Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: ItNNjuYB9++zHj5aO/NgSbTec97RNkfEoTeKMFbslZ0=
Subject key identifier: FA:E0:CC:9F:62:3B:8C:B1:19:00:B3:25:66:4F:36:9D:5B:78:6E:43
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019D2884C483E384151357862E39A0FBA309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 094F
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: OJzGcjKcWBttWOSEl00EzIw2eSo.roa (hash: WpkGS5n3qr7ItAnomtxJOBjcvjZ+Y7UVUlP7YBtoJOg=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: J0gViYO3Uf6SkM65WBVS2XyhLlkA+aGvwcJQ5NAaZm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c4:83:e3:84:15:13:57:86:2e:39:a0:fb:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=fae0cc9f623b8cb11900b325664f369d5b786e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:25:47:34:76:a3:0a:49:0c:53:30:1b:16:
45:23:aa:16:b9:4b:88:d5:59:01:e6:f1:9d:eb:25:
06:8d:59:b4:19:30:7d:ff:bd:24:5b:69:13:bf:b1:
5a:8e:52:fd:cf:4d:84:cf:70:54:f3:29:95:b9:c5:
60:f7:33:6d:f6:c7:f9:a8:ea:44:8c:90:b2:97:f3:
0a:c9:d7:7f:ba:2a:ac:8e:6e:3c:03:e2:ac:4a:a4:
86:31:df:fc:59:3c:4a:7b:63:54:50:6e:17:8d:81:
af:00:36:4c:c9:0b:19:72:ce:e7:10:12:b2:24:d9:
38:d8:46:82:e4:9d:94:6e:7c:80:82:d9:be:d3:a0:
bf:54:b8:36:29:ba:4a:4b:4e:a8:77:a9:3d:a5:e9:
3e:06:c2:65:6f:08:53:18:c8:68:02:ed:50:a7:7c:
a2:72:f0:88:02:4f:31:56:75:d9:c2:c5:ee:2f:fc:
bf:bb:83:60:25:f7:35:84:01:f6:67:6e:a5:f5:50:
b3:9b:11:7b:25:89:2e:59:e6:9a:18:a9:48:90:dd:
56:3a:cd:35:6e:97:b4:ad:5c:af:6c:2b:ee:e8:81:
64:7b:3b:73:2b:fc:ac:fb:63:5a:57:b7:59:61:18:
aa:16:c8:b9:a0:16:1d:ed:2b:b8:e2:fe:45:c3:ab:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:CC:9F:62:3B:8C:B1:19:00:B3:25:66:4F:36:9D:5B:78:6E:43
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a4:35:63:8a:be:12:47:93:a1:45:39:11:e5:88:35:35:cb:
36:6d:0d:5b:be:c0:bc:8f:fb:f3:a8:aa:f5:b1:3c:27:54:70:
41:8f:a4:29:10:ff:51:e4:c1:5c:c8:b2:52:2d:da:c7:e9:fc:
f4:29:b2:59:62:d7:e7:1a:6b:b1:ed:7b:bc:cc:70:03:67:75:
6f:f7:90:b4:c5:9a:28:97:8a:f0:f0:b1:4b:d2:12:e8:ff:7d:
bb:6d:e6:f4:41:55:ec:23:66:8a:a6:69:27:54:02:66:77:fd:
07:04:5c:d7:ce:e0:98:87:cb:03:4b:1e:ca:62:5d:6f:67:9a:
d0:ed:de:bd:70:3c:34:12:89:94:40:15:03:f8:c5:73:7e:1a:
f3:83:64:61:6d:90:1a:6f:54:4f:c6:dc:93:22:9a:65:95:6d:
28:c1:91:a9:88:06:85:c8:fc:6e:2e:e8:10:bf:e2:e5:03:57:
3e:00:cf:d0:74:4e:db:8e:4f:0b:ff:a1:e1:67:97:15:d3:53:
7b:0d:ac:6b:7e:c9:60:36:da:b3:4a:33:5b:c6:b7:77:e6:a8:
f3:64:a2:85:52:6b:a8:60:21:90:13:4a:ee:0e:76:ce:f4:47:
49:60:b4:4d:7a:d4:78:ad:de:3a:92:c5:88:20:86:77:8d:f0:
a0:3b:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:16 2026 by rpki-client