Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: 1B9F5kNFPfXTxSqd8qGGd2OYUXoVa4ocTDZUeZAVYdU=
Subject key identifier: 8F:70:6A:C7:8E:64:D9:75:A5:DE:8A:66:B8:0B:D0:25:49:2A:C6:D8
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019CAC10382EC0AAA7D9C2DE4537BCB889CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 168C
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: Eo3lvBs6nwd+ZWVYP2QWFwxvSFFwmEjppxZLastplBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:38:2e:c0:aa:a7:d9:c2:de:45:37:bc:b8:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=8f706ac78e64d975a5de8a66b80bd025492ac6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:b2:2d:91:bd:54:a0:45:74:3c:12:35:06:
79:2d:e6:e7:eb:8a:49:39:aa:70:be:02:78:5c:e7:
c2:f7:11:bf:26:fe:1c:ad:99:1c:22:54:fd:51:2d:
db:f8:54:a9:66:eb:4f:50:1e:ba:e8:a6:fc:6e:93:
16:f8:2e:48:d9:73:7d:e5:e0:f2:eb:47:85:4b:61:
05:7f:a4:95:fd:d0:46:1c:c0:19:a1:61:56:56:ab:
e2:fe:61:f3:14:07:70:08:70:40:c8:c7:d3:25:70:
64:ee:29:52:ac:d7:df:d1:24:ae:7b:18:bd:57:2c:
b5:50:3e:08:83:55:58:e6:21:31:80:a4:4f:fe:fc:
52:cb:b4:6c:96:9b:66:c5:11:bd:85:15:53:14:52:
7b:85:39:72:43:f7:d5:fb:85:31:d2:5a:d5:38:9c:
cc:e9:7c:97:91:82:c3:67:39:9c:ef:d8:be:7d:bb:
2a:df:1c:ad:33:9e:84:df:d7:90:be:0f:4d:a1:84:
e1:33:29:00:18:41:74:da:73:21:f6:b5:59:44:5e:
f7:49:4a:41:3a:a7:f9:fd:da:5d:53:ac:78:c7:94:
18:6d:7d:6e:2a:df:32:24:c2:da:38:0c:af:5d:92:
a0:d3:0b:65:8e:4e:cf:cb:67:16:5a:93:50:bf:2b:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:6A:C7:8E:64:D9:75:A5:DE:8A:66:B8:0B:D0:25:49:2A:C6:D8
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:27:84:b9:23:85:3a:a3:6e:c2:07:dd:19:db:6e:8b:50:4c:
c8:ef:19:f3:14:a2:50:bb:b6:e8:ef:ef:4a:d1:8f:0b:92:03:
20:25:ee:5a:e2:29:2e:73:22:97:7c:ca:b6:83:42:05:82:b7:
74:52:b0:93:8a:16:75:7e:9c:a9:45:f8:20:19:a8:3e:f2:cd:
6a:67:d8:4b:33:bf:8c:09:67:32:7d:da:f7:4d:08:c2:86:8d:
ee:11:c5:11:c1:1c:e7:8d:16:7b:a1:92:15:8e:fa:ba:a8:22:
c8:c9:b7:fe:3f:1a:3e:dc:0d:0f:b4:7d:8d:8b:71:61:fc:de:
15:f0:f7:ab:e1:ea:dc:34:3b:aa:2c:b8:6a:07:8d:95:96:ee:
6b:22:d2:e7:d1:ce:f6:3c:9a:1e:17:7b:b2:73:35:a5:20:b2:
0d:9f:0e:85:26:4f:ee:ee:6d:5f:43:54:c2:06:5b:13:ed:04:
61:d7:17:fd:80:e1:56:20:ab:21:f8:db:78:cb:a7:3d:41:93:
35:2d:fa:b8:d0:ca:2b:b7:92:9e:fb:2a:ca:0b:30:4b:bc:3a:
67:b5:44:6e:43:58:a5:b3:91:7e:e2:db:f3:93:5b:39:e1:dd:
9b:8b:83:cc:04:25:a7:04:1c:29:8f:ae:18:27:5a:8a:68:12:
a2:85:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:41 2026 by rpki-client