Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: EfTXEBMOSSCNiyxsHg6KKQnRwOQ09s+elX+jBnVjR/o=
Subject key identifier: A8:96:5C:F4:4F:FB:45:9C:92:F6:F1:C6:F0:9E:B1:55:F5:E6:CD:0C
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019D2704DC65F13BC7A25C6C46BD3CEB4EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0C16
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: OXDJ2zdSK5R9O9F3QqQhm9OPbhsEFmIMkgWdf7zqWdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:dc:65:f1:3b:c7:a2:5c:6c:46:bd:3c:eb:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=a8965cf44ffb459c92f6f1c6f09eb155f5e6cd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:31:09:b5:9c:42:e5:3b:62:69:29:c9:17:
04:5b:94:be:7e:2a:3a:af:1c:f2:04:2d:1f:ee:d2:
d1:82:e7:ae:6d:65:14:92:8c:2d:a7:f2:f2:aa:e4:
45:ab:d0:de:b2:33:21:e7:74:95:c8:fe:e9:4d:a6:
fb:35:79:6e:1a:65:ff:d3:30:a2:2b:3f:26:27:92:
97:19:4c:42:df:65:bc:55:27:7e:e4:49:4c:13:95:
3e:27:d7:44:66:0d:5c:00:a1:df:50:f2:b5:8e:bd:
e8:cc:14:88:bd:97:a4:be:25:3a:20:0e:ba:b7:6e:
15:df:23:d7:a4:06:42:37:c0:74:e9:aa:63:b2:fc:
66:75:37:05:d4:30:12:90:12:58:11:f9:eb:ca:ae:
d9:14:3a:3a:0d:8b:3f:53:0d:5f:84:ec:94:29:b9:
8b:ee:98:bb:24:c3:96:f1:df:a7:94:0b:e1:03:e6:
a5:4b:01:e2:60:45:58:67:58:f4:f2:81:a9:c1:40:
d4:3c:4e:24:96:cb:00:08:00:87:f2:25:55:05:91:
e2:9f:12:40:9c:70:ae:df:e3:20:d2:4e:b7:36:ab:
56:67:b9:36:22:d0:2e:77:a9:c0:72:54:d3:89:2d:
47:40:ba:7b:b1:91:9f:84:be:dd:33:2f:94:f0:9b:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:5C:F4:4F:FB:45:9C:92:F6:F1:C6:F0:9E:B1:55:F5:E6:CD:0C
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:85:51:9a:63:c0:61:1c:37:46:4d:39:34:6d:1b:6e:3d:
de:e1:42:a6:36:c7:c3:a6:50:34:6a:01:82:6b:d9:7c:fe:23:
81:da:5a:a9:aa:b3:b2:5b:c2:ba:88:fa:61:65:5d:40:00:eb:
ba:ed:2b:10:0e:82:19:87:99:34:a5:67:d4:c5:cd:c5:c2:cd:
30:4b:df:20:47:02:59:b0:26:6e:b6:3b:58:b2:a0:34:fa:88:
f4:10:66:34:80:83:a9:89:54:aa:ad:50:3e:23:f2:f2:9f:85:
ea:82:32:b2:99:48:ad:db:a8:70:a1:e8:e1:1f:54:13:d3:61:
c1:84:c4:d6:13:3d:e9:6e:ef:71:7e:37:23:e0:77:51:5f:7f:
e6:4b:61:b7:28:0c:11:f1:07:76:93:a3:e0:b4:e0:96:ae:75:
db:14:de:2c:65:79:05:6b:35:1a:f3:f9:92:ea:cf:79:7d:b3:
c6:47:50:b7:2b:37:b2:24:da:75:9c:21:c6:88:49:41:6c:51:
e0:1b:29:e5:7c:a9:36:42:69:02:71:32:5d:15:ae:19:f7:8b:
05:5b:fb:1b:d5:a0:8f:2a:a9:a7:ce:9b:ca:e6:6e:7b:2e:8a:
d7:05:9c:71:02:ee:7e:b1:ff:6c:8a:86:61:bc:cb:e9:be:33:
8a:94:28:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNxl8TvHolxsRr08607sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm
NjQ0ZmQwHhcNMjYwMzI1MjIwMjAyWhcNMjYwMzI2MjIwMjAyWjAzMTEwLwYDVQQD
EyhhODk2NWNmNDRmZmI0NTljOTJmNmYxYzZmMDllYjE1NWY1ZTZjZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooMxCbWcQuU7YmkpyRcEW5S+fio6
rxzyBC0f7tLRgueubWUUkowtp/LyquRFq9DesjMh53SVyP7pTab7NXluGmX/0zCi
Kz8mJ5KXGUxC32W8VSd+5ElME5U+J9dEZg1cAKHfUPK1jr3ozBSIvZekviU6IA66
t24V3yPXpAZCN8B06apjsvxmdTcF1DASkBJYEfnryq7ZFDo6DYs/Uw1fhOyUKbmL
7pi7JMOW8d+nlAvhA+alSwHiYEVYZ1j08oGpwUDUPE4klssACACH8iVVBZHinxJA
nHCu3+Mg0k63NqtWZ7k2ItAud6nAclTTiS1HQLp7sZGfhL7dMy+U8JtswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiWXPRP+0WckvbxxvCesVX15s0MMB8GA1UdIwQY
MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt
NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk
LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+mFUZpj
wGEcN0ZNOTRtG2493uFCpjbHw6ZQNGoBgmvZfP4jgdpaqaqzslvCuoj6YWVdQADr
uu0rEA6CGYeZNKVn1MXNxcLNMEvfIEcCWbAmbrY7WLKgNPqI9BBmNICDqYlUqq1Q
PiPy8p+F6oIysplIrduocKHo4R9UE9NhwYTE1hM96W7vcX43I+B3UV9/5kthtygM
EfEHdpOj4LTglq512xTeLGV5BWs1GvP5kurPeX2zxkdQtys3siTadZwhxohJQWxR
4Bsp5XypNkJpAnEyXRWuGfeLBVv7G9Wgjyqpp86byuZuey6K1wWccQLufrH/bIqG
YbzL6b4zipQofA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:03 2026 by rpki-client