Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: 8dKdm+T7ctpPDpGvScAd43eIP2JujcsnIyvTcM0//z4=
Subject key identifier: CF:36:BF:2F:FE:A7:96:9C:F7:C1:ED:E6:9F:BA:3F:15:69:BA:71:3D
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01A0D0B6D4A25BC91EDAFC0DDFF31B22560F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 0491
Signing time: Thu 24 Sep 2026 00:00:37 +0000
Manifest this update: Thu 24 Sep 2026 00:00:37 +0000
Manifest next update: Fri 25 Sep 2026 00:00:37 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: PUi4nm87egNrq39tFiEv8Ff0RqPAW5yALTQdQNqhtDo=)
2: R711lM7FnDieI5pgKPwgP6Qn9_Y.roa (hash: t/8iwwmxhr7SqeWIO7++tunEXZgrZsirPfeVr/mahNI=)
3: iAeIno7DuYPMqcknH3ky1fpamag.roa (hash: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:d4:a2:5b:c9:1e:da:fc:0d:df:f3:1b:22:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Sep 24 00:00:37 2026 GMT
Not After : Sep 25 00:00:37 2026 GMT
Subject: CN=cf36bf2ffea7969cf7c1ede69fba3f1569ba713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:e2:06:3d:1e:57:85:6d:7b:d8:21:a0:03:
2f:dd:8d:9d:d6:7d:18:c3:81:d9:e5:15:7f:4a:47:
23:7b:95:cd:3b:f9:00:17:0e:65:87:7d:93:63:d4:
a2:7d:3f:36:20:2b:41:31:8a:df:01:82:07:97:14:
82:7e:35:3b:2e:09:63:5c:b6:49:50:35:93:d4:25:
51:e7:f1:a8:61:a5:ca:d3:1c:0a:27:17:63:37:1c:
e2:8c:69:d0:13:e6:c9:11:ee:53:ef:2d:f7:b0:02:
fd:c1:f5:3f:1b:2b:af:7f:79:0d:f2:96:6a:44:93:
c0:4a:16:03:5f:2a:e9:85:b3:5c:87:6b:48:23:40:
16:ff:6e:67:92:81:0b:a0:d6:ed:e3:85:b1:38:46:
9b:b1:80:e8:71:c8:0e:70:2d:6e:4c:6f:ce:8d:18:
18:9d:cc:9a:fa:6f:59:e5:1e:b4:ed:b6:6c:a6:da:
38:76:dc:88:95:e1:1f:ad:50:4d:19:ce:67:34:bf:
74:a7:55:1b:66:fe:77:09:17:12:d6:1a:c4:f2:70:
4b:95:6e:8f:2b:00:9c:f1:51:0e:95:ae:82:3e:f6:
4c:43:ac:24:38:28:7e:8f:ee:6e:9d:0b:5d:a3:e8:
32:85:1d:2a:bc:5c:fc:6e:62:2b:b1:8a:e7:da:4f:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:BF:2F:FE:A7:96:9C:F7:C1:ED:E6:9F:BA:3F:15:69:BA:71:3D
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:97:f5:9c:df:e7:c3:d7:a8:77:89:d5:70:50:22:ad:c5:
5c:1f:2b:d4:06:73:33:b0:82:8b:46:38:e3:b1:8a:2d:d2:91:
92:ab:52:0d:f8:69:f5:92:af:53:14:13:74:a4:d6:03:20:a1:
94:4c:49:95:5d:0d:e5:ad:46:77:b2:c9:d2:62:c1:88:ea:78:
d6:b5:19:88:b8:2f:52:3e:f7:db:51:66:65:94:3a:16:ad:d6:
78:49:a8:52:2c:b3:7d:96:5f:f3:df:d8:0d:f0:97:63:05:62:
46:c7:9d:1e:08:19:f3:65:ab:da:7c:b5:13:1e:2f:ed:0f:e8:
22:44:d1:87:04:d3:ad:48:12:18:9a:3a:f9:6c:fd:09:99:e4:
b4:ed:b5:fa:8f:bf:72:a8:6d:22:e3:fc:be:f0:f1:b9:8f:50:
1b:e9:c7:d2:bd:e7:5a:7a:00:be:2e:d4:8f:95:83:fb:56:50:
13:41:25:69:cb:e0:fd:9a:13:33:dc:3a:0a:e5:23:86:87:eb:
bc:e9:09:6f:56:d5:7e:8f:d8:44:10:af:1b:ed:10:f3:47:f0:
41:27:fb:82:d0:16:9e:45:b0:b6:25:fd:23:5e:56:e5:80:80:
d6:6f:61:26:b6:03:56:8b:2b:66:ff:58:bc:57:a1:b4:9c:fc:
dd:49:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:18:11 2026 by rpki-client