
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier: ALPBQscahySVBqo0RDkWd/pwu3xJ+0dBQD2PySlr4hI=
Subject key identifier: DD:C7:B7:06:56:CA:B4:02:6B:B9:B5:77:C3:56:88:A6:B4:69:61:54
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial: 019CAC46F1095EAFFFB555869246CF41E753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number: 1587
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: Ut6+ldJjE9Od3lpvwzftWzWTgUcq6+PM1MxKPlIxXgc=)
2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f1:09:5e:af:ff:b5:55:86:92:46:cf:41:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=ddc7b70656cab4026bb9b577c35688a6b4696154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:89:2a:e5:32:3b:e8:57:a0:8c:c1:c2:bf:
70:39:f1:eb:99:76:82:b7:07:db:6e:49:f8:78:98:
dc:05:45:19:e2:a7:cf:40:30:e6:b6:e5:5f:07:80:
c6:bc:b6:2e:c3:1c:52:f3:ee:33:03:50:4a:39:ea:
9b:d0:cd:10:db:1c:c9:e8:63:3c:80:fc:91:62:9d:
32:27:a5:32:a9:8a:2e:40:43:2b:34:75:22:89:f8:
29:c6:1f:24:d3:80:e7:10:f3:93:03:b1:69:93:31:
2d:60:21:37:cb:5b:8c:24:e4:c0:ff:38:cf:31:c3:
2a:60:9e:9d:35:f9:f5:e2:e6:30:7c:19:73:88:88:
ca:39:32:1a:4a:7a:be:3e:6f:96:55:39:35:9b:9d:
08:51:e0:df:26:05:35:aa:0e:47:90:23:74:5d:d1:
22:07:15:78:cd:9a:68:cc:f4:35:90:30:39:2b:50:
02:8b:8e:82:cb:02:04:a3:12:4f:15:25:25:92:74:
3b:c6:d0:d7:4a:52:bf:2d:de:30:95:1b:d4:db:80:
56:e2:9e:d6:39:23:d0:85:8a:32:63:34:57:d2:0b:
67:6e:df:9f:d8:7b:75:69:76:c1:ec:5e:ea:72:31:
24:cd:84:7b:3e:9c:03:0f:01:47:87:62:42:c9:c9:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:B7:06:56:CA:B4:02:6B:B9:B5:77:C3:56:88:A6:B4:69:61:54
X509v3 Authority Key Identifier:
keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:66:87:d3:2c:33:ed:66:78:10:0d:91:32:30:d7:92:91:
4c:df:af:da:e8:cf:b8:63:7a:fe:e4:8e:1c:c4:63:b2:27:d1:
a1:b4:d6:97:ea:dd:00:14:cd:27:4d:91:83:89:d4:7d:78:be:
68:dc:23:91:18:b0:bd:8c:5e:78:fc:c5:a5:fb:8d:3a:f6:1b:
94:3a:71:19:c9:a3:13:33:56:6e:fc:2c:d5:57:e7:de:1e:58:
04:a9:32:49:e0:b2:e8:0c:9a:f1:bf:41:be:2b:61:d0:79:ca:
c5:26:c6:35:7c:64:26:15:db:40:0a:ce:e5:8e:3d:3a:f9:fb:
ee:e2:65:84:64:3b:9e:27:97:81:b2:6a:0d:fc:db:ce:8d:11:
bb:b3:23:34:ff:0d:99:80:b3:f2:7c:61:f4:fe:85:49:71:11:
fb:c1:c5:f7:89:bb:85:91:dd:47:bc:2e:e3:4b:c1:9b:d1:9e:
5d:6c:64:11:86:f6:16:57:79:02:95:fc:0e:04:17:65:b7:cd:
a8:21:d6:b1:95:41:3a:3d:72:98:63:75:fb:21:20:e1:4e:a4:
1b:8f:c9:45:e6:df:77:f2:1c:c6:b0:7a:24:6e:e9:16:09:b2:
94:f3:50:cd:fb:4c:f9:af:ae:28:fc:f6:b1:c5:59:c9:f4:c9:
6b:3a:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:10 2026 by rpki-client