Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: oFQzV57xwrvtnKvY1Iew85i6+QUoLqvEvZRyE2sQ1dM=
Subject key identifier: 5C:44:5F:BC:98:F3:DD:D6:B3:55:E7:29:37:65:74:42:CB:32:9A:BD
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019CAD5A16F46A25273DB60CCC4538F458A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0BD7
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: qNaxcZ91u3Qzm2enJDcbHuJRAlBbzRztx/Tps4Y3nRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:16:f4:6a:25:27:3d:b6:0c:cc:45:38:f4:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=5c445fbc98f3ddd6b355e72937657442cb329abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:79:e2:3f:aa:aa:5c:88:26:a2:25:a1:10:
bd:8d:90:83:fc:48:82:54:5e:17:d0:b7:09:09:cd:
99:f1:d1:4d:f1:f6:f0:7e:f4:43:51:a8:08:11:ed:
cd:d1:11:6d:b9:f7:9f:32:3c:40:67:a1:32:0d:fb:
20:04:f7:6e:52:d3:4d:50:8f:cf:5c:f5:2d:20:12:
fb:b8:18:f6:34:bb:de:5e:4d:c1:2b:89:89:06:94:
1c:cf:c5:1c:1b:05:41:40:07:51:62:17:ca:11:02:
dc:bc:ee:16:85:3b:93:2a:4e:f0:e3:66:30:29:86:
7e:dc:87:59:75:6b:69:1e:d3:1a:82:c7:de:6c:60:
e0:f7:a5:2b:2b:14:18:9a:a2:db:5b:3a:84:bd:96:
71:d0:85:37:88:42:44:2b:fa:ee:96:1c:c7:da:12:
c2:97:93:75:85:8d:e3:be:51:46:b8:ea:f6:16:3a:
3e:17:c9:65:fd:ee:0b:9c:93:11:28:b0:61:82:22:
54:e5:5d:e7:33:7f:d7:1d:fe:76:f2:a5:b8:39:81:
58:fe:7e:16:6a:3f:de:19:3e:7f:13:8a:dd:53:8c:
ef:c7:45:f8:78:62:eb:a2:0a:61:1a:ef:95:f6:b5:
41:af:51:a7:3b:24:21:05:b6:28:e7:79:8e:66:fb:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:5F:BC:98:F3:DD:D6:B3:55:E7:29:37:65:74:42:CB:32:9A:BD
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3f:f5:94:08:e0:32:7e:90:03:4b:58:0c:72:91:ed:e0:82:
37:c7:56:6f:e9:5a:a2:a1:f3:53:d1:0a:bf:56:48:91:90:5d:
bc:45:fb:24:a0:b0:45:e6:49:d8:5b:49:91:4c:94:37:9c:60:
8d:29:1d:73:3b:30:46:81:0a:ce:ef:bb:1c:7d:45:5b:09:61:
08:72:e6:9e:99:b1:e1:6d:3b:af:ea:ac:80:73:30:25:93:e8:
8a:00:b2:69:c8:86:d0:e6:7f:94:59:77:c8:f1:1d:4b:be:d9:
a0:4b:93:49:4f:fd:69:1c:e6:bf:37:3a:29:7e:cf:85:af:25:
39:99:a5:0e:a9:2c:e0:d6:99:76:be:28:bf:54:eb:ec:1f:69:
22:8e:c3:19:19:a2:77:f2:9d:5e:bd:58:00:c4:9a:2f:87:d9:
a6:df:26:04:47:28:e0:ec:a4:c1:e6:77:85:16:1b:3c:b1:8e:
7f:a6:e5:e2:e5:24:c0:b3:57:75:9c:43:61:64:61:dd:38:cf:
39:85:d3:7f:fe:fb:d6:6a:9b:6f:3a:cc:9d:80:a0:89:ac:03:
e9:04:1d:68:a7:40:7a:57:1d:7d:5c:a2:82:be:bb:4d:d1:5b:
aa:f3:02:29:98:cd:d4:23:5c:f0:c5:6a:43:e3:e3:69:68:14:
b4:e1:ac:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhb0aiUnPbYMzEU49FihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm
NjQ0ZmQwHhcNMjYwMzAyMDcwMTI4WhcNMjYwMzAzMDcwMTI4WjAzMTEwLwYDVQQD
Eyg1YzQ0NWZiYzk4ZjNkZGQ2YjM1NWU3MjkzNzY1NzQ0MmNiMzI5YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVB54j+qqlyIJqIloRC9jZCD/EiC
VF4X0LcJCc2Z8dFN8fbwfvRDUagIEe3N0RFtufefMjxAZ6EyDfsgBPduUtNNUI/P
XPUtIBL7uBj2NLveXk3BK4mJBpQcz8UcGwVBQAdRYhfKEQLcvO4WhTuTKk7w42Yw
KYZ+3IdZdWtpHtMagsfebGDg96UrKxQYmqLbWzqEvZZx0IU3iEJEK/rulhzH2hLC
l5N1hY3jvlFGuOr2Fjo+F8ll/e4LnJMRKLBhgiJU5V3nM3/XHf528qW4OYFY/n4W
aj/eGT5/E4rdU4zvx0X4eGLrogphGu+V9rVBr1GnOyQhBbYo53mOZvtopwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxEX7yY893Ws1XnKTdldELLMpq9MB8GA1UdIwQY
MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt
NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk
LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJD/1lAjg
Mn6QA0tYDHKR7eCCN8dWb+laoqHzU9EKv1ZIkZBdvEX7JKCwReZJ2FtJkUyUN5xg
jSkdczswRoEKzu+7HH1FWwlhCHLmnpmx4W07r+qsgHMwJZPoigCyaciG0OZ/lFl3
yPEdS77ZoEuTSU/9aRzmvzc6KX7Pha8lOZmlDqks4NaZdr4ov1Tr7B9pIo7DGRmi
d/KdXr1YAMSaL4fZpt8mBEco4OykweZ3hRYbPLGOf6bl4uUkwLNXdZxDYWRh3TjP
OYXTf/771mqbbzrMnYCgiawD6QQdaKdAelcdfVyigr67TdFbqvMCKZjN1CNc8MVq
Q+PjaWgUtOGsew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:18 2026 by rpki-client