Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: N8Oyu+aqOnn6mLKwXRtw2dpVbh7oB4zMlcu8yLaRGy0=
Subject key identifier: 1F:96:D7:FE:83:A2:BE:14:C6:51:7B:C4:E0:A6:2C:63:39:5B:42:24
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019D2B8585CC423FF5FB719FADE4F650A3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 16CE
Signing time: Thu 26 Mar 2026 19:01:03 +0000
Manifest this update: Thu 26 Mar 2026 19:01:03 +0000
Manifest next update: Fri 27 Mar 2026 19:01:03 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: X60Iw3WdhYpQ8tpSOkRpzmjGnC8BJ8dNQjOHvVc4BkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:85:cc:42:3f:f5:fb:71:9f:ad:e4:f6:50:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Mar 26 19:01:03 2026 GMT
Not After : Mar 27 19:01:03 2026 GMT
Subject: CN=1f96d7fe83a2be14c6517bc4e0a62c63395b4224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:db:7e:a5:af:37:9d:79:d7:58:e5:b0:a9:
3d:4e:4b:4f:5f:17:23:f2:d0:d7:df:dd:41:5e:95:
0e:76:4c:f8:7a:3b:5d:49:8b:1a:f0:d4:53:7d:68:
86:e8:51:36:2a:4e:0b:22:dc:4d:a1:18:97:f0:45:
85:2a:d7:e8:5b:d6:f1:d9:44:42:7d:c1:88:5a:c9:
52:60:82:49:49:66:36:f2:75:ba:65:5e:0a:1e:a1:
26:1b:34:2e:4c:93:62:9a:8c:00:9d:35:b6:51:9c:
27:e6:96:59:5b:a7:9b:25:51:77:d4:cd:d2:b4:27:
44:3c:d8:c0:ea:46:57:a4:e9:b5:3e:07:22:9e:b7:
2a:4d:5f:79:7d:a8:f0:b6:e8:c7:b7:d4:9d:e6:b8:
c7:4c:c6:c2:82:fc:ec:9a:33:f1:ad:fd:6a:40:ed:
e7:d0:81:bb:13:92:e4:25:3e:97:ed:bf:e6:23:ad:
b4:f5:23:74:e7:66:26:cf:da:0c:71:35:ac:5a:7c:
bb:e2:d0:64:3b:55:87:b6:dd:60:90:99:09:a9:14:
1b:5e:a8:28:8f:76:a2:64:ea:c7:fa:63:76:7e:18:
22:f5:a2:80:f4:89:99:e8:c0:2c:d9:33:2a:36:c7:
10:fa:05:bb:bb:20:63:08:24:2a:85:04:8f:84:23:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:D7:FE:83:A2:BE:14:C6:51:7B:C4:E0:A6:2C:63:39:5B:42:24
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e5:9d:ea:ad:2e:56:80:13:75:e2:4d:cf:2a:08:be:0f:cf:
33:c5:1a:00:f5:21:c9:c6:83:6b:34:60:84:99:6f:be:5f:a1:
2d:26:ce:36:57:58:27:7d:32:37:65:2c:5d:bf:5e:f0:15:66:
9a:6e:0c:79:6b:14:13:7a:9d:3d:82:65:61:b0:da:d6:32:06:
d0:2a:99:3c:d4:7c:d9:86:80:53:42:f6:12:f1:f3:91:57:70:
33:bf:f0:37:b5:6f:93:41:f7:84:86:0c:4a:94:8e:a4:5e:a6:
d4:ad:e7:3d:64:ab:48:c9:f8:80:ed:86:bc:f0:9e:95:b8:ce:
40:7d:81:38:e3:ae:73:4b:6e:ae:9c:14:a4:03:41:bd:85:88:
ff:ef:7f:57:b3:31:80:3f:f2:0d:ce:56:61:3a:ac:dd:8c:d8:
7c:b1:dd:a4:2c:2a:03:0f:9a:a7:b3:96:c6:97:29:19:03:94:
27:19:b4:d4:22:9d:9a:41:f1:2e:09:88:fe:d8:72:3f:ab:5f:
df:4b:5b:d9:6d:d6:e4:9e:03:0a:74:74:7d:bd:c2:ea:cf:67:
21:e6:52:01:fc:d8:05:64:c2:09:11:aa:27:3a:03:0b:b0:fc:
4e:a6:b5:87:6a:0a:d8:f1:77:48:7a:5d:e7:aa:18:74:2f:2a:
1e:d6:58:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhYXMQj/1+3GfreT2UKP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjZmOTc3MmE4ZGUyYTAyYWY2MWE0ZWE2MjdkM2U1MWQ4
NGY5YmQwHhcNMjYwMzI2MTkwMTAzWhcNMjYwMzI3MTkwMTAzWjAzMTEwLwYDVQQD
EygxZjk2ZDdmZTgzYTJiZTE0YzY1MTdiYzRlMGE2MmM2MzM5NWI0MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bDbfqWvN51511jlsKk9TktPXxcj
8tDX391BXpUOdkz4ejtdSYsa8NRTfWiG6FE2Kk4LItxNoRiX8EWFKtfoW9bx2URC
fcGIWslSYIJJSWY28nW6ZV4KHqEmGzQuTJNimowAnTW2UZwn5pZZW6ebJVF31M3S
tCdEPNjA6kZXpOm1PgcinrcqTV95fajwtujHt9Sd5rjHTMbCgvzsmjPxrf1qQO3n
0IG7E5LkJT6X7b/mI6209SN052Ymz9oMcTWsWny74tBkO1WHtt1gkJkJqRQbXqgo
j3aiZOrH+mN2fhgi9aKA9ImZ6MAs2TMqNscQ+gW7uyBjCCQqhQSPhCMFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+W1/6Dor4UxlF7xOCmLGM5W0IkMB8GA1UdIwQY
MBaAFBW2+XcqjeKgKvYaTqYn0+UdhPm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYt
ZTU3OWUyYWFmOWVhLzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYtZTU3OWUyYWFmOWVh
LzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROWd6q0u
VoATdeJNzyoIvg/PM8UaAPUhycaDazRghJlvvl+hLSbONldYJ30yN2UsXb9e8BVm
mm4MeWsUE3qdPYJlYbDa1jIG0CqZPNR82YaAU0L2EvHzkVdwM7/wN7Vvk0H3hIYM
SpSOpF6m1K3nPWSrSMn4gO2GvPCelbjOQH2BOOOuc0turpwUpANBvYWI/+9/V7Mx
gD/yDc5WYTqs3YzYfLHdpCwqAw+ap7OWxpcpGQOUJxm01CKdmkHxLgmI/thyP6tf
30tb2W3W5J4DCnR0fb3C6s9nIeZSAfzYBWTCCRGqJzoDC7D8Tqa1h2oK2PF3SHpd
56oYdC8qHtZYdQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:36 2026 by rpki-client