVI
F4D9zTO8nXRvugFH/EZp7u/BuzvCGh4nMTQygGnzzwkee9TThLqZlaYieXrvLWB/
g8JseD+Wbk/wPloGJi7H4/5UdiAUAPtxi9Jd6HWMZjmgq9e0u48ESfdjrTxMYHRM
3eCCdDExloLssw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:11 2026 by rpki-client