Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: 7NSozOZmFIdgTtPSM9Pq8BgwAcQBBQUOaV0xTss0txc=
Subject key identifier: 18:8E:C0:65:CA:BC:CB:A1:BB:03:3F:C4:53:7E:F1:4F:00:C2:63:61
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019D37F769395D32DEE8C4BDB5AF3A8ED4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 0957
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: OJzGcjKcWBttWOSEl00EzIw2eSo.roa (hash: WpkGS5n3qr7ItAnomtxJOBjcvjZ+Y7UVUlP7YBtoJOg=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: 9BK/+mpI2A31Y+mhT5SoCKWLwarONrgDaI5gMalPgZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:39:5d:32:de:e8:c4:bd:b5:af:3a:8e:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=188ec065cabccba1bb033fc4537ef14f00c26361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:13:b6:18:c0:c4:8f:d3:13:7c:75:66:ae:
2c:52:73:7e:94:02:1f:3c:9d:3a:1a:25:f1:4f:62:
a0:f2:e7:40:6d:84:f4:b1:9f:29:7c:d5:5c:23:08:
c5:ec:00:1f:10:0d:8f:a1:7c:0e:9e:30:10:dc:42:
34:29:d1:a0:74:0a:30:5d:45:ea:77:8f:ad:fb:c8:
75:61:61:41:0f:27:56:d6:09:f2:2f:80:78:fd:dc:
33:ad:e7:30:58:5e:d4:97:e1:97:b0:14:91:2e:ba:
78:03:c9:03:92:e7:5f:e8:66:ee:52:68:f1:7c:29:
f0:c5:34:6d:ed:e5:d9:01:7d:ca:94:19:0b:44:41:
2c:fc:70:9c:3f:56:8e:a5:b0:68:1a:22:82:29:0e:
49:0e:a3:86:c2:d3:fe:ec:15:77:b6:09:85:26:8b:
32:e1:b9:88:58:79:f8:81:27:d0:ce:d1:45:64:bb:
04:12:5a:d9:c1:af:ee:2f:34:a4:e6:2e:fb:81:3d:
d4:9f:89:7f:9d:c5:ff:eb:5c:a5:3b:41:be:a1:7b:
2b:b8:51:ad:31:78:cf:fb:d5:64:f2:5e:44:76:4b:
00:a3:89:9d:22:29:4e:5b:7f:c7:8c:b0:ce:fb:58:
6e:fa:51:7a:4a:76:e1:74:36:d5:75:a4:06:11:c0:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:C0:65:CA:BC:CB:A1:BB:03:3F:C4:53:7E:F1:4F:00:C2:63:61
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:24:52:75:2b:ce:59:53:fc:a4:f9:47:f1:fb:f7:33:ce:2f:
ab:3e:0f:e5:22:d7:89:d2:ce:52:9a:b3:88:9c:9a:06:c0:3e:
13:2d:70:19:df:e6:a6:1f:c6:2f:29:3a:8f:93:9f:d8:2b:64:
5f:48:72:a0:33:5f:6a:71:6d:b3:e6:8e:e0:f9:e7:c3:bb:d9:
59:85:62:51:ee:cb:16:28:32:3d:f8:23:ef:3f:c6:e8:73:e4:
38:dc:e9:fd:8f:1e:41:1d:74:de:f2:8b:5c:65:f8:e4:87:be:
69:24:0a:80:f7:64:df:9a:e7:bf:0d:ec:c2:f5:e9:bb:f4:76:
a0:b0:32:a2:11:55:66:09:04:53:4f:42:71:7c:3b:57:9d:2d:
90:15:0c:60:09:7c:76:97:40:38:49:b8:69:e6:92:52:62:29:
3b:f8:87:73:7c:89:cf:8d:16:f8:80:ff:24:f7:f9:73:1f:e6:
c7:f4:bc:00:85:15:cb:27:14:2e:42:ac:a5:12:3c:84:7d:96:
4b:57:37:13:17:8f:e7:11:9e:19:61:01:50:70:16:18:f8:20:
5f:0e:97:9a:14:3b:e1:39:f5:a5:95:56:c1:88:bf:53:c8:08:
22:ae:4d:fa:7e:77:31:37:bc:db:47:ea:aa:7e:09:27:c5:37:
94:0f:c8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392k5XTLe6MS9ta86jtS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1
NWI0OTQwHhcNMjYwMzI5MDUwMDU0WhcNMjYwMzMwMDUwMDU0WjAzMTEwLwYDVQQD
EygxODhlYzA2NWNhYmNjYmExYmIwMzNmYzQ1MzdlZjE0ZjAwYzI2MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFcTthjAxI/TE3x1Zq4sUnN+lAIf
PJ06GiXxT2Kg8udAbYT0sZ8pfNVcIwjF7AAfEA2PoXwOnjAQ3EI0KdGgdAowXUXq
d4+t+8h1YWFBDydW1gnyL4B4/dwzrecwWF7Ul+GXsBSRLrp4A8kDkudf6GbuUmjx
fCnwxTRt7eXZAX3KlBkLREEs/HCcP1aOpbBoGiKCKQ5JDqOGwtP+7BV3tgmFJosy
4bmIWHn4gSfQztFFZLsEElrZwa/uLzSk5i77gT3Un4l/ncX/61ylO0G+oXsruFGt
MXjP+9Vk8l5EdksAo4mdIilOW3/HjLDO+1hu+lF6SnbhdDbVdaQGEcD9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiOwGXKvMuhuwM/xFN+8U8AwmNhMB8GA1UdIwQY
MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt
NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy
LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCRSdSvO
WVP8pPlH8fv3M84vqz4P5SLXidLOUpqziJyaBsA+Ey1wGd/mph/GLyk6j5Of2Ctk
X0hyoDNfanFts+aO4Pnnw7vZWYViUe7LFigyPfgj7z/G6HPkONzp/Y8eQR103vKL
XGX45Ie+aSQKgPdk35rnvw3swvXpu/R2oLAyohFVZgkEU09CcXw7V50tkBUMYAl8
dpdAOEm4aeaSUmIpO/iHc3yJz40W+ID/JPf5cx/mx/S8AIUVyycULkKspRI8hH2W
S1c3ExeP5xGeGWEBUHAWGPggXw6XmhQ74Tn1pZVWwYi/U8gIIq5N+n53MTe820fq
qn4JJ8U3lA/IWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:02 2026 by rpki-client