Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: XoCk1KlkWZxUMLzomtO1GTWeIKF3QDulLWfBtRCj1rQ=
Subject key identifier: BD:BF:35:2A:97:36:D5:EA:23:13:B4:60:A3:56:75:22:2B:F9:30:4E
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019CAAC6CD50FF8305B66A1E354A94A9858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: Yqav3P0rjJXmEBjxy4yLFOaT9oYRBeCUjFWZIRFW13I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cd:50:ff:83:05:b6:6a:1e:35:4a:94:a9:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=bdbf352a9736d5ea2313b460a35675222bf9304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:5e:9b:0a:a1:bc:dd:d1:d6:e9:9a:a1:cb:
93:82:63:75:5a:fb:c3:c0:66:47:76:ba:ff:91:27:
23:97:ae:1f:01:99:86:45:96:53:6e:3f:d9:90:08:
d4:e4:40:0d:86:ad:f5:bd:cd:9c:41:b8:01:47:a8:
84:21:f9:ea:da:2f:f7:1a:5c:05:2e:2e:51:9b:bd:
1d:e0:b8:1b:c0:e0:96:d4:c3:c9:1d:82:68:f1:7d:
bf:34:05:78:81:86:4c:3c:0b:14:ea:b1:ab:c0:e3:
f1:23:89:f2:45:bc:94:5a:2a:f8:f8:17:d5:df:23:
41:1e:52:35:b5:41:ad:8d:0f:27:60:55:7a:cf:8d:
11:f8:55:5d:c5:d9:44:d0:06:eb:8b:b2:fb:21:81:
24:20:11:7d:3d:be:1a:36:3f:2d:2c:51:97:ed:2a:
cf:4a:52:b2:81:1c:92:77:b5:cf:b7:14:3f:ec:ba:
76:3d:9a:44:b6:71:67:df:f3:60:f7:59:70:75:2f:
d2:49:71:6f:2f:5d:66:42:77:04:30:22:f3:d7:f6:
bc:b4:fa:71:2c:d5:d1:02:d8:6f:c7:01:a7:de:51:
4f:0e:3c:43:3e:88:08:ae:e2:ec:e3:6e:82:da:ce:
17:75:6d:3d:45:21:23:42:3d:8a:05:d7:04:ce:c4:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:35:2A:97:36:D5:EA:23:13:B4:60:A3:56:75:22:2B:F9:30:4E
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:08:84:13:87:ba:8c:a9:1d:95:36:0a:0b:49:52:f7:2d:
7e:3f:db:ef:90:a7:38:fe:15:38:59:04:20:ef:54:53:d1:f5:
89:13:aa:9b:b2:14:31:94:2a:3e:1b:79:07:fa:2b:82:32:a9:
c9:12:67:89:b0:2f:8c:33:01:89:49:80:06:b1:e8:95:1e:ab:
23:c4:e2:8c:83:26:3e:dc:7c:0d:fa:de:fb:ff:69:a2:4d:58:
d4:d2:b9:f3:21:80:a6:77:ca:3a:57:4c:bc:dc:71:5d:6e:7a:
e0:22:b1:ca:98:60:a9:64:11:b7:b3:a8:35:d6:1f:c3:32:3f:
1b:36:35:e2:99:32:c0:0e:99:3e:10:f7:17:7e:27:0c:a0:08:
aa:49:2f:0b:a4:14:f4:5c:58:57:2b:e5:22:39:d7:6f:ec:f2:
49:6e:a9:93:77:b1:51:89:ff:af:d4:e2:71:aa:ec:0d:c2:8b:
ff:7b:31:dc:9b:62:5a:ac:9e:68:a2:e9:24:3f:c0:19:04:c9:
82:1b:82:3e:e6:3a:71:5f:99:f9:df:6c:8a:3b:80:64:bb:8b:
03:f7:11:ba:00:7a:68:6a:e8:88:c7:25:9f:7b:ff:2f:06:67:
84:57:43:01:36:c4:ff:ca:96:08:2a:6c:04:4f:7d:dc:9f:9b:
0b:90:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:16 2026 by rpki-client