Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: lomzg85yeaVAtokyMZLnkea4H4XwzaPhHLowEm/15aM=
Subject key identifier: 7B:DD:61:39:8F:A3:63:37:F3:87:66:F5:95:EE:F2:9D:0F:EA:6E:38
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019D9850866FF15E0419B810AEE153A03695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: XLWMEtjBWE3O7NmCyHdB7hn2TOhR8Zgjd+ST8q5+YD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:86:6f:f1:5e:04:19:b8:10:ae:e1:53:a0:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=7bdd61398fa36337f38766f595eef29d0fea6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:0d:5d:1b:67:30:01:6f:ff:c4:cc:78:1e:
c3:22:3b:09:04:8a:66:70:b2:45:e3:b3:b4:cb:eb:
73:73:cb:51:09:0a:b5:d9:d2:48:1e:69:a9:c8:9f:
3a:7c:28:75:e4:e6:f3:c5:e4:da:f6:71:64:f1:86:
6c:1d:16:6e:00:6b:88:00:75:92:f6:16:b4:37:33:
4b:21:d6:f4:e4:ce:af:38:c2:ea:11:79:72:d8:0c:
43:bd:72:d9:56:e6:b5:7e:34:07:ab:36:e0:66:79:
20:57:25:ef:b9:84:55:a0:7a:83:e8:f0:d9:a7:8e:
44:e5:30:21:27:87:01:cf:ff:a0:aa:d3:63:60:ec:
00:19:52:dc:07:23:08:bb:6d:fc:e0:4a:ea:6a:9a:
a4:8d:cf:5c:80:58:cf:ae:d5:a4:e7:43:f0:54:3c:
c8:43:d3:75:d4:80:2f:03:6b:e4:ee:0b:26:20:54:
3d:bf:fe:b1:59:77:12:98:40:65:f4:30:87:c6:36:
5a:f1:f5:2b:82:56:30:b8:21:e7:6e:e1:43:52:c6:
95:9d:51:10:5d:82:45:5e:99:47:f6:1c:f6:bd:49:
5c:66:35:4c:5d:b3:f5:4e:7e:f1:f9:5e:f4:62:8e:
e2:7a:6d:50:d1:3d:f0:3e:e4:2e:8e:f4:6e:7e:53:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:61:39:8F:A3:63:37:F3:87:66:F5:95:EE:F2:9D:0F:EA:6E:38
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:ed:65:e2:18:f3:4f:28:9f:3c:6e:0c:68:ba:44:1d:55:
70:90:03:5a:0a:9b:9a:f4:13:c8:ff:de:da:2a:b6:0f:4f:fe:
51:e7:f1:8c:01:a5:84:4c:b9:fc:ca:a5:2d:74:5b:56:81:04:
e6:99:da:71:c0:13:b9:56:9a:8a:fa:a0:95:80:33:73:59:b7:
f7:16:ea:d7:fa:ed:5b:ca:10:2f:5e:46:1e:52:01:22:1d:24:
3b:a3:3e:85:20:7a:b1:3c:b6:c8:b6:3c:f3:0e:de:9b:9b:43:
97:88:0e:c1:6f:d4:18:b1:a4:36:31:62:43:75:d9:41:77:19:
48:9d:a7:e6:7d:4a:d9:10:9e:da:f9:ee:b8:da:0f:46:b1:ea:
6a:d6:6e:75:93:7a:73:00:da:3a:7b:ea:fc:cf:98:39:d4:02:
bd:49:a5:0d:59:b0:b6:c5:92:b4:24:e5:60:14:f9:ae:84:e3:
f3:91:71:18:85:4c:aa:b5:0a:45:b0:13:3c:e5:3e:1c:72:14:
6e:1b:6e:f6:0d:ed:18:3f:1c:a0:3c:9b:de:94:33:10:4b:34:
47:e1:df:29:3e:eb:f4:98:b4:a6:d7:57:9a:fc:e4:67:c1:fa:
4f:75:98:8c:8e:61:1b:af:74:0b:f0:15:a1:cc:fe:b2:35:cf:
c4:78:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUIZv8V4EGbgQruFToDaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0
NTkwZWIwHhcNMjYwNDE2MjIwMTQ3WhcNMjYwNDE3MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg3YmRkNjEzOThmYTM2MzM3ZjM4NzY2ZjU5NWVlZjI5ZDBmZWE2ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfUNXRtnMAFv/8TMeB7DIjsJBIpm
cLJF47O0y+tzc8tRCQq12dJIHmmpyJ86fCh15ObzxeTa9nFk8YZsHRZuAGuIAHWS
9ha0NzNLIdb05M6vOMLqEXly2AxDvXLZVua1fjQHqzbgZnkgVyXvuYRVoHqD6PDZ
p45E5TAhJ4cBz/+gqtNjYOwAGVLcByMIu2384Erqapqkjc9cgFjPrtWk50PwVDzI
Q9N11IAvA2vk7gsmIFQ9v/6xWXcSmEBl9DCHxjZa8fUrglYwuCHnbuFDUsaVnVEQ
XYJFXplH9hz2vUlcZjVMXbP1Tn7x+V70Yo7iem1Q0T3wPuQujvRuflOIWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvdYTmPo2M384dm9ZXu8p0P6m44MB8GA1UdIwQY
MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt
NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw
LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApztZeIY
808onzxuDGi6RB1VcJADWgqbmvQTyP/e2iq2D0/+UefxjAGlhEy5/MqlLXRbVoEE
5pnaccATuVaaivqglYAzc1m39xbq1/rtW8oQL15GHlIBIh0kO6M+hSB6sTy2yLY8
8w7em5tDl4gOwW/UGLGkNjFiQ3XZQXcZSJ2n5n1K2RCe2vnuuNoPRrHqatZudZN6
cwDaOnvq/M+YOdQCvUmlDVmwtsWStCTlYBT5roTj85FxGIVMqrUKRbATPOU+HHIU
bhtu9g3tGD8coDyb3pQzEEs0R+HfKT7r9Ji0ptdXmvzkZ8H6T3WYjI5hG690C/AV
ocz+sjXPxHi3ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:15 2026 by rpki-client