Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: euyHdmV3muXskY9eDCeW47TT1XKP4NNvb1np9tps+jE=
Subject key identifier: B2:28:46:7C:F1:9D:69:95:08:92:B4:BA:4F:1B:E1:F6:A4:8C:7D:FD
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019D390A8597280D1D5501EC98C5B1241550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 16D5
Signing time: Sun 29 Mar 2026 10:01:23 +0000
Manifest this update: Sun 29 Mar 2026 10:01:23 +0000
Manifest next update: Mon 30 Mar 2026 10:01:23 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: znhi8/sO4HyBFaFryGJ3OKJPHA8HQJf3Dt8cXq/JAS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:85:97:28:0d:1d:55:01:ec:98:c5:b1:24:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Mar 29 10:01:23 2026 GMT
Not After : Mar 30 10:01:23 2026 GMT
Subject: CN=b228467cf19d69950892b4ba4f1be1f6a48c7dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:ae:0a:d2:f0:fc:63:58:2b:b9:53:d5:b3:
3d:1b:b8:62:c3:b2:9a:8f:1f:2b:bc:fd:43:f5:c1:
f6:dc:c1:1e:3f:52:ac:0e:89:c8:20:6c:35:71:ea:
d8:4c:2c:af:32:04:3a:a7:da:78:12:cd:04:c4:7d:
ec:d8:d5:9a:47:ef:d6:23:cd:8c:eb:57:57:ed:ef:
42:29:57:b8:eb:80:2a:5b:15:58:f5:b9:8d:11:51:
d7:1f:6f:dc:cb:15:31:de:d8:f8:2f:f6:3b:e2:d3:
f6:2e:5a:2f:7d:25:25:a4:27:14:50:dc:97:a1:08:
4b:09:7b:a5:47:fa:28:f5:40:71:c7:f5:30:98:c5:
56:21:df:07:a8:68:23:49:44:d9:ba:eb:55:bc:01:
0c:5a:77:4d:e6:29:cc:2d:90:a8:c1:50:3e:de:6c:
e5:3c:72:37:4f:ff:2c:ea:a8:37:59:80:7c:5b:48:
62:f2:61:26:70:0d:22:7f:5a:32:d2:f5:76:57:e5:
34:bf:96:e7:d8:fd:c9:b3:74:08:a5:47:70:a1:d5:
88:11:be:65:c6:dd:1b:fc:63:17:c5:4f:1f:a2:68:
3d:98:0b:3e:68:39:27:ed:15:e5:be:2e:f5:34:e0:
37:0c:70:60:84:3c:fe:5e:7c:5f:2b:6e:42:83:e0:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:46:7C:F1:9D:69:95:08:92:B4:BA:4F:1B:E1:F6:A4:8C:7D:FD
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:7e:65:d0:a9:79:20:86:c7:e3:16:81:37:01:b6:76:52:
a1:91:f7:a5:be:1e:c0:a4:d3:1c:f9:2f:d4:a1:08:36:df:66:
8e:2c:e8:a3:f5:24:b0:71:a0:48:c9:58:1d:58:fb:ad:1e:4f:
ec:25:ce:e5:22:10:b0:15:f5:41:da:6b:16:7c:06:d4:36:88:
59:78:bf:a5:fe:37:67:28:27:72:60:97:e0:e9:29:6c:99:4c:
b8:73:86:4b:f1:78:a9:7c:99:92:8b:32:6e:b5:c1:c2:15:ad:
b3:37:72:db:b7:cf:e9:34:be:f9:a8:0d:c5:6c:dd:0c:c2:f4:
6a:6c:ce:a9:bd:31:07:ae:3f:5d:5b:ac:db:10:08:2e:02:57:
ec:40:47:ff:e7:ff:c9:2a:3f:35:4d:dc:b5:3f:6b:d2:15:c7:
24:87:75:be:bf:67:91:fe:ab:3c:29:1d:7c:a4:7d:59:72:55:
17:ba:39:0f:c9:f0:9a:48:6a:90:0a:47:11:71:51:bf:44:3f:
97:8f:bf:c7:e8:ef:99:3a:4f:82:92:f3:80:5e:61:51:51:e2:
51:fe:ba:70:da:dd:05:c1:db:4e:ad:64:86:dd:e0:5d:19:db:
21:c0:7e:60:4b:5d:48:c3:11:50:26:b7:1b:6b:2d:08:80:33:
08:19:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:11 2026 by rpki-client