Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: R1aIdvupoP6FGrJHt8tmmFNIrm6/qkZOuRU61y9Ywl0=
Subject key identifier: F1:49:26:E8:27:C1:00:D7:0A:B7:9D:3D:86:F3:50:54:BC:EE:FA:91
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019D265F8878EA00D32D756121DBF500422A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: Nd2oYkfqUQGgG1x8nd2oJ197KCK47m22I99WbPyzcE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:88:78:ea:00:d3:2d:75:61:21:db:f5:00:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=f14926e827c100d70ab79d3d86f35054bceefa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:11:6b:e1:90:89:7f:69:4d:98:d8:2b:1a:
83:49:17:e5:23:75:d4:7b:df:c2:d0:7c:19:f3:d2:
43:03:db:d0:0b:da:07:c1:3a:10:12:52:71:a9:40:
06:ff:0f:16:bb:0c:7a:74:ed:04:77:96:cd:2e:f9:
6a:fa:5e:33:09:1f:f2:b6:65:92:af:ff:c6:17:e4:
95:d3:df:aa:3c:ba:50:ba:63:2e:32:62:dd:0a:1a:
c9:aa:ab:34:02:7d:d9:ec:a6:06:8b:d1:d4:69:c0:
a9:fa:a4:7e:cb:4d:5b:86:55:b3:d2:1e:5e:d4:e4:
12:31:1d:30:eb:75:95:d6:4c:0a:fb:83:1b:91:c0:
ee:54:df:57:7c:80:d8:8c:92:7e:77:1e:1f:a0:e3:
2c:90:9f:48:c8:d2:c4:27:0b:d0:de:03:11:dc:17:
2d:ca:df:4b:cb:b8:55:bb:e3:5e:3c:9a:fd:35:74:
ff:a6:af:b7:85:35:df:db:e0:b5:d3:aa:80:83:c0:
6f:85:1a:6e:fe:37:4d:24:83:d5:0f:00:99:3a:9a:
b4:93:b4:bc:cb:a8:e7:af:4a:55:33:f8:d6:b5:54:
bc:de:54:a6:a6:b8:f4:5a:e0:06:93:b4:f5:b7:92:
e1:b0:6b:1f:36:20:b0:85:d9:84:1d:d2:dc:c2:b1:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:26:E8:27:C1:00:D7:0A:B7:9D:3D:86:F3:50:54:BC:EE:FA:91
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:f7:cb:cf:88:8c:33:fd:6c:05:18:df:d5:1f:c6:98:49:
49:ea:93:12:e1:b7:37:83:59:a5:33:55:f0:44:a8:ae:dd:6f:
b1:c3:b4:69:74:73:55:66:3c:ea:e3:2c:32:de:04:33:4d:92:
fd:8c:21:df:e2:c3:cf:98:6f:cd:7a:e3:b5:69:fe:f6:ed:9d:
6e:ec:21:bb:9b:de:f8:b5:da:05:72:66:d0:47:1c:98:73:fb:
e0:a9:b8:81:5a:f6:c9:53:14:90:aa:08:db:79:90:1c:53:8f:
79:76:bf:21:e5:f3:71:9e:5a:1e:cd:7b:70:5a:39:4c:dc:85:
e6:90:f0:b6:86:fa:87:fe:0f:d1:13:1b:61:39:b9:5e:31:2d:
fe:5a:d5:84:4d:36:b9:97:cb:7c:32:47:31:89:2f:cb:23:89:
ab:03:03:ac:c6:9f:d2:bb:e7:9f:30:72:ab:73:60:97:8b:58:
9d:32:d1:b6:77:c4:f8:73:da:26:35:98:48:11:15:1e:d4:fd:
0f:53:57:69:1c:9f:ca:90:31:1d:d4:07:e5:aa:96:7d:55:28:
32:6b:98:ab:2a:77:53:15:d2:c7:03:36:c9:5e:0a:39:ae:0a:
54:40:5d:84:90:ce:d1:56:b6:64:a5:b4:17:9d:26:33:1a:19:
b2:03:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:58 2026 by rpki-client