Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: pAtXj/VwSsU8MlfTMo76FwHJqDW8oWZyL4KMNN04KQ8=
Subject key identifier: BD:C1:E4:EA:AF:55:B3:14:5A:46:0F:9F:7F:E6:EF:22:44:A9:35:85
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019D2627E29FC2E344CC4761C96183488AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 02AB
Signing time: Wed 25 Mar 2026 18:00:41 +0000
Manifest this update: Wed 25 Mar 2026 18:00:41 +0000
Manifest next update: Thu 26 Mar 2026 18:00:41 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: syys+jXscLV+1aO/+1NhV6t56VohXLYqXqVzpjvqmdY=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e2:9f:c2:e3:44:cc:47:61:c9:61:83:48:8a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Mar 25 18:00:41 2026 GMT
Not After : Mar 26 18:00:41 2026 GMT
Subject: CN=bdc1e4eaaf55b3145a460f9f7fe6ef2244a93585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:33:b0:4b:22:2e:42:57:d7:32:08:00:44:
65:17:75:14:e8:d3:15:8f:9d:5e:c3:e7:7f:12:9b:
d8:dc:bf:4d:44:af:07:dd:c9:67:37:3a:2b:85:c1:
5c:71:87:1d:92:36:b0:33:71:86:3d:4c:2b:cc:53:
c9:e5:dd:89:c9:41:e5:c6:a7:6a:d0:92:ad:cf:e2:
5a:af:ca:98:1e:cb:f1:d1:7d:af:17:7a:a0:00:7f:
55:75:a7:df:30:32:3a:a6:43:a4:c8:34:05:30:43:
c2:e2:e1:7c:9c:b1:bc:cd:ad:ce:12:59:84:63:76:
3d:3e:01:ea:40:3f:3c:4b:14:0a:e6:14:9c:bb:54:
b6:35:fd:b7:6d:ab:37:05:80:c5:0b:9e:d8:a4:28:
e1:4f:a2:c7:7d:0f:fa:c0:57:d5:92:ba:db:18:55:
14:45:43:55:06:38:00:a0:3c:6c:83:b2:b2:89:b8:
33:ab:13:57:0d:66:72:6d:8a:18:5a:70:41:99:a2:
64:fd:c6:72:80:e5:b4:88:74:a5:cf:61:42:7b:fb:
26:1c:6c:99:e6:6f:cd:49:af:90:64:83:d9:df:67:
27:96:10:e1:c6:0f:0d:ed:d2:75:16:80:b6:d7:17:
ef:b3:92:48:32:b9:55:1d:12:05:37:f5:74:83:8a:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:E4:EA:AF:55:B3:14:5A:46:0F:9F:7F:E6:EF:22:44:A9:35:85
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:1f:57:59:6f:d2:0a:d9:b1:c9:bc:6b:0a:29:88:a1:b5:
aa:cc:42:43:d9:ba:ef:91:ba:34:f1:0c:e8:ef:16:ab:a1:5a:
c0:77:fa:36:da:d1:b3:73:4a:bf:c8:42:6f:fd:13:69:90:05:
d9:cb:bb:3f:66:54:d1:9a:97:9c:00:c2:fc:9d:57:a5:1f:33:
e5:87:3a:18:77:7d:e8:d7:24:1f:61:f5:e2:eb:49:3e:df:63:
e8:2e:51:d8:86:7c:5c:78:ed:64:2e:b8:40:2e:29:d3:2b:56:
e8:79:66:75:3a:9c:e8:f5:7f:b6:49:54:c7:09:48:33:27:37:
5c:4a:9b:d3:55:a9:6b:8c:18:e8:70:f7:2f:aa:af:4a:fe:61:
86:8e:52:9a:5b:03:57:41:3a:db:4b:17:9f:ce:59:ee:5a:c0:
c5:c2:a1:d6:bd:fc:6b:64:5a:84:5f:4c:19:04:d0:00:1f:4e:
3b:77:d2:ca:d0:79:76:80:83:0a:4d:21:3a:34:cf:61:e0:c5:
67:8f:ba:d1:c2:62:b3:0a:c4:90:1d:49:6a:f2:d2:69:a6:f4:
f5:0a:19:2c:e1:83:98:8e:2f:16:14:9a:87:7f:2c:e2:af:21:
7b:65:a1:35:12:9e:fe:92:08:0d:8b:79:3d:cb:dc:eb:9f:41:
e8:46:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:05 2026 by rpki-client