Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier: hWTJItFIxE9PESKUEcu/JhacQBNGMfYfILNQXUambvA=
Subject key identifier: 21:50:39:51:30:C9:00:0E:24:9B:47:15:9C:9F:DE:46:E9:00:C6:75
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial: 019D36E4A784C90CD95CF634A3FFF1AFE496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 00:00:47 +0000
Manifest this update: Sun 29 Mar 2026 00:00:47 +0000
Manifest next update: Mon 30 Mar 2026 00:00:47 +0000
Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: 0Iw0Sn1/jXstt+ekpsvfZBCuSCld0kbWewXtEx2WIU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:a7:84:c9:0c:d9:5c:f6:34:a3:ff:f1:af:e4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Validity
Not Before: Mar 29 00:00:47 2026 GMT
Not After : Mar 30 00:00:47 2026 GMT
Subject: CN=2150395130c9000e249b47159c9fde46e900c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b8:a5:6e:1c:c1:58:37:e5:b3:34:11:39:60:
e7:8f:d1:14:a5:dd:39:50:6c:7e:23:3d:3d:d5:4a:
7c:12:78:7c:39:fe:68:72:87:cd:28:ec:d6:b7:aa:
4b:24:ff:35:f5:99:ae:37:a6:2b:ac:17:1f:5b:e3:
fc:db:fe:d3:d3:cd:86:bb:8f:d2:57:00:0d:c2:0b:
e6:56:92:a2:c1:77:df:03:b0:c2:54:8b:ad:4c:5e:
42:88:25:c6:de:ea:22:49:e2:83:06:b8:83:b9:21:
40:03:37:2a:a3:da:2d:2f:bc:88:86:f5:7e:3c:30:
3a:51:15:87:37:e0:50:0f:8a:d9:8d:a7:4d:24:1c:
9a:fb:f8:c9:db:bb:d5:6b:40:f6:c5:c6:b1:d2:51:
57:8b:9b:69:32:73:69:fc:ee:d5:a6:3d:a9:d8:3f:
41:64:81:a7:ca:15:9e:03:ed:fc:8a:58:70:23:6d:
cd:56:ff:1b:31:38:8e:a4:5e:e6:25:d0:aa:51:b1:
79:04:f4:db:1d:b5:fc:0f:bf:c6:12:dc:5f:41:4d:
c3:00:a8:cd:ba:b2:20:99:7d:7b:f5:9c:96:28:60:
63:18:ed:c4:71:e6:79:d7:b5:5d:87:1d:34:c9:84:
b7:21:f5:cc:11:f8:4b:f1:8f:5c:9a:11:b2:ef:f0:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:39:51:30:C9:00:0E:24:9B:47:15:9C:9F:DE:46:E9:00:C6:75
X509v3 Authority Key Identifier:
keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:da:61:6c:5c:85:1e:4e:21:cf:e5:85:36:a2:53:d0:1c:
7a:63:6d:38:f5:e7:4a:a9:71:99:e2:1a:62:38:8f:8c:35:10:
1c:a3:c7:7e:58:4e:f5:09:0b:a9:52:38:b4:c7:66:6c:f2:de:
27:8d:bf:ca:78:0f:c9:ba:fd:e5:a7:5a:8b:32:f7:8c:3a:37:
a4:51:f0:b2:3a:45:dc:18:3e:c8:72:e9:a2:8e:4c:b3:68:8e:
e4:e3:36:c3:dd:cc:09:d9:51:e8:5f:8d:72:b8:e0:2a:62:af:
61:9e:2b:b8:36:fd:f8:5a:fe:06:2a:82:a3:f7:20:fc:03:ee:
aa:91:86:3b:2f:c4:ae:0d:d3:01:86:d7:5f:b6:f9:bd:90:96:
0c:05:ec:9d:3a:5f:5f:44:0e:31:52:4e:db:67:af:f1:e2:f3:
b0:cb:b0:f3:f3:b7:84:e9:ae:39:30:27:0e:ba:a7:45:09:ec:
48:99:f7:59:e2:8e:56:c6:c3:ef:dd:1c:11:81:94:6d:10:68:
f4:aa:03:c1:03:5d:c9:e0:00:05:13:d3:19:e2:a7:7d:f1:74:
22:23:35:6d:5e:7b:df:80:65:c0:e7:c3:41:0c:ef:0b:03:a1:
d8:10:4a:6d:42:eb:5d:a0:b5:f7:32:87:3c:f0:2c:7c:0e:f4:
09:df:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client