Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: 62QLNDBBNpt7N00s5IZCMeObwA+egGLQ6Kv9sAlur4w=
Subject key identifier: B3:95:33:40:4A:82:F2:47:D5:4E:2A:6A:9B:F2:41:E4:6D:A3:97:28
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019CAC470DD906162D760785E01D91E6C983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 02:01:03 +0000
Manifest this update: Mon 02 Mar 2026 02:01:03 +0000
Manifest next update: Tue 03 Mar 2026 02:01:03 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: aC1XY3+dEW06Jx1pSeRU+nrq2NpjrFxlAxnf/rYy55c=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0d:d9:06:16:2d:76:07:85:e0:1d:91:e6:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Mar 2 02:01:03 2026 GMT
Not After : Mar 3 02:01:03 2026 GMT
Subject: CN=b39533404a82f247d54e2a6a9bf241e46da39728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:d5:8a:4f:8b:22:0a:a5:eb:8f:db:26:42:
48:25:9b:06:77:1e:14:30:3c:0f:5d:1b:f7:a9:1d:
d5:4a:65:eb:2d:03:fa:f4:1b:11:a5:71:65:1f:ec:
d8:aa:30:d1:94:c4:f9:7a:8c:62:ea:68:cc:2a:e2:
3b:09:ba:23:82:7b:19:c6:1d:97:ac:69:da:16:17:
c8:a8:2c:cc:44:dc:d9:5c:73:f9:43:08:6f:1a:28:
dc:6c:8f:34:c8:66:b5:0d:ac:7d:00:82:cb:10:7c:
51:1a:a6:bb:d6:84:76:15:2f:ba:78:16:dd:e6:91:
9b:44:3d:d8:6f:70:ae:c4:75:e2:2a:89:25:3d:4e:
e8:dc:b1:b3:8e:c5:0d:7b:c9:2c:df:58:63:5c:94:
69:a0:fa:39:c3:34:e5:92:71:75:76:a4:f6:3e:d2:
29:c7:a2:80:b6:6d:1b:10:f9:cf:e0:b1:3e:80:53:
75:b2:50:c6:af:79:d9:e8:2b:ec:4e:93:84:a7:bb:
8f:40:f0:92:30:b6:f2:aa:c4:17:ae:5e:b2:ab:2e:
69:e6:d7:c9:54:32:d8:cc:ed:a4:de:69:d9:ef:42:
92:7b:1c:73:1a:28:96:df:08:9d:6c:c6:b0:01:9e:
3b:b8:e4:ed:f3:9d:a7:d6:d7:31:b9:61:21:c8:95:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:33:40:4A:82:F2:47:D5:4E:2A:6A:9B:F2:41:E4:6D:A3:97:28
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:5e:86:08:c8:78:f4:89:de:27:20:58:9d:df:60:42:c4:
90:b4:ec:06:af:60:2c:51:96:2c:d0:f8:0e:35:54:cb:af:76:
da:d8:bc:4f:13:11:f7:d0:a4:be:49:66:56:0e:d3:96:75:b9:
cb:84:f9:cd:57:d1:49:22:37:e1:b4:b2:2a:47:66:0c:c9:71:
24:70:a3:10:a0:ab:45:9b:57:bf:d1:aa:8a:97:6b:0e:b7:6c:
0f:da:06:ff:5b:bd:29:e2:15:05:a7:84:d8:18:93:a6:69:29:
2d:e8:4a:cb:b8:96:09:ed:7a:9c:10:bb:18:8d:97:ce:f5:78:
06:29:9a:c4:85:c2:1a:4d:97:b7:04:4f:fa:62:f6:26:00:95:
ea:3f:9a:31:0b:3f:8c:f2:24:f9:00:59:b1:d4:e6:44:b5:59:
b2:03:1f:77:41:b3:98:e5:cd:e2:ce:66:b7:8d:d7:6c:a5:19:
b7:b7:29:96:15:bf:59:0f:b5:19:16:98:a3:d6:a2:99:de:86:
3c:90:5b:89:0a:3d:5b:84:f3:40:6d:ce:56:8b:3d:a7:c0:15:
ba:9a:d8:97:e2:8e:81:09:66:39:0d:bc:dd:f3:e7:d4:c6:f2:
94:bc:d6:a6:07:e5:12:a8:fd:82:99:3f:d1:fc:9c:bc:01:e5:
35:e4:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:26 2026 by rpki-client