Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: 2zqZl/8MyhBAN5D50PWCSDCwaiJR3/csV+Y5avPWXBA=
Subject key identifier: E2:CA:17:DF:61:23:A2:26:BC:B6:1D:B7:46:3A:E7:83:19:AC:EE:34
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019D3865EB73885C56D3EC794454DDA40EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0C1F
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: +PDVRFziouW8kzzN3yhlr1eBLH5KRGTJX7lRPRdf6Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:73:88:5c:56:d3:ec:79:44:54:dd:a4:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=e2ca17df6123a226bcb61db7463ae78319acee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:aa:4a:dc:dc:4d:d6:a5:8f:75:0a:b8:4e:
ae:2d:92:12:4f:77:69:93:ef:78:9c:23:54:99:e1:
ea:02:45:51:16:ab:83:a9:d2:f7:26:82:42:d5:09:
d0:0d:9c:01:99:ef:d6:16:be:b2:ed:c3:ae:7a:10:
06:37:8e:8f:d1:e3:e6:4e:c3:61:e3:5c:b8:7f:6e:
42:5a:35:bb:a0:2e:20:c5:2f:80:d7:07:ea:ca:b4:
9c:25:71:b9:72:f8:0d:d1:a1:41:8e:dc:82:da:54:
59:26:ef:fa:9c:9e:55:24:cf:18:f6:8b:3a:cf:e4:
1b:24:79:7b:2f:fa:68:94:4d:72:61:9e:57:a8:4c:
13:9b:14:ac:8d:c2:44:ab:da:45:8a:5e:a4:7e:9e:
94:2f:2b:59:13:9e:58:6c:29:40:b8:5d:89:dd:a1:
5f:c0:9b:25:9f:87:16:ab:eb:80:ad:f8:58:73:90:
08:65:51:8b:44:5b:da:32:1a:e7:40:81:a8:74:eb:
c7:e1:66:7e:fc:68:f7:97:20:12:47:1b:3f:13:07:
dd:ea:55:38:50:84:2a:72:10:2f:17:22:a3:82:6d:
1f:ec:e8:28:af:60:b3:04:40:f1:c0:4b:cc:e2:86:
55:77:71:3c:f7:a0:02:8e:c6:13:21:44:f5:8e:9c:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:17:DF:61:23:A2:26:BC:B6:1D:B7:46:3A:E7:83:19:AC:EE:34
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:88:5b:3b:e9:d4:7d:6c:e0:16:1f:64:d2:d6:58:6b:13:
ae:24:eb:54:d4:b4:75:b4:99:35:58:9c:83:9c:0e:b6:14:3f:
1d:09:51:47:19:1c:a4:d8:1d:6b:20:2f:eb:3a:4d:16:83:06:
57:4c:2b:58:a6:da:35:6e:4f:d5:34:c1:a6:dc:d8:89:84:36:
c5:e5:da:5f:6a:d3:ab:52:c8:4d:16:08:74:51:66:5f:75:66:
d6:ae:3c:26:7c:f7:b2:20:08:1f:c6:c1:ec:0b:a5:c1:b4:e4:
91:05:25:1d:eb:e4:a0:02:f9:00:17:f9:9d:f5:35:6a:1c:66:
30:7f:29:ba:61:4e:fe:94:e9:11:8d:8a:95:ee:46:75:3d:da:
38:3a:81:82:ba:be:07:d4:04:87:d2:56:c7:d7:ca:a4:88:68:
52:78:51:4d:79:a2:06:a3:3c:35:74:30:53:d3:e6:db:35:3f:
e7:18:83:c5:e4:c7:62:5d:24:f0:64:d4:fe:10:b3:28:5d:a8:
54:8e:2b:ad:3c:5a:d8:87:ea:59:96:c6:c9:f6:06:b8:dc:8e:
13:bb:c5:96:67:ee:f9:85:9a:e1:57:e0:75:da:b8:fd:dd:f5:
3b:bd:5d:f2:b0:29:d6:89:91:68:31:d8:59:5a:c2:a8:f2:c1:
c3:5c:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:32 2026 by rpki-client