Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: dIoJKiXENoD6b/rKsR00IuE8HrmR4Oui84Kwhydg9gk=
Subject key identifier: CB:52:7E:84:C6:DE:A2:CD:EB:14:DE:B3:D7:47:34:99:FD:27:64:08
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019DA48AF0E8BFE9CA776B60DE8F6F8A96ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0C57
Signing time: Sun 19 Apr 2026 07:01:02 +0000
Manifest this update: Sun 19 Apr 2026 07:01:02 +0000
Manifest next update: Mon 20 Apr 2026 07:01:02 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: DP2joBsUDTkO6wEPCG0Nk4126gDXf0R1FIjPSMJMAM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:f0:e8:bf:e9:ca:77:6b:60:de:8f:6f:8a:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Apr 19 07:01:02 2026 GMT
Not After : Apr 20 07:01:02 2026 GMT
Subject: CN=cb527e84c6dea2cdeb14deb3d7473499fd276408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:9b:c5:25:d5:9d:25:1a:61:b5:04:52:c7:
1f:68:cc:d3:9a:a7:d6:47:f4:75:78:19:03:52:75:
08:35:36:9b:36:e4:d7:ac:db:bc:a7:33:53:65:38:
6c:fb:51:1d:2d:b6:e1:a2:77:3a:ea:30:fd:2d:c4:
02:82:c9:34:00:19:77:4a:78:24:42:3f:3f:03:d5:
21:81:44:b2:10:ad:9e:55:8f:31:c4:53:33:ae:3a:
f2:8e:df:7a:6c:89:9f:58:e7:a5:6a:e6:3c:fd:c3:
70:9d:39:2c:6b:c1:59:bc:08:75:7f:4c:be:e5:05:
9b:6c:41:bb:1c:b4:6e:64:60:30:82:51:f2:56:dc:
a9:fe:f6:d8:82:9e:ed:16:dd:9d:18:b9:13:88:0c:
c1:1e:78:27:21:c0:18:6a:89:94:bd:d0:67:55:1a:
0e:30:24:32:12:a1:a7:55:58:d6:6c:10:a2:98:e5:
9b:81:07:40:b8:67:52:48:bf:8b:dc:2a:8a:47:a2:
1f:ef:af:ac:86:09:3b:5b:70:0f:0b:35:31:af:8a:
02:04:c4:ac:07:fd:ff:9e:52:dd:79:07:2e:90:95:
bc:8f:8a:34:6b:f3:f2:19:08:7e:e8:a6:93:bf:a1:
f2:be:f6:ad:3d:68:d4:5c:31:70:74:19:71:cb:9a:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:7E:84:C6:DE:A2:CD:EB:14:DE:B3:D7:47:34:99:FD:27:64:08
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:0e:59:bf:a9:a5:26:56:73:b1:21:46:33:ea:31:e5:2e:
50:b7:39:3e:85:6c:6a:a5:1a:1f:c8:5c:6e:6a:df:b0:30:c8:
b3:7f:34:e9:66:ec:6d:c2:7d:b2:8f:ed:fc:f8:7a:b5:db:66:
7e:98:97:96:87:8e:7f:d4:70:4d:2f:3b:21:13:7e:2f:d8:12:
5b:9d:68:bf:d3:c1:a9:98:9e:7e:1a:1e:53:37:4b:d9:a0:22:
a6:e0:99:af:95:73:15:bf:35:67:f6:d5:8c:64:5b:c9:03:a3:
c8:e7:8c:1b:6a:9c:e9:25:86:05:06:a6:fc:e3:49:a7:59:61:
ce:bb:0d:d0:bb:35:54:22:9e:ca:04:67:d4:c8:ac:f1:e5:20:
0f:4a:7c:4a:ca:95:04:bb:bb:5e:02:11:5e:87:b7:86:b5:39:
ad:76:00:6a:37:84:6b:af:c8:53:1b:a9:42:1f:a7:45:d8:f1:
d0:c2:cc:54:31:8f:50:79:70:40:67:46:fe:8a:64:bc:b7:2c:
9b:3b:68:93:6e:66:5f:78:90:0d:2d:f9:58:9d:91:7b:22:0d:
60:57:bb:36:9c:27:59:35:df:93:62:01:70:0c:4f:9c:ee:a5:
47:b6:fa:fc:f9:7c:86:55:65:f3:cd:b6:4d:a8:a7:66:f4:70:
92:5a:75:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kivDov+nKd2tg3o9vipbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm
NjQ0ZmQwHhcNMjYwNDE5MDcwMTAyWhcNMjYwNDIwMDcwMTAyWjAzMTEwLwYDVQQD
EyhjYjUyN2U4NGM2ZGVhMmNkZWIxNGRlYjNkNzQ3MzQ5OWZkMjc2NDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UObxSXVnSUaYbUEUscfaMzTmqfW
R/R1eBkDUnUINTabNuTXrNu8pzNTZThs+1EdLbbhonc66jD9LcQCgsk0ABl3Sngk
Qj8/A9UhgUSyEK2eVY8xxFMzrjryjt96bImfWOelauY8/cNwnTksa8FZvAh1f0y+
5QWbbEG7HLRuZGAwglHyVtyp/vbYgp7tFt2dGLkTiAzBHngnIcAYaomUvdBnVRoO
MCQyEqGnVVjWbBCimOWbgQdAuGdSSL+L3CqKR6If76+shgk7W3APCzUxr4oCBMSs
B/3/nlLdeQcukJW8j4o0a/PyGQh+6KaTv6HyvvatPWjUXDFwdBlxy5p1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtSfoTG3qLN6xTes9dHNJn9J2QIMB8GA1UdIwQY
MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt
NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk
LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9YOWb+p
pSZWc7EhRjPqMeUuULc5PoVsaqUaH8hcbmrfsDDIs3806WbsbcJ9so/t/Ph6tdtm
fpiXloeOf9RwTS87IRN+L9gSW51ov9PBqZiefhoeUzdL2aAipuCZr5VzFb81Z/bV
jGRbyQOjyOeMG2qc6SWGBQam/ONJp1lhzrsN0Ls1VCKeygRn1Mis8eUgD0p8SsqV
BLu7XgIRXoe3hrU5rXYAajeEa6/IUxupQh+nRdjx0MLMVDGPUHlwQGdG/opkvLcs
mztok25mX3iQDS35WJ2ReyINYFe7NpwnWTXfk2IBcAxPnO6lR7b6/Pl8hlVl8822
TainZvRwklp1NQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:24 2026 by rpki-client