Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: HCihod3kSOXXJt4gDmuSZ9M5o8nLkgDlQfYmUFM//pI=
Subject key identifier: 58:58:AE:2A:B7:DE:78:67:E6:95:5D:CE:7F:DC:60:50:68:96:C8:ED
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019CAD59F96790548218CF34E77DC29FE9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:20 +0000
Manifest this update: Mon 02 Mar 2026 07:01:20 +0000
Manifest next update: Tue 03 Mar 2026 07:01:20 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: ujWWnOoW7m+skODqoI2HpZRYV3I4rrOMmsSsu0nfOpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f9:67:90:54:82:18:cf:34:e7:7d:c2:9f:e9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Mar 2 07:01:20 2026 GMT
Not After : Mar 3 07:01:20 2026 GMT
Subject: CN=5858ae2ab7de7867e6955dce7fdc60506896c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:25:13:73:8c:19:1d:75:7d:32:e0:56:62:
19:fe:81:24:cd:1f:1e:27:4b:6b:0a:e5:9d:cf:21:
a1:b8:5d:d7:fa:fc:5d:57:4a:59:c9:fd:fa:1f:6d:
55:f3:41:af:9a:3f:8b:f3:1c:75:65:3d:57:5f:6e:
af:01:d2:cc:a9:67:ff:20:e9:53:29:34:54:67:41:
a7:1f:bc:c1:30:32:ce:ff:b1:57:38:49:44:7c:65:
e5:ba:f7:e1:46:93:82:7d:de:d0:77:dc:5f:26:83:
91:bf:a1:9d:06:a9:3a:75:1d:04:62:f5:18:49:b0:
e5:be:3a:a4:5d:14:67:e0:da:0f:84:64:ee:3f:ad:
55:1c:71:ec:69:f3:24:da:31:d2:b1:56:c0:9a:39:
12:19:76:b6:f0:c1:93:f8:9a:1c:6c:15:24:0d:cc:
2b:55:07:38:67:1d:33:27:7d:2c:e1:b8:93:dd:f9:
95:de:51:2e:4d:e9:b1:5b:e0:18:05:1a:55:36:9b:
bc:bb:d3:5a:52:a6:04:4f:00:cf:a1:de:64:95:4c:
a8:c8:eb:ce:77:03:f0:41:15:08:97:92:23:f4:52:
77:1a:ef:2f:f7:15:30:f5:b7:bd:93:1e:00:36:29:
9f:00:b2:ca:b5:bf:88:74:95:33:b2:9b:d7:aa:e1:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:AE:2A:B7:DE:78:67:E6:95:5D:CE:7F:DC:60:50:68:96:C8:ED
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:51:cc:cd:45:1c:b6:5e:34:04:06:14:77:6f:a3:e1:79:
86:58:38:97:06:5f:fd:3d:c4:c5:62:12:a1:3d:1b:ab:f2:32:
4c:4c:f0:6e:2e:dd:66:e4:e9:ce:9c:9c:a6:1b:d0:33:8b:ef:
62:d0:f1:b5:46:87:70:cd:9d:7c:49:7b:c5:ab:62:ab:ab:9e:
43:44:28:59:2b:2a:03:a7:7a:b2:a5:2a:b0:fb:91:7e:54:92:
c1:41:d9:8e:54:7d:3e:05:f5:81:fa:de:cb:97:97:8c:c0:c8:
1a:3f:b8:51:6a:16:2e:1c:a1:14:bf:1d:f2:82:f1:15:79:c4:
7e:48:61:37:d8:1b:51:ea:30:6f:8a:33:4c:a6:30:9e:5f:bb:
d3:a0:8f:7a:53:54:12:4f:25:ab:1b:e0:b2:55:2e:0a:cc:8e:
5e:dd:ee:a6:bb:61:08:41:27:8f:b0:97:cd:b1:8b:fb:fa:04:
a6:1d:75:ae:aa:c8:51:ec:15:09:49:11:27:17:52:1d:91:1d:
0b:1d:ad:4a:fe:b4:ac:64:cc:01:00:23:3a:45:04:06:71:f6:
ab:f6:81:2f:66:87:d2:81:8e:f2:9b:13:c8:62:78:f9:04:ed:
a5:76:a0:bc:1d:ba:d9:a1:c2:f8:76:45:f1:6f:e3:71:76:46:
f1:08:d5:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWflnkFSCGM80533Cn+nvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz
NTZmOWYwHhcNMjYwMzAyMDcwMTIwWhcNMjYwMzAzMDcwMTIwWjAzMTEwLwYDVQQD
Eyg1ODU4YWUyYWI3ZGU3ODY3ZTY5NTVkY2U3ZmRjNjA1MDY4OTZjOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuklE3OMGR11fTLgVmIZ/oEkzR8e
J0trCuWdzyGhuF3X+vxdV0pZyf36H21V80Gvmj+L8xx1ZT1XX26vAdLMqWf/IOlT
KTRUZ0GnH7zBMDLO/7FXOElEfGXluvfhRpOCfd7Qd9xfJoORv6GdBqk6dR0EYvUY
SbDlvjqkXRRn4NoPhGTuP61VHHHsafMk2jHSsVbAmjkSGXa28MGT+JocbBUkDcwr
VQc4Zx0zJ30s4biT3fmV3lEuTemxW+AYBRpVNpu8u9NaUqYETwDPod5klUyoyOvO
dwPwQRUIl5Ij9FJ3Gu8v9xUw9be9kx4ANimfALLKtb+IdJUzspvXquHqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhYriq33nhn5pVdzn/cYFBolsjtMB8GA1UdIwQY
MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt
ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl
LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIRRzM1F
HLZeNAQGFHdvo+F5hlg4lwZf/T3ExWISoT0bq/IyTEzwbi7dZuTpzpycphvQM4vv
YtDxtUaHcM2dfEl7xatiq6ueQ0QoWSsqA6d6sqUqsPuRflSSwUHZjlR9PgX1gfre
y5eXjMDIGj+4UWoWLhyhFL8d8oLxFXnEfkhhN9gbUeowb4ozTKYwnl+706CPelNU
Ek8lqxvgslUuCsyOXt3uprthCEEnj7CXzbGL+/oEph11rqrIUewVCUkRJxdSHZEd
Cx2tSv60rGTMAQAjOkUEBnH2q/aBL2aH0oGO8psTyGJ4+QTtpXagvB262aHC+HZF
8W/jcXZG8QjV8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:11 2026 by rpki-client