Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier: nDIKHUXfVKMzyK6x06PaKq8hZZ0thkEoXtveZL6kIN0=
Subject key identifier: 3B:B7:0E:81:90:DC:7F:5A:AA:1F:79:0B:FC:75:F7:8C:76:B7:3E:50
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial: 019D284DA8B1449B2F1263A3F1F1BD938FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number: 1153
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: 7PURLznQuimCypm0bD56tH9AEgyvcWtCo/+kVQq6zik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a8:b1:44:9b:2f:12:63:a3:f1:f1:bd:93:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=3bb70e8190dc7f5aaa1f790bfc75f78c76b73e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:a0:4e:70:48:53:2f:1d:39:f9:55:3c:eb:
4a:17:fe:63:52:3f:e7:18:71:32:f1:f4:00:ab:37:
f6:2e:f4:f5:06:36:24:af:68:6a:62:3c:ec:34:3a:
12:6d:fa:96:66:36:41:c3:9a:08:62:67:0e:21:69:
c1:04:4f:39:a9:eb:49:aa:2c:63:40:01:46:7e:bf:
13:4f:0d:3d:a1:9d:a6:85:a6:bb:51:3b:0f:06:60:
42:fe:13:e6:4c:d4:99:96:f9:6c:15:e1:9f:89:d6:
a0:6b:4c:35:0f:22:43:be:b5:9e:65:ad:0d:b7:fc:
80:dd:65:3e:08:76:5a:e2:e9:78:94:99:d1:39:e0:
c9:f9:6d:4c:40:74:c2:d0:3e:f5:26:1a:d2:84:9d:
d6:e1:32:54:e3:57:1a:fb:72:12:d5:6a:9e:a5:8e:
2d:f7:c4:82:04:19:6c:a9:40:49:a8:79:ca:b1:a9:
47:1d:74:e5:6a:d4:d9:9f:dc:b2:10:1b:96:62:7b:
71:d3:99:0a:50:ca:66:e3:29:a7:33:33:f4:ee:9c:
41:2d:4f:3b:16:60:5c:bf:2d:bf:2c:80:67:6a:40:
1f:f1:21:00:22:b4:d2:fb:d3:a0:68:09:4b:cc:7f:
fb:cd:a0:f2:80:b0:b2:47:32:c3:ff:a3:c6:19:ff:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:0E:81:90:DC:7F:5A:AA:1F:79:0B:FC:75:F7:8C:76:B7:3E:50
X509v3 Authority Key Identifier:
keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:c2:da:0e:a1:8b:80:20:e9:55:e0:0c:ba:83:f6:bf:f2:
3b:16:13:39:80:b7:2a:13:93:ab:d1:43:1a:02:e9:d1:27:ff:
dd:2e:92:a9:da:bb:e4:94:2f:c9:25:69:72:57:91:de:bf:cc:
e9:4c:da:db:9a:01:de:38:c9:38:ad:e9:f9:01:a5:21:d5:5a:
57:c0:9d:44:12:83:3b:d0:5f:fe:a8:4d:a5:9a:20:fe:c6:d4:
4e:0d:30:c3:6c:eb:da:0a:35:4e:19:47:25:20:5b:81:ef:13:
75:63:ff:f0:1b:d9:3f:35:a8:ad:9c:18:61:42:8e:44:bc:96:
c4:95:74:a1:b9:25:2f:3a:b0:1a:9b:e2:99:2b:ee:fb:e8:04:
06:f0:2e:40:62:26:b7:13:95:45:fd:6e:36:3a:5e:ef:f8:99:
7c:6b:c3:1a:1e:7d:24:f9:28:55:22:40:d9:6f:b7:d0:d4:77:
fe:c6:da:4e:7e:92:27:fb:cf:9e:54:32:ad:3c:f3:4c:13:24:
08:99:03:27:73:b6:4d:20:b3:da:dd:4b:7c:6b:c3:08:72:df:
70:16:e4:87:29:aa:9b:24:68:d6:83:e3:bc:08:af:45:99:87:
7b:e0:15:7a:c3:12:cb:c5:1a:27:41:87:e5:cc:4c:43:c6:45:
13:f9:51:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaixRJsvEmOj8fG9k4+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2
YzczMDcwHhcNMjYwMzI2MDQwMTExWhcNMjYwMzI3MDQwMTExWjAzMTEwLwYDVQQD
EygzYmI3MGU4MTkwZGM3ZjVhYWExZjc5MGJmYzc1Zjc4Yzc2YjczZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26igTnBIUy8dOflVPOtKF/5jUj/n
GHEy8fQAqzf2LvT1BjYkr2hqYjzsNDoSbfqWZjZBw5oIYmcOIWnBBE85qetJqixj
QAFGfr8TTw09oZ2mhaa7UTsPBmBC/hPmTNSZlvlsFeGfidaga0w1DyJDvrWeZa0N
t/yA3WU+CHZa4ul4lJnROeDJ+W1MQHTC0D71JhrShJ3W4TJU41ca+3IS1WqepY4t
98SCBBlsqUBJqHnKsalHHXTlatTZn9yyEBuWYntx05kKUMpm4ymnMzP07pxBLU87
FmBcvy2/LIBnakAf8SEAIrTS+9OgaAlLzH/7zaDygLCyRzLD/6PGGf+wRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu3DoGQ3H9aqh95C/x194x2tz5QMB8GA1UdIwQY
MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt
OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2
LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhfC2g6h
i4Ag6VXgDLqD9r/yOxYTOYC3KhOTq9FDGgLp0Sf/3S6Sqdq75JQvySVpcleR3r/M
6Uza25oB3jjJOK3p+QGlIdVaV8CdRBKDO9Bf/qhNpZog/sbUTg0ww2zr2go1ThlH
JSBbge8TdWP/8BvZPzWorZwYYUKORLyWxJV0obklLzqwGpvimSvu++gEBvAuQGIm
txOVRf1uNjpe7/iZfGvDGh59JPkoVSJA2W+30NR3/sbaTn6SJ/vPnlQyrTzzTBMk
CJkDJ3O2TSCz2t1LfGvDCHLfcBbkhymqmyRo1oPjvAivRZmHe+AVesMSy8UaJ0GH
5cxMQ8ZFE/lRFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:14 2026 by rpki-client