Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: +EI4m61260wIBtl/2Qw4AfYZ6tevNsw8bYjSed9ST4c=
Subject key identifier: 15:4F:CF:43:E3:62:D8:09:E6:E7:8F:71:1C:E4:31:A9:B6:3E:D9:74
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019CAF7E9B24BCD8A26CBCF4FFFDEAE8CBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 1135
Signing time: Mon 02 Mar 2026 17:00:35 +0000
Manifest this update: Mon 02 Mar 2026 17:00:35 +0000
Manifest next update: Tue 03 Mar 2026 17:00:35 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: 0fAWYRtAM2/Z3LmwoT6CVN273xB9RgdH519NMfr8N4o=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:9b:24:bc:d8:a2:6c:bc:f4:ff:fd:ea:e8:cb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Mar 2 17:00:35 2026 GMT
Not After : Mar 3 17:00:35 2026 GMT
Subject: CN=154fcf43e362d809e6e78f711ce431a9b63ed974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:1c:6b:78:5c:64:86:4f:74:ce:2c:d8:bd:
13:a4:84:51:b5:81:a7:26:f0:f5:7e:cf:68:ec:19:
54:3d:4a:5b:38:88:b5:3f:f3:7f:6d:25:57:dc:00:
43:78:34:9f:2c:90:7c:96:d7:0b:14:97:c8:ae:1a:
e6:ae:4f:f9:56:27:af:a4:db:8b:76:fe:8a:d9:bd:
b9:c1:a5:0d:c2:ac:2e:8b:d9:c5:a8:56:ea:fc:7f:
76:cc:ce:aa:00:fa:33:71:47:55:e6:99:69:76:7d:
83:13:71:9b:9e:49:52:4a:fd:c0:23:89:3d:ae:5c:
0e:a3:ed:b8:67:63:fe:18:49:56:41:35:67:e2:08:
56:e9:1a:a7:fa:e1:35:35:a9:0a:34:16:53:79:a8:
19:89:3a:62:d9:12:f6:e7:13:ce:be:c0:93:7c:02:
be:90:c3:6a:8e:31:e5:90:43:0f:88:e9:ef:e4:7a:
c5:fa:7b:c8:87:fb:68:1a:70:05:7a:e4:26:de:7c:
f5:5e:f3:c0:9d:a5:43:a7:44:43:9f:70:b2:6f:ca:
16:93:cb:80:90:44:eb:da:7b:ef:1d:7d:76:10:4d:
18:f3:00:bb:a0:a4:36:f5:6a:92:52:e7:ea:39:87:
00:79:98:87:8b:aa:67:b3:11:c0:6d:fd:e1:97:ba:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:CF:43:E3:62:D8:09:E6:E7:8F:71:1C:E4:31:A9:B6:3E:D9:74
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:29:21:67:77:e0:57:a6:e1:95:53:59:a5:9d:37:87:46:
95:1a:f3:96:95:43:6c:f0:ee:59:f9:3a:28:aa:f2:35:5a:ab:
ba:d9:c9:dd:0c:3c:f3:37:d9:99:5a:58:8d:81:6b:35:3f:0f:
35:37:ee:4c:23:a4:14:f7:66:87:ea:e0:82:da:35:7b:df:72:
c8:b4:eb:01:4f:98:0f:04:fb:74:ad:de:d0:d6:c3:d6:23:50:
08:48:f1:4c:0f:93:a1:01:aa:a1:1b:5d:f2:81:33:9c:f8:66:
f0:e4:79:6c:d1:51:4c:8d:19:1c:25:81:52:81:77:5b:d4:be:
c4:e6:1c:1e:21:22:d3:89:b5:31:38:35:7d:0b:49:e0:2d:83:
9e:6d:52:6b:a4:a1:67:9e:9c:5b:02:db:a2:fd:15:b0:b5:93:
5d:7e:f4:11:34:e1:80:2c:86:dd:be:19:93:8e:0b:8f:28:9e:
00:d7:cb:bd:c6:6b:95:e0:78:b6:75:ed:b7:96:33:d5:62:b5:
85:61:77:37:e5:39:d4:b4:4e:4a:5c:44:34:50:19:9b:7d:bd:
47:62:bb:73:e2:64:81:04:0a:24:05:70:3c:2a:8c:c6:c5:5c:
ca:64:92:c3:8f:fc:bd:4c:5e:80:5e:e6:82:3d:1b:9e:8c:f9:
1b:fa:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:27 2026 by rpki-client