Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.mft
File: fb8yg7GkweIUSIjhTKfbxW1Iswc.mft (raw, json)
Hash identifier: rbM3SpbvFfGifHoYIe9XX73j7Sv/eYZlSawteK+ahwE=
Subject key identifier: D7:48:C7:30:65:8F:45:42:34:3A:B5:6A:5B:AC:8F:72:9F:16:13:2A
Authority key identifier: 7D:BF:32:83:B1:A4:C1:E2:14:48:88:E1:4C:A7:DB:C5:6D:48:B3:07
Certificate issuer: /CN=7dbf3283b1a4c1e2144888e14ca7dbc56d48b307
Certificate serial: 019D329AA046E6EAD2BE734D07F734F20195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fb8yg7GkweIUSIjhTKfbxW1Iswc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.mft
Manifest number: 18
Signing time: Sat 28 Mar 2026 04:01:27 +0000
Manifest this update: Sat 28 Mar 2026 04:01:27 +0000
Manifest next update: Sun 29 Mar 2026 04:01:27 +0000
Files and hashes: 1: fb8yg7GkweIUSIjhTKfbxW1Iswc.crl (hash: uXttlGJwMsfBuC5bFh2ejAm7vlrpkjVvVOzR3fjiBLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fb8yg7GkweIUSIjhTKfbxW1Iswc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:a0:46:e6:ea:d2:be:73:4d:07:f7:34:f2:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbf3283b1a4c1e2144888e14ca7dbc56d48b307
Validity
Not Before: Mar 28 04:01:27 2026 GMT
Not After : Mar 29 04:01:27 2026 GMT
Subject: CN=d748c730658f4542343ab56a5bac8f729f16132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:5b:04:e3:99:4a:97:de:9f:63:08:a3:c7:
2c:b2:a4:b5:ad:3a:0f:5c:93:fd:7e:cd:06:99:82:
96:df:75:b9:b6:78:b7:08:8b:26:ea:27:ef:b7:73:
84:a9:92:88:54:02:e6:1b:be:2f:f8:13:35:41:b5:
e0:a1:92:42:1f:72:e6:50:66:f0:fe:11:61:b9:5b:
e9:f7:d3:9e:d8:9c:04:45:62:b2:b7:f6:9f:18:a2:
06:98:fc:50:50:1e:53:a7:c0:84:1a:52:5c:d1:48:
65:b0:de:d2:c8:19:ad:9b:58:d8:bb:7c:9a:c2:74:
ca:f1:9a:c8:95:42:1b:a7:ca:91:ed:e6:26:5a:b3:
b4:5a:f1:68:e9:2a:73:bb:9e:03:3a:63:75:3e:94:
06:b2:80:3d:68:d4:0c:c5:f0:d4:ea:0a:dd:6b:4d:
7e:90:ca:29:cb:76:ea:9f:60:ff:b3:c6:be:ca:59:
e1:58:12:91:c3:5c:9c:88:33:b2:5e:54:a2:3a:96:
88:f3:52:97:04:41:17:81:58:3e:90:c2:3b:e9:dc:
a4:14:66:f3:a1:d1:4c:68:d0:62:64:24:0e:46:64:
a4:b8:56:f6:23:0d:9e:61:63:de:29:c6:22:fb:8b:
42:64:73:e1:8d:48:b1:35:88:47:19:33:33:0b:c1:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:C7:30:65:8F:45:42:34:3A:B5:6A:5B:AC:8F:72:9F:16:13:2A
X509v3 Authority Key Identifier:
keyid:7D:BF:32:83:B1:A4:C1:E2:14:48:88:E1:4C:A7:DB:C5:6D:48:B3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb8yg7GkweIUSIjhTKfbxW1Iswc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c5a26c-2263-4825-9a92-9f499046153b/1/fb8yg7GkweIUSIjhTKfbxW1Iswc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:1f:c6:19:2a:7d:85:45:b0:1f:86:3b:69:36:db:3c:f8:
ca:e4:ef:76:a1:20:b1:f4:1b:5b:2b:08:6a:c0:03:b5:17:31:
b2:6e:0a:b5:55:dd:6f:d4:da:06:a5:24:4f:8c:3b:49:c3:28:
b7:cd:e9:8c:03:64:26:28:d5:a5:5c:2e:25:96:2a:1d:6a:3b:
b3:e6:8b:37:c4:e8:01:4c:0f:7b:7d:70:d5:b5:e5:98:67:a3:
19:25:87:20:0d:77:a4:1a:29:64:11:b3:45:ba:ab:77:b6:9b:
d6:ff:6a:2b:4b:39:77:eb:11:11:c4:f9:e5:7f:ca:90:8f:0e:
95:7e:fc:8c:67:56:5a:07:75:da:aa:e9:ae:e9:10:17:b0:c1:
c4:c6:83:dc:34:f0:1d:d1:91:dc:8d:b0:b7:a3:ee:6d:75:1b:
af:c9:1e:87:28:2b:f9:78:6c:d4:03:93:42:45:26:29:f2:bc:
18:ab:35:40:f4:f9:a0:cf:4d:96:99:49:e8:5b:56:73:eb:43:
46:2a:9a:e8:69:f6:1a:4d:73:af:b8:0b:ec:0e:83:65:02:1c:
96:1a:b7:3f:2d:22:81:ed:7f:16:74:69:13:18:87:99:ac:cb:
e3:d0:28:dd:82:dd:86:54:90:69:8a:66:7d:b0:46:bb:eb:a2:
99:70:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:29 2026 by rpki-client