Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: 4VlRl4xA5vNGsJqLxjKhOqmrdxIBd93mmNZ8fqkhVXg=
Subject key identifier: BC:E9:DA:08:B3:B8:17:7B:FE:29:ED:D4:B4:88:42:1A:10:18:0E:97
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019D99D09A611641427C316ECE704273B0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: ty6ZewoNZG6ZhMGQ7M5zYHel2GbpJ9r8rAIXcYOFrus=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9a:61:16:41:42:7c:31:6e:ce:70:42:73:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=bce9da08b3b8177bfe29edd4b488421a10180e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:2f:01:87:f6:02:4b:df:5b:46:1e:21:34:
83:ec:ac:35:30:2a:f5:7d:4c:93:36:1b:41:9f:37:
88:2a:90:32:d3:43:36:bb:44:5f:73:5f:60:61:d5:
ab:95:09:fb:af:84:10:89:b9:3a:2b:c7:b9:83:00:
d3:6a:b8:75:f1:59:5e:59:5f:e7:3f:63:20:0c:82:
a5:d2:c2:d6:ba:63:8c:9f:50:4a:d0:5e:8d:73:af:
84:69:d8:f7:67:e3:db:bf:99:9e:eb:79:5d:20:b5:
c8:33:74:29:17:2d:dd:1b:93:81:c1:ed:b7:7e:f5:
b2:58:48:fa:2d:b8:59:b8:f2:e3:8a:9d:ee:5d:3b:
6b:67:d0:0f:4a:2d:de:ee:12:0b:d2:95:7b:b7:b1:
a6:07:2d:ce:c7:bb:b7:33:52:64:36:5f:64:d8:8f:
e1:16:3b:03:5b:18:99:e3:a2:8e:88:39:71:80:bb:
df:ae:ad:b3:01:10:e9:76:85:d7:cd:54:f0:f9:35:
2f:bb:69:3e:4e:3c:7e:71:c8:0b:20:d3:22:66:ea:
25:5c:e8:ea:7f:fe:54:3f:fe:a9:ac:cb:ee:bc:ea:
f7:32:92:b6:b0:05:2a:2a:df:9c:7f:20:cc:e8:08:
22:ba:d7:da:5c:d3:7d:0e:24:9e:4a:3e:c6:99:38:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:DA:08:B3:B8:17:7B:FE:29:ED:D4:B4:88:42:1A:10:18:0E:97
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f4:53:24:a7:88:ab:e3:47:cc:2b:3f:11:db:f6:a0:dc:5c:
c6:93:04:99:f1:e1:81:1f:66:e5:75:20:03:55:84:e3:47:65:
8b:1a:90:cf:25:3d:04:52:93:61:12:83:78:3d:48:8f:5c:85:
e8:77:95:cd:df:2a:fd:d1:e4:b6:40:fc:89:84:c0:50:91:65:
97:86:84:e4:47:36:91:fb:b2:17:f9:ab:e9:f7:eb:33:1c:00:
c7:da:1d:d5:e5:29:4a:aa:e5:02:6a:23:b7:5e:4a:98:7d:25:
b7:f1:9f:03:7b:1d:f7:6a:85:f7:6c:93:62:31:7f:5b:f1:f8:
d6:e3:66:07:9e:f3:b8:51:04:5d:1e:d6:e2:c6:fe:43:06:81:
2f:e0:f1:0c:d5:05:ce:68:85:08:0c:36:9b:d6:52:f8:15:09:
39:c6:c4:77:26:91:46:6b:1b:fe:8e:66:92:b9:43:39:30:9d:
b4:36:ab:e1:22:71:31:41:70:c0:90:c6:8a:32:6e:3b:c4:ed:
3c:ab:e9:ea:8e:a4:d0:e0:a9:c7:e1:fd:16:fb:74:ce:66:d0:
65:e9:4f:8b:d8:92:1a:7a:5b:5e:45:d1:ad:17:67:ac:12:aa:
6d:f0:28:be:68:87:29:a7:9c:64:eb:ff:0f:0c:0c:2f:4c:3b:
1f:03:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:17 2026 by rpki-client