
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
File: FZLn4r66W82NQp2b7lN2sIEEdas.mft (raw, json)
Hash identifier: /Gq1XFW8MVnU1WcoWBZjsYCMhuOr0/kLHuhw2KZx2O8=
Subject key identifier: A5:7F:90:A5:9D:74:B0:DE:5B:95:C1:A4:13:8D:D1:B5:50:FE:63:29
Authority key identifier: 15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
Certificate issuer: /CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Certificate serial: 01A1250B6504BC5F47B85E95484F037CE67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:05 +0000
Manifest this update: Sat 10 Oct 2026 09:01:05 +0000
Manifest next update: Sun 11 Oct 2026 09:01:05 +0000
Files and hashes: 1: FZLn4r66W82NQp2b7lN2sIEEdas.crl (hash: GMJvtLXCk/Num7oVo3qkXoE3fJ+rnSr9iDCvnSJFCwo=)
2: tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa (hash: Ga9D1Kj+eOQFH1ST/P7sI0dH985uIKk/1LYCPBqpD78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:65:04:bc:5f:47:b8:5e:95:48:4f:03:7c:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Validity
Not Before: Oct 10 09:01:05 2026 GMT
Not After : Oct 11 09:01:05 2026 GMT
Subject: CN=a57f90a59d74b0de5b95c1a4138dd1b550fe6329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:f4:24:7e:13:36:fa:0f:65:ae:3b:a5:4b:
ee:28:1c:71:16:35:ee:66:14:b4:6a:5d:f7:17:af:
08:41:a3:1f:e7:84:f3:c8:e1:40:49:b1:a0:15:73:
c6:d6:1a:2e:32:3a:59:09:e0:63:f0:da:e8:7b:b3:
c6:82:f9:b6:fa:b9:45:38:ef:d9:c4:f7:c1:d0:14:
b0:1d:fd:b6:84:07:89:81:14:06:b8:3e:e3:75:51:
44:5f:d6:6f:35:a1:ea:f5:e3:bf:c6:59:22:6c:cf:
cd:2e:60:87:65:36:24:5b:a3:3e:63:c6:2b:25:76:
ce:ff:ea:da:64:af:24:98:de:f3:a0:61:6d:ab:2f:
4c:4a:02:de:76:6b:c8:2d:d8:df:0f:fe:3e:bc:80:
51:6a:1b:ac:32:72:1e:68:6f:0b:8d:76:bc:cd:6d:
7d:8d:a1:b5:d5:37:16:29:45:4a:08:7f:15:5c:b2:
45:63:f6:8f:72:65:2c:f0:2e:eb:98:0e:b2:6a:c2:
a8:ff:3a:91:35:d8:08:b6:43:6c:37:b9:35:cd:98:
78:89:72:25:55:c4:9c:d7:4e:4d:92:d6:da:9b:46:
9c:53:69:34:c6:4d:2c:92:ec:0e:7a:96:a1:73:22:
2d:0e:26:9f:5e:9e:f4:e1:c0:28:9f:e6:47:f9:8d:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:90:A5:9D:74:B0:DE:5B:95:C1:A4:13:8D:D1:B5:50:FE:63:29
X509v3 Authority Key Identifier:
keyid:15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:5a:75:03:e7:0b:a3:da:c4:48:c7:62:ae:cd:df:63:55:
5a:fb:4b:ad:02:79:fc:2e:05:74:db:75:60:31:a8:d6:4a:6e:
af:ab:8b:4d:73:8b:be:ff:f7:67:5a:fa:3c:0a:64:6a:ac:ab:
f6:85:37:b5:42:72:e2:a7:80:a0:52:19:1b:e3:51:e7:4e:be:
03:49:29:2e:57:17:da:d7:ab:5a:1e:57:23:cd:0b:dc:af:8b:
11:ee:fa:73:28:2f:24:42:ed:37:15:2c:10:16:d1:d7:98:d9:
84:03:3c:3c:94:7c:13:cd:d3:e7:16:a5:1b:d3:a1:ff:80:03:
ac:6f:35:bd:74:64:1a:98:b1:be:36:61:1e:fc:2b:9b:09:32:
51:c9:3e:10:07:52:6a:80:fd:cd:8a:5e:50:ca:ae:b0:01:c4:
11:5b:11:11:99:fe:0a:06:8a:e2:94:24:70:13:1b:69:ad:ed:
16:30:e0:b4:59:4e:40:0a:1e:f9:0b:32:36:17:2f:b0:e4:2c:
83:23:8f:ec:19:00:7a:be:96:e5:8e:c0:37:1c:33:32:b1:df:
57:af:f9:84:42:ea:ba:4e:55:93:cd:fb:31:36:61:75:9d:33:
2d:63:10:b4:fc:e0:d5:88:82:48:53:76:4b:cf:4a:fa:76:79:
1a:6c:60:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC2UEvF9HuF6VSE8DfOZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTJlN2UyYmViYTViY2Q4ZDQyOWQ5YmVlNTM3NmIwODEw
NDc1YWIwHhcNMjYxMDEwMDkwMTA1WhcNMjYxMDExMDkwMTA1WjAzMTEwLwYDVQQD
EyhhNTdmOTBhNTlkNzRiMGRlNWI5NWMxYTQxMzhkZDFiNTUwZmU2MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUH0JH4TNvoPZa47pUvuKBxxFjXu
ZhS0al33F68IQaMf54TzyOFASbGgFXPG1houMjpZCeBj8Nroe7PGgvm2+rlFOO/Z
xPfB0BSwHf22hAeJgRQGuD7jdVFEX9ZvNaHq9eO/xlkibM/NLmCHZTYkW6M+Y8Yr
JXbO/+raZK8kmN7zoGFtqy9MSgLedmvILdjfD/4+vIBRahusMnIeaG8LjXa8zW19
jaG11TcWKUVKCH8VXLJFY/aPcmUs8C7rmA6yasKo/zqRNdgItkNsN7k1zZh4iXIl
VcSc105Nktbam0acU2k0xk0skuwOepahcyItDiafXp704cAon+ZH+Y2FLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV/kKWddLDeW5XBpBON0bVQ/mMpMB8GA1UdIwQY
MBaAFBWS5+K+ulvNjUKdm+5TdrCBBHWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt
MjlmZmM0NDQzOTAxLzEvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx
LzEvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE9adQPn
C6PaxEjHYq7N32NVWvtLrQJ5/C4FdNt1YDGo1kpur6uLTXOLvv/3Z1r6PApkaqyr
9oU3tUJy4qeAoFIZG+NR506+A0kpLlcX2terWh5XI80L3K+LEe76cygvJELtNxUs
EBbR15jZhAM8PJR8E83T5xalG9Oh/4ADrG81vXRkGpixvjZhHvwrmwkyUck+EAdS
aoD9zYpeUMqusAHEEVsREZn+CgaK4pQkcBMbaa3tFjDgtFlOQAoe+QsyNhcvsOQs
gyOP7BkAer6W5Y7ANxwzMrHfV6/5hELquk5Vk837MTZhdZ0zLWMQtPzg1YiCSFN2
S89K+nZ5GmxgQQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:52:34 2026 by rpki-client