
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: VoddnotMOkQssE6bqEBW5fy1xSuYZOQmlMySVs8x2hA=
Subject key identifier: B4:52:89:BA:65:49:5D:DD:AB:95:DA:7A:C9:8A:5B:E4:E3:AF:8C:F5
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019D3909A76E6CA82A8FFC03BF00ECC54DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 0BDC
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: Xu5BQ7LrXCR8lJBVkhb4CoSeWZc.roa (hash: NXq7kChGH24MXWlnwrMypjf5dlmgOh9tkgpPRlq06/w=)
2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: wS/1IM3Z7/ECGrIwUxTxaAPkeF8Uq04kmgVxsY7ShOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a7:6e:6c:a8:2a:8f:fc:03:bf:00:ec:c5:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=b45289ba65495dddab95da7ac98a5be4e3af8cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:92:5d:c9:8f:36:6c:54:24:b7:18:e2:49:
26:b0:a7:ae:ca:62:f4:7d:8d:b5:4e:c4:c0:a7:3e:
22:e7:98:a9:4a:44:7a:e5:d1:67:a0:ac:4d:6a:1a:
ac:4e:5c:94:a0:0e:a1:f2:7c:60:8a:84:2f:4d:5e:
3d:6d:97:80:58:09:e8:94:6d:f0:de:57:63:f6:17:
e3:37:8a:07:e2:52:fa:28:d9:23:92:00:71:51:12:
12:1c:45:5c:00:8f:9b:fe:ad:27:90:95:19:fc:bc:
b8:98:f7:da:58:3b:a6:6c:c1:a0:a4:bd:68:c6:96:
1d:d2:8b:75:cb:1b:8e:8b:3d:7e:d8:6c:93:54:65:
fb:47:74:a2:55:92:0e:e2:54:3c:38:1c:10:cd:9b:
e3:e5:78:a5:ca:ec:7c:89:f9:19:02:72:92:41:8a:
9f:3c:3f:de:e7:be:f7:5f:c4:d2:77:83:2b:d9:f3:
ad:cf:41:9a:e7:bf:ca:c5:03:80:78:03:03:c6:c7:
cf:6b:59:8d:98:4e:b7:9e:d6:b7:ed:11:2e:e5:d3:
ea:10:4f:5e:6f:ea:e3:99:53:17:96:f7:1e:eb:8d:
2e:05:5e:dd:55:72:6d:a9:47:8f:c5:7c:8e:89:cd:
04:7a:a9:7c:cb:ec:77:e7:43:6a:71:d0:76:eb:c5:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:89:BA:65:49:5D:DD:AB:95:DA:7A:C9:8A:5B:E4:E3:AF:8C:F5
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:73:22:63:c7:a4:3e:56:09:c6:45:0e:2b:e3:0e:b6:a9:73:
74:1d:dc:10:6a:4e:97:07:5d:a8:2d:14:f4:d4:47:4f:cd:27:
a6:23:88:49:d7:f7:f1:e7:93:ea:0f:c8:3e:1b:5b:12:4f:13:
e2:c0:52:93:11:a5:5b:42:de:84:19:93:0f:eb:d4:c8:38:e9:
58:75:48:16:e9:b9:6e:f0:48:f1:4f:26:a8:94:ff:dc:76:72:
cc:34:f8:0c:b0:56:db:ae:27:c1:3e:44:a8:3e:3f:db:04:05:
7f:34:13:80:41:f9:1a:31:1d:52:9e:9c:30:34:38:fe:4c:f4:
1e:71:09:32:57:41:b6:98:25:dd:3a:5b:a6:b9:72:db:d4:32:
22:fd:76:c2:c2:14:41:0a:49:76:42:6c:49:97:9e:a3:24:31:
2d:36:be:7c:4e:31:d0:1a:73:41:e0:3b:cf:b5:25:cf:8d:91:
5e:c7:e9:0f:4d:7b:df:45:45:bc:c2:11:e2:0b:62:8e:61:83:
7a:63:00:20:62:65:0a:55:39:4a:28:a2:35:97:f4:3c:2b:19:
cc:95:37:14:b3:f0:d1:66:bf:fc:8c:e4:d1:2c:ed:df:32:4a:
0b:bf:d4:6d:cb:f1:52:d8:36:85:a3:54:4a:9b:01:cc:ba:32:
cc:4e:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:18 2026 by rpki-client