Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: CsJEtG8xSNzG943H7EjQekNKoHWx507B7LAs+JXmvmg=
Subject key identifier: 9D:A3:A3:42:95:AD:D1:A6:D0:F7:6F:1C:AC:88:6D:AE:98:CE:16:8B
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 01A0CA468BABDE2E5F4603EAB8D1CEA2D529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0D98
Signing time: Tue 22 Sep 2026 18:00:15 +0000
Manifest this update: Tue 22 Sep 2026 18:00:15 +0000
Manifest next update: Wed 23 Sep 2026 18:00:15 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: yqbMHiTPKuLum+A9x1JafaOeFoOaznE5cMESRqweGoU=)
2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:8b:ab:de:2e:5f:46:03:ea:b8:d1:ce:a2:d5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Sep 22 18:00:15 2026 GMT
Not After : Sep 23 18:00:15 2026 GMT
Subject: CN=9da3a34295add1a6d0f76f1cac886dae98ce168b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:b2:87:4d:f2:de:9d:5f:cd:01:bc:30:ee:
c4:a6:3b:62:4a:5b:ae:91:a0:57:31:56:87:7b:d4:
b2:52:6b:9b:f0:b1:11:4d:85:8d:d8:78:2b:a3:25:
86:86:02:01:1e:ed:85:a1:48:40:89:1b:02:91:3d:
e4:71:02:62:9d:aa:f1:66:b8:cd:bc:a0:cb:13:fc:
90:f8:80:eb:ca:bc:b6:75:e8:0d:f0:68:82:a6:d3:
b4:6c:38:d4:21:89:bf:d3:5c:3a:f7:c1:1d:b6:22:
aa:6f:ad:ce:cf:c5:42:cf:fe:34:f2:ad:a8:37:16:
26:af:da:98:dc:1e:76:2c:42:5d:04:9b:d1:98:14:
85:33:97:f4:5f:99:63:3e:03:00:0c:8a:34:05:8f:
55:b8:43:af:a3:1f:dc:37:36:45:d7:ab:f9:15:f3:
2d:ed:58:67:32:95:f0:ed:ee:ad:c6:86:cd:78:61:
a0:46:55:15:47:da:11:dc:6a:3c:61:48:24:1a:24:
5a:84:2d:23:93:0b:41:73:41:b9:5f:db:f8:98:a8:
20:0a:b1:18:5a:36:c7:5d:b4:7a:ad:e8:47:2c:cc:
9f:68:de:8d:fd:fe:6a:cc:b8:02:25:7f:ca:c2:26:
09:bb:eb:50:2f:b4:ef:1f:7f:51:be:74:1d:cb:f8:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:A3:42:95:AD:D1:A6:D0:F7:6F:1C:AC:88:6D:AE:98:CE:16:8B
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:69:54:a0:31:21:21:4f:dd:dd:85:da:99:42:8b:c2:f5:
16:56:5f:fb:b4:26:33:96:20:77:30:dd:ab:98:a9:e5:fe:fa:
d6:55:71:2b:09:56:5e:ca:d2:e2:a8:cd:79:ed:6c:e6:a1:d8:
30:25:6e:cf:d2:ea:38:56:6f:c8:31:36:a9:ce:5a:6d:ce:0c:
6e:ab:77:cf:8c:99:3b:4a:52:57:ab:17:fa:38:3d:7e:fb:67:
d0:45:3b:69:1a:a2:a2:80:f9:15:ab:19:e3:8d:43:bc:9d:80:
3e:fa:5a:7f:8c:3c:5a:81:56:21:48:28:04:60:2c:06:29:3f:
6f:de:6a:63:33:75:ff:81:86:ad:0e:5b:ca:d4:6d:45:ab:78:
0b:7d:b1:ec:3c:ee:57:78:f2:12:74:f1:97:c9:64:00:00:da:
33:4f:38:6f:53:d3:04:d4:d9:5f:6e:ab:1d:2d:eb:7b:81:5f:
68:40:d1:da:6c:ac:50:50:ce:a9:5f:c4:c4:8d:96:06:4c:21:
8e:a7:c6:45:67:93:57:23:4b:91:b2:59:e2:ec:8a:a1:a5:00:
82:eb:9f:5a:26:18:ef:83:8e:5f:8b:f5:9a:e4:c0:20:c9:af:
bc:aa:df:bd:96:19:c9:ff:2f:ce:db:5d:d7:6d:9b:4f:e7:4c:
9e:c2:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:24:13 2026 by rpki-client