Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
File: FNEUZbrci_3-hbWKrm_H3MNtkUs.mft (raw, json)
Hash identifier: x0YaMyV2OmLwzWHBhR4JQKxEwc1RPaOMCxUpZR333Zw=
Subject key identifier: 52:5B:C9:C8:A4:BC:66:96:53:33:11:39:E4:EB:A1:75:BF:6D:EA:23
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019FAB9AA2A4991B57C9DDC6AC6A03BF4D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
Manifest number: 01B3
Signing time: Wed 29 Jul 2026 02:01:05 +0000
Manifest this update: Wed 29 Jul 2026 02:01:05 +0000
Manifest next update: Thu 30 Jul 2026 02:01:05 +0000
Files and hashes: 1: FNEUZbrci_3-hbWKrm_H3MNtkUs.crl (hash: vAKQQPM/t8EVy1/oDLL0zgOmipeBOpnchv4jqjoKurM=)
2: Y4nISHAwAxtiYFC_jM0ArCQgUyg.roa (hash: TUMvfhRMK+ynsPapA02++UengkOaTQAMJvbl6nz4clk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:a2:a4:99:1b:57:c9:dd:c6:ac:6a:03:bf:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Jul 29 02:01:05 2026 GMT
Not After : Jul 30 02:01:05 2026 GMT
Subject: CN=525bc9c8a4bc669653331139e4eba175bf6dea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:34:44:3f:6f:3f:b0:54:97:d5:14:e1:28:
51:40:52:b6:f2:1c:a7:bb:15:df:68:bf:b1:6d:36:
cf:44:95:5a:94:69:f1:ec:a9:e2:3e:0b:d0:e3:de:
c7:22:cd:99:a6:8d:b5:00:f1:03:89:60:57:cb:ab:
65:52:08:41:87:7b:52:56:1a:8e:6b:8a:a0:90:4a:
84:6e:a1:bb:da:43:d1:64:df:47:e0:f6:ea:b3:d8:
33:8d:53:bc:0a:29:6d:f5:b7:0a:de:bf:81:fe:f9:
5b:21:f9:10:a3:d3:bf:7d:21:07:8e:9e:bf:45:bd:
7e:54:64:3f:f6:be:bf:f1:6b:9c:75:40:9a:e3:95:
25:ca:16:3f:7f:8c:d3:03:0a:12:ca:0c:47:bc:ac:
91:c0:4e:9b:fa:1c:96:22:06:88:55:c8:f4:50:3c:
ba:80:80:c1:73:0c:62:79:72:9c:0f:89:85:09:7a:
4f:ee:b2:e2:f4:09:e1:3e:b3:d4:fd:ff:f5:92:84:
20:45:0c:29:37:1b:24:a9:5e:c6:43:8e:73:0b:43:
a4:74:1d:a5:55:3e:d8:a5:f6:1d:c3:20:77:25:58:
98:d1:5f:c4:e0:77:d1:72:15:83:13:5a:cd:8f:b0:
96:75:93:17:a1:97:cd:12:50:69:90:df:b2:3b:f3:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:C9:C8:A4:BC:66:96:53:33:11:39:E4:EB:A1:75:BF:6D:EA:23
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:47:f0:3e:3b:6e:a6:96:95:ce:65:fc:07:17:8c:4a:cb:6e:
06:c1:34:25:59:06:dd:42:38:ee:3e:46:3b:5a:0f:d2:47:8d:
3f:6b:22:9d:93:e0:92:f9:b3:ab:2c:43:c4:ea:b8:b7:5a:66:
c2:a8:05:bf:c4:e4:63:ae:31:ca:30:df:61:e4:3d:32:4a:81:
b1:da:e0:29:4a:d7:02:dd:82:83:f8:66:75:d2:2a:c7:60:87:
9f:f4:09:62:c6:1e:8b:62:de:07:c1:8e:e4:4c:79:30:05:8e:
83:41:23:09:fb:9f:89:f0:68:9a:c8:56:ef:a7:dd:fd:ae:87:
0e:02:18:2e:b1:bf:a1:9f:d2:2f:89:8a:a6:3c:c8:35:af:0c:
c6:f6:12:38:6f:a5:0e:4c:33:0a:a1:86:1b:ee:82:6f:5b:90:
4f:c9:95:40:c3:c6:36:6c:cf:42:b4:e0:8d:a7:89:aa:e9:f3:
6c:82:92:fb:b3:70:c5:08:ba:fd:c6:e5:0a:5f:6a:ad:a9:1e:
9a:d2:78:91:f4:50:f6:91:dd:a7:a4:85:48:10:86:dc:e0:fe:
d5:8e:d4:49:3a:2a:1c:a8:b6:58:ed:23:f0:e0:2b:d8:90:8e:
26:a1:49:b2:55:e2:63:9c:7c:2b:58:58:0f:90:f8:e7:ec:52:
e4:70:ef:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:02 2026 by rpki-client