Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: pnQdKTlsCYic1Tge1ynLO0dk8tlK30uWbRNzKXvCV7w=
Subject key identifier: D5:DA:E8:96:7C:F9:F9:FE:6E:F2:0E:21:7E:64:2C:C7:5D:4A:8E:AB
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019D270479E02B83AE8E64C1120661889B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: MGNIJssG9sXERAUR5iHudjeXH3B5ZO6fnjLLezt7VsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:79:e0:2b:83:ae:8e:64:c1:12:06:61:88:9b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=d5dae8967cf9f9fe6ef20e217e642cc75d4a8eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:39:09:aa:27:50:00:e3:6a:98:eb:20:d0:
06:17:0f:1a:82:6a:29:0e:14:c9:f5:b7:e8:bc:36:
e4:43:c2:50:c5:d8:31:c4:c2:ba:84:e5:a1:19:bb:
46:72:42:0b:75:88:b0:cf:3d:43:b7:72:26:47:30:
58:f1:93:57:71:53:0e:39:e5:84:5f:63:dd:3b:d5:
59:26:10:e9:9a:4e:c4:94:55:97:04:63:74:8f:51:
6f:5c:64:31:72:28:17:27:ac:e4:21:91:ab:b2:88:
82:9c:79:47:0a:35:5c:be:3e:5b:bf:b3:22:38:fd:
e2:7a:1a:2e:ba:ad:b3:47:fd:5e:7c:51:7d:82:05:
dd:c8:1f:37:c8:eb:2e:79:91:95:1f:9b:06:13:87:
dc:7d:e0:49:51:bc:5a:6a:a2:8e:cb:50:29:67:b8:
fc:1e:61:2b:1b:b6:03:64:19:ce:ca:b7:93:88:e9:
db:8b:84:ea:fb:40:01:63:1d:e1:f0:96:01:af:02:
36:8f:ad:71:ea:de:70:4e:5f:63:ec:33:90:f4:89:
4c:00:f2:98:ed:90:20:3b:84:ca:94:2f:ab:bd:4c:
2c:af:d1:37:31:da:2b:6b:76:1a:4c:6a:95:dd:f2:
61:f3:6c:5e:9f:86:b6:5b:26:ef:e6:cd:c5:63:1b:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:E8:96:7C:F9:F9:FE:6E:F2:0E:21:7E:64:2C:C7:5D:4A:8E:AB
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ea:19:a5:89:da:91:5d:69:57:c5:0f:c4:1c:fd:cc:21:8c:
25:32:e4:33:d5:b9:6d:48:bf:04:9c:81:fd:6e:0f:7f:cd:7e:
48:4a:9d:f9:76:87:e6:0f:99:82:bb:cc:ef:b4:98:ae:8d:10:
93:3f:62:0d:d1:56:9c:c8:5e:57:80:7a:af:e4:67:b1:1e:26:
37:bb:10:ef:7d:35:8f:22:9f:10:49:32:09:55:d0:04:02:1d:
80:8b:9f:c3:6a:ee:2d:21:d6:7e:61:43:23:e6:f8:33:1e:d4:
53:30:ba:73:c5:33:36:ff:bc:7f:10:84:0e:8c:c9:17:4b:f1:
ba:ba:c0:89:57:22:5a:9c:7c:e2:30:bc:bd:e1:8c:e7:32:58:
93:5d:4b:c5:56:44:5a:72:a2:30:bb:f6:2b:42:cd:23:82:cb:
05:61:9d:84:17:4e:7b:9e:9c:3a:08:96:4a:6e:d7:f2:53:a6:
70:ba:a4:0c:bc:c8:0e:bb:5d:87:f4:3a:7c:99:3a:e6:ef:f9:
0b:3e:5b:dd:08:b2:f7:22:37:17:2a:df:da:8c:d9:f5:e4:e9:
c3:ce:54:e3:10:8a:27:67:13:ad:fb:1b:d4:e5:64:21:6f:1c:
6c:67:9f:aa:d7:85:45:16:e4:e9:7c:5e:b0:38:db:34:f2:eb:
9c:bd:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:53 2026 by rpki-client