Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: 0QIFp1S5NlGO+UstMO0VMOwMdg0WcBHLGkprWvcGFHM=
Subject key identifier: 14:A7:79:8E:D2:CA:CA:60:40:E5:E9:89:B6:44:94:AA:69:EC:40:41
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019FAAF61AF2D507950F87B341E0CC6109B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 23:01:23 +0000
Manifest this update: Tue 28 Jul 2026 23:01:23 +0000
Manifest next update: Wed 29 Jul 2026 23:01:23 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: qq6VWxHt1iGimiLYxRwNiTXV7y+O0NyVm6SqwMYC8ZE=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:1a:f2:d5:07:95:0f:87:b3:41:e0:cc:61:09:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jul 28 23:01:23 2026 GMT
Not After : Jul 29 23:01:23 2026 GMT
Subject: CN=14a7798ed2caca6040e5e989b64494aa69ec4041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:e2:4c:f4:be:e8:04:8d:b0:e7:3a:89:8d:
a0:5a:8e:32:e4:b0:ab:3f:50:ea:6b:f5:ee:55:f3:
d3:01:fd:0d:0c:50:55:4b:8e:5f:89:7d:da:17:63:
8f:4e:19:10:50:2f:3f:e8:3c:5f:50:fa:91:6f:3c:
7e:ed:a2:3e:70:f8:6f:14:1d:80:33:49:c8:fe:81:
19:36:47:9d:08:c8:8a:c5:c7:87:51:71:67:f1:b1:
f4:84:6f:b8:1c:cf:bb:af:2e:75:9a:62:ee:68:cc:
de:43:8a:a1:51:58:a0:9d:b1:96:60:e0:30:50:cf:
49:03:c5:d6:d6:27:14:14:7a:d6:93:bb:60:a5:dd:
b6:d2:a5:c2:d0:99:67:3d:de:41:84:3c:5e:8e:af:
d3:7b:e6:9a:5c:53:2c:12:c7:ce:0d:77:df:ee:c4:
9a:f2:87:c9:1c:15:f4:61:62:fc:59:a4:2b:55:f9:
91:f9:fb:e2:16:ed:a0:04:5f:d7:36:f4:70:99:fc:
e9:a6:04:63:49:42:ac:fe:28:78:f0:f9:d8:56:50:
c8:4d:f6:b9:f8:33:ce:fb:ba:0b:0d:8e:f4:a0:77:
1e:62:03:a8:43:e5:31:25:be:b8:4a:7d:3b:2a:4c:
e1:b4:76:04:61:37:ad:11:e3:5b:12:04:ce:86:67:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:79:8E:D2:CA:CA:60:40:E5:E9:89:B6:44:94:AA:69:EC:40:41
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:14:8d:de:b3:4c:7b:65:4f:a4:1f:0b:b4:c1:99:5d:69:
4a:c3:49:67:ca:03:6e:40:74:f1:ee:56:f4:5a:66:68:d7:08:
34:6a:61:e1:e5:92:c7:75:79:d6:99:0c:3e:41:46:84:00:11:
56:62:0c:7c:4e:cf:9d:3f:a5:99:a7:83:7c:76:b4:d5:88:65:
2c:e7:a6:14:be:db:9c:8a:d4:b7:5b:a8:3f:06:5a:9e:67:20:
51:bf:22:be:be:b1:87:6b:3f:aa:9e:70:96:49:36:70:70:54:
e7:30:c1:da:3d:a6:d4:4f:b5:19:23:a7:63:bd:b4:24:f8:71:
ab:19:98:42:39:24:5b:e1:81:ed:b3:92:0c:3e:fa:dd:26:64:
73:8d:35:7e:21:49:9e:57:a6:ec:9d:f6:24:3b:54:d8:97:1c:
6e:e0:48:1d:9d:dc:da:62:bd:3f:42:a6:4b:c7:54:90:36:e1:
de:64:4c:2e:29:ed:1b:10:48:1c:4c:80:0e:23:91:4d:56:b0:
eb:b2:89:ff:26:c4:01:96:d5:77:6d:77:4b:36:ad:74:2c:28:
b9:fd:bb:0b:aa:ec:ea:14:e5:6f:a0:fd:85:87:70:ae:8b:f9:
70:cf:a1:42:0e:c0:89:c2:db:e2:c8:75:10:43:b2:23:ed:45:
d3:eb:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:11 2026 by rpki-client