Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: mQDtl2b4uQnqhb1YhQUdqJjahQY+DJqPsPDtdmZv3c0=
Subject key identifier: A2:AC:00:E6:21:A2:B9:A2:44:96:DF:F6:D0:C6:60:1D:67:CC:26:6F
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019D9962BA67FFD4694B3D6C10D565434CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0BF1
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: dJfH4IQSAirsbNMmbtNcbWml+MFwr9nB6Io0l/6IbeU=)
2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ba:67:ff:d4:69:4b:3d:6c:10:d5:65:43:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=a2ac00e621a2b9a24496dff6d0c6601d67cc266f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:1e:f6:62:f1:31:a7:67:f0:bd:f6:03:a3:
19:bc:2f:b0:7c:26:66:c0:d1:35:ac:fb:a7:c9:6d:
1a:45:bc:77:00:1a:5e:3b:c3:7d:6c:84:ce:f9:30:
b8:54:cc:b9:95:84:51:72:52:41:02:e5:5c:d5:38:
73:26:92:86:5e:95:8a:0a:4c:59:2d:68:9e:67:70:
90:60:a8:ec:99:f1:2e:fb:f3:e5:e6:e5:35:2a:c3:
f3:9c:c0:83:99:07:8f:84:a0:4f:a0:7f:24:d5:d5:
a6:48:68:39:6b:c0:6f:a7:1d:46:c0:66:90:4b:02:
2d:e9:56:0b:48:11:24:e8:ab:4f:3c:5e:ad:c8:f7:
d5:6f:c6:14:9a:36:52:27:a4:4f:0c:67:94:7f:37:
a7:d1:ab:2a:cb:6a:61:03:ac:68:a4:da:45:03:cc:
82:c3:f4:6a:91:d7:67:80:64:09:5f:f4:87:7a:f8:
ad:b2:9f:71:65:62:43:f0:b5:be:58:7c:b8:ed:c9:
4c:5f:6b:9d:d1:ac:84:63:9e:8b:b2:f5:03:58:c7:
79:0b:b0:5a:73:6a:fe:51:ca:66:d8:29:88:44:b6:
d5:eb:22:13:27:d8:82:c3:80:0f:81:10:dd:c1:6c:
e1:c0:47:cd:b5:3f:8b:ec:33:98:ac:82:5e:e4:2c:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:00:E6:21:A2:B9:A2:44:96:DF:F6:D0:C6:60:1D:67:CC:26:6F
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:94:39:17:54:00:5b:01:9a:fa:e4:15:75:21:c9:ac:63:
85:54:d5:8d:13:81:20:60:8a:73:fa:21:0d:51:ce:da:70:c6:
7f:52:ce:3e:ca:da:90:2d:12:16:2d:d0:04:de:71:44:86:c4:
ad:35:a0:48:5e:e0:66:a6:aa:c5:10:4c:d4:c2:d4:2e:8c:f7:
7e:09:1c:69:cb:ec:47:53:2c:7a:20:2a:38:e5:94:1e:dd:95:
34:bf:72:b0:1e:7d:c4:cd:6f:40:6f:bc:4f:f1:78:7b:f6:56:
f1:02:db:c1:94:ca:29:40:64:6a:8f:7a:09:ac:23:55:3e:b5:
57:c6:5a:46:84:28:3e:84:a4:b0:43:6b:b6:68:a2:cc:13:90:
c6:38:d8:8a:b8:59:e8:8d:ff:d9:05:d5:37:ce:42:be:c4:17:
67:d2:b0:04:39:1f:d7:1c:34:72:c5:51:2e:1b:4b:35:6a:e1:
a3:83:8c:1d:0d:e9:a7:3b:c9:a5:ac:3d:be:62:30:9e:d9:44:
da:1b:67:aa:2e:df:c9:11:26:52:6d:d1:0a:13:b1:58:74:35:
d1:c0:c5:90:f2:24:aa:f6:d6:2f:a7:3a:d4:09:55:cc:f7:2c:
41:c5:43:de:ee:e8:85:10:16:bc:95:5e:6b:ba:d3:d2:df:7c:
71:8c:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:32 2026 by rpki-client