Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: JaAeyxHlvcx5hSKJd7HGEClEC//4HmbESFjykN14Hnk=
Subject key identifier: 28:83:13:9F:70:EA:30:FF:7B:5E:C3:B1:D8:DB:DA:D9:C4:B6:FD:08
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019D9AE3947CB563A713A83956A397D7CEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:39 +0000
Manifest this update: Fri 17 Apr 2026 10:01:39 +0000
Manifest next update: Sat 18 Apr 2026 10:01:39 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: jk3OhLPBhZmdrE6SfEEpTebOgyGqbC9525BsCwYonnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:94:7c:b5:63:a7:13:a8:39:56:a3:97:d7:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Apr 17 10:01:39 2026 GMT
Not After : Apr 18 10:01:39 2026 GMT
Subject: CN=2883139f70ea30ff7b5ec3b1d8dbdad9c4b6fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:7e:b2:d0:d0:b7:42:ba:d2:35:f8:20:21:
39:eb:d8:af:c7:03:26:29:c1:0f:fd:f3:53:2f:93:
cb:6d:3a:d2:0c:55:06:90:54:4e:ec:77:2c:29:37:
4c:a4:0a:6f:4d:35:a5:03:c4:93:8f:e9:20:b1:18:
87:d6:55:f3:0b:06:b9:f3:fa:be:70:14:ee:87:99:
60:24:d7:28:bb:94:ed:bf:a8:16:5c:37:b5:22:71:
ec:3e:20:61:df:b0:50:c0:b5:c3:0f:ac:34:c4:32:
f7:3b:2e:e5:b4:a6:24:ef:fb:b3:97:7a:a5:af:18:
aa:99:5d:f5:4e:b8:e5:b2:41:0d:17:b0:2c:4d:22:
3c:5f:cb:b2:6a:3f:1f:27:67:c1:55:4c:95:90:82:
3c:3b:23:0b:a0:a8:e9:88:31:0d:5f:1d:09:57:65:
e9:b1:4c:f0:bd:f6:c6:67:7c:c6:b8:ae:d6:2e:0c:
a6:be:7a:53:8d:f7:87:ea:3f:f1:dd:54:86:c0:c0:
c3:45:f1:58:89:c7:0d:57:a4:a7:18:4b:45:e3:e6:
09:67:54:ee:74:f0:c4:26:dd:de:db:0e:12:19:74:
33:39:f2:10:13:38:ab:0b:b0:23:09:cd:b6:2c:37:
ee:9a:21:f6:99:be:44:4f:16:ca:ae:cb:e0:cd:76:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:13:9F:70:EA:30:FF:7B:5E:C3:B1:D8:DB:DA:D9:C4:B6:FD:08
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:56:27:33:1f:12:ea:70:f2:fb:b8:da:07:9b:10:e3:d5:
91:0a:dc:5e:75:98:33:7e:a0:fb:36:4c:ee:59:b7:bf:9e:a4:
76:15:e0:18:b0:97:ca:b1:37:d1:ea:b9:bb:03:eb:35:c9:f3:
d6:85:64:db:90:13:f7:ae:27:70:f4:9a:61:07:7f:0c:be:9c:
ce:67:c7:09:9e:ce:7e:c2:66:31:c2:92:68:cc:48:60:5a:0e:
8a:6f:bc:f0:83:e6:2a:e9:0e:ae:b7:5b:90:a1:07:2a:1a:ef:
52:6d:20:ae:a9:58:0b:83:69:30:22:e6:4c:fe:6b:65:74:b0:
1c:50:26:28:bf:c5:e7:5d:2a:f6:61:d0:d7:33:b3:aa:8c:f1:
28:a7:ce:2a:75:d3:c2:a5:cc:ed:18:e1:ba:1d:63:04:52:7b:
68:aa:cb:0f:c2:fb:db:92:da:8c:68:69:7c:22:d6:37:c4:e4:
7a:b3:3e:b6:ca:5b:0e:dc:8f:e1:c9:4b:c1:01:22:f2:9c:14:
b9:5d:f1:38:06:e5:db:a9:42:8a:73:d9:b0:b6:6c:a3:b6:d8:
84:72:9d:97:a6:a6:64:08:85:05:06:76:c1:2d:3a:43:0e:f8:
81:d3:85:3b:ed:c9:fb:2d:e2:95:5e:61:04:5e:c9:72:df:03:
ea:15:0a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a45R8tWOnE6g5VqOX187aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz
NTZmOWYwHhcNMjYwNDE3MTAwMTM5WhcNMjYwNDE4MTAwMTM5WjAzMTEwLwYDVQQD
EygyODgzMTM5ZjcwZWEzMGZmN2I1ZWMzYjFkOGRiZGFkOWM0YjZmZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ1+stDQt0K60jX4ICE569ivxwMm
KcEP/fNTL5PLbTrSDFUGkFRO7HcsKTdMpApvTTWlA8STj+kgsRiH1lXzCwa58/q+
cBTuh5lgJNcou5Ttv6gWXDe1InHsPiBh37BQwLXDD6w0xDL3Oy7ltKYk7/uzl3ql
rxiqmV31TrjlskENF7AsTSI8X8uyaj8fJ2fBVUyVkII8OyMLoKjpiDENXx0JV2Xp
sUzwvfbGZ3zGuK7WLgymvnpTjfeH6j/x3VSGwMDDRfFYiccNV6SnGEtF4+YJZ1Tu
dPDEJt3e2w4SGXQzOfIQEzirC7AjCc22LDfumiH2mb5ETxbKrsvgzXakZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiDE59w6jD/e17Dsdjb2tnEtv0IMB8GA1UdIwQY
MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt
ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl
LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8tWJzMf
Eupw8vu42gebEOPVkQrcXnWYM36g+zZM7lm3v56kdhXgGLCXyrE30eq5uwPrNcnz
1oVk25AT964ncPSaYQd/DL6czmfHCZ7OfsJmMcKSaMxIYFoOim+88IPmKukOrrdb
kKEHKhrvUm0grqlYC4NpMCLmTP5rZXSwHFAmKL/F510q9mHQ1zOzqozxKKfOKnXT
wqXM7Rjhuh1jBFJ7aKrLD8L725LajGhpfCLWN8TkerM+tspbDtyP4clLwQEi8pwU
uV3xOAbl26lCinPZsLZso7bYhHKdl6amZAiFBQZ2wS06Qw74gdOFO+3J+y3ilV5h
BF7Jct8D6hUKAg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:58 2026 by rpki-client