Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: QjMkoS5ikmw4rO6OtISMbztLm21K0P89/uSFeCa9wUg=
Subject key identifier: B2:2A:0E:4A:EE:5D:AF:CE:09:0D:2D:FA:0E:A7:ED:59:FB:2F:B6:3D
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019D37C0FCA2FCBADFBF9C1146558FF7F71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: JVGahffKG+g52Sp2XNx3g1wN74XVxsuR5uV+ThP5/2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fc:a2:fc:ba:df:bf:9c:11:46:55:8f:f7:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=b22a0e4aee5dafce090d2dfa0ea7ed59fb2fb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:55:63:73:19:bb:c9:4d:ae:c9:18:46:b9:
4c:ff:49:9c:0d:2d:cc:99:2d:51:71:7b:27:2b:e8:
a0:89:5b:b9:e0:e0:33:e4:b1:75:94:f1:b2:58:cd:
b5:d2:64:45:54:e3:77:2f:84:75:a1:1b:d2:27:93:
a0:8f:ac:28:1f:ee:6d:bf:6b:57:e0:1c:76:f3:00:
4d:64:90:32:79:a2:ee:31:a2:de:56:3a:ed:10:a0:
29:16:42:bc:b4:7f:8f:c5:81:4a:05:9d:32:19:5f:
4f:3f:f3:47:fa:9a:fa:f2:58:1d:d6:93:13:5f:02:
73:3a:2f:27:f8:66:5d:c7:e9:af:48:95:0b:ef:1e:
e1:ad:4b:2b:46:dc:f3:18:3b:66:5d:6d:7b:54:f8:
d5:eb:c8:b8:a6:6b:42:c5:a4:84:63:a5:74:7d:b8:
7a:92:64:1a:dc:8d:48:8f:0c:8a:a5:4d:62:68:95:
35:a2:df:38:6f:b8:c9:95:c1:08:2f:a6:24:14:28:
09:1c:54:e5:58:3c:99:60:6f:9d:bc:54:d3:64:53:
43:a6:30:44:6c:a9:9d:8a:02:8b:03:f7:f8:10:dc:
b5:62:c3:2c:65:6d:22:fb:e4:b8:39:65:af:52:b2:
4e:92:27:46:7f:2c:6d:43:4c:13:32:2c:a4:74:18:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:0E:4A:EE:5D:AF:CE:09:0D:2D:FA:0E:A7:ED:59:FB:2F:B6:3D
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3f:bc:19:e6:dd:8b:01:87:4d:86:60:71:5e:b3:e3:76:d9:
f3:40:d9:72:16:85:cd:78:ef:2c:e5:69:a2:b1:73:d1:bf:26:
d3:af:68:a8:6e:59:e6:36:eb:2f:2a:50:0e:62:3a:6b:40:96:
9d:b1:98:c3:8f:29:2e:cd:e4:8a:47:b4:8a:af:1e:f6:f2:da:
03:fe:9b:a1:1d:4a:38:27:26:90:35:a8:f7:88:b8:fc:2e:b4:
cb:06:77:57:d3:c5:25:c5:4d:f5:0a:9e:d1:33:ef:3c:2c:a4:
d5:c7:be:c1:7d:0f:16:67:5a:65:9f:a6:ca:c5:41:39:c4:00:
ce:6f:40:c4:97:90:5b:be:ce:db:6f:14:13:71:87:84:00:7e:
1a:78:53:f5:53:db:96:6e:59:e3:d7:6b:00:df:56:1b:c2:82:
40:d3:a5:50:b9:4f:f1:91:a7:fc:0b:e2:b9:83:02:83:37:ce:
40:76:83:3a:89:28:10:b0:3a:8a:cf:7c:03:33:98:9e:a7:af:
73:ea:6d:95:1b:26:d8:d0:14:c4:02:08:5d:80:d3:96:38:2b:
cf:12:b2:3b:8d:d0:3e:18:10:39:8a:cd:91:46:d9:03:97:fc:
da:da:bf:7a:3b:fc:25:29:36:2b:56:c6:96:a8:b6:48:99:c5:
c6:d8:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:17 2026 by rpki-client