Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: bGGEoyeBYjd6BhL7XBYMVEmYxx08XOB6Wm9XeMaKpSU=
Subject key identifier: 5B:F0:F0:37:BC:E8:19:EE:22:12:4A:A9:44:7D:7B:47:51:79:34:0E
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019D9999055FBBA0A4031C43AC8C44E9F381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 0C0E
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa (hash: NXq7kChGH24MXWlnwrMypjf5dlmgOh9tkgpPRlq06/w=)
2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: 2cW1ahAu8/fvoczFk8OfsxZQkfMGdi3/c2Z95EFfN4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:05:5f:bb:a0:a4:03:1c:43:ac:8c:44:e9:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=5bf0f037bce819ee22124aa9447d7b475179340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:cd:2c:12:fe:c5:98:93:80:d6:eb:29:15:
ee:5c:d6:95:9e:22:34:6f:db:26:a2:87:51:2f:44:
af:e4:2d:d6:9f:95:4e:c7:12:62:6e:64:e5:9a:5c:
d0:e1:aa:e9:01:20:28:ac:60:42:c2:ad:50:ee:dd:
19:ab:7f:24:3b:e2:b2:24:26:ec:53:39:9a:08:8a:
88:db:1c:65:3d:ab:a2:ad:89:92:17:ed:a1:a9:3a:
ce:c5:87:53:e9:77:a0:ed:4d:72:e3:d8:05:fb:bf:
02:79:a5:de:90:71:36:d9:f9:5c:b5:ef:da:3e:d1:
f0:e1:59:05:82:c4:c2:a9:af:03:a7:9f:2a:2b:fb:
0c:4c:a5:f3:45:b3:f9:82:9c:21:c1:7a:07:37:40:
18:47:10:8b:38:35:f3:4d:8d:34:67:8a:7a:5c:eb:
03:a0:c9:3d:d1:42:b6:d6:65:99:d9:06:ae:be:71:
22:18:35:21:d3:8b:f5:8f:67:fe:20:4d:4b:db:f9:
34:12:9f:78:fd:4d:fb:11:9d:11:9d:a8:25:58:6b:
4d:62:33:bb:1e:19:88:ef:16:7f:91:39:45:aa:b7:
49:ac:e8:9b:e2:a9:46:a1:85:5f:ca:b5:0f:a4:05:
c1:47:d9:9f:23:bf:b3:22:e5:9d:68:6a:8c:ca:48:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:F0:37:BC:E8:19:EE:22:12:4A:A9:44:7D:7B:47:51:79:34:0E
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:bb:71:a0:29:ea:9c:34:3e:2d:28:1e:d0:86:3a:f1:b9:
fd:78:85:76:bc:5e:26:96:5a:37:84:ec:74:85:23:58:84:c0:
88:85:6d:0e:0a:fe:63:3c:1b:68:64:21:9f:be:0b:1a:4d:48:
22:50:b5:a5:c2:44:b3:f1:cc:f3:9f:15:0b:c7:b7:ae:4b:38:
a9:ac:2b:6e:67:9b:5b:cb:3b:08:42:4f:18:1d:d2:3b:9c:5e:
df:82:80:84:56:3c:94:85:74:38:d1:a9:1b:5a:d4:2a:c1:80:
c0:af:b9:25:37:6c:34:e4:8d:35:07:07:82:d7:0f:c5:57:87:
ef:48:ca:2f:0c:4b:10:82:35:b8:19:6b:d4:36:84:b7:21:df:
e8:99:a8:fd:6b:85:1e:1b:af:db:d4:5e:0e:23:37:2d:c2:d9:
85:d4:ac:4c:44:12:55:f3:e9:e1:16:c2:98:ad:f7:43:83:39:
37:7d:bf:07:39:47:3c:e7:24:97:bd:ba:c4:41:60:43:2f:57:
ab:b0:06:3d:2e:79:f9:0c:2c:8b:19:71:74:e8:21:53:65:af:
bb:35:b3:de:1f:07:b7:67:13:00:86:c8:72:43:37:89:a7:08:
a3:8b:47:e7:ff:c4:32:e8:af:a6:c9:f9:90:25:64:90:93:7c:
85:23:8f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQVfu6CkAxxDrIxE6fOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj
NWFlNDgwHhcNMjYwNDE3MDQwMDM1WhcNMjYwNDE4MDQwMDM1WjAzMTEwLwYDVQQD
Eyg1YmYwZjAzN2JjZTgxOWVlMjIxMjRhYTk0NDdkN2I0NzUxNzkzNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLXNLBL+xZiTgNbrKRXuXNaVniI0
b9smoodRL0Sv5C3Wn5VOxxJibmTlmlzQ4arpASAorGBCwq1Q7t0Zq38kO+KyJCbs
UzmaCIqI2xxlPauirYmSF+2hqTrOxYdT6Xeg7U1y49gF+78CeaXekHE22flcte/a
PtHw4VkFgsTCqa8Dp58qK/sMTKXzRbP5gpwhwXoHN0AYRxCLODXzTY00Z4p6XOsD
oMk90UK21mWZ2QauvnEiGDUh04v1j2f+IE1L2/k0Ep94/U37EZ0RnaglWGtNYjO7
HhmI7xZ/kTlFqrdJrOib4qlGoYVfyrUPpAXBR9mfI7+zIuWdaGqMykhoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvw8De86BnuIhJKqUR9e0dReTQOMB8GA1UdIwQY
MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et
YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2
LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFe7caAp
6pw0Pi0oHtCGOvG5/XiFdrxeJpZaN4TsdIUjWITAiIVtDgr+YzwbaGQhn74LGk1I
IlC1pcJEs/HM858VC8e3rks4qawrbmebW8s7CEJPGB3SO5xe34KAhFY8lIV0ONGp
G1rUKsGAwK+5JTdsNOSNNQcHgtcPxVeH70jKLwxLEII1uBlr1DaEtyHf6Jmo/WuF
Hhuv29ReDiM3LcLZhdSsTEQSVfPp4RbCmK33Q4M5N32/BzlHPOckl726xEFgQy9X
q7AGPS55+QwsixlxdOghU2WvuzWz3h8Ht2cTAIbIckM3iacIo4tH5//EMuivpsn5
kCVkkJN8hSOPwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:44 2026 by rpki-client