Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: P2RW17/VEBGPEKreh2y9Apf7DA1ou00abu5aeUp28rQ=
Subject key identifier: C9:49:D1:36:46:1B:5E:52:93:65:06:7C:9C:36:C7:55:76:7B:06:D9
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019FAE2D49AA633963759EE5B5FF268DD4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 12C2
Signing time: Wed 29 Jul 2026 14:00:31 +0000
Manifest this update: Wed 29 Jul 2026 14:00:31 +0000
Manifest next update: Thu 30 Jul 2026 14:00:31 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: lx5uJErJ3bPjTUrdlMX/qxqNAX45XP6FbLTMkZRXebY=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:49:aa:63:39:63:75:9e:e5:b5:ff:26:8d:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jul 29 14:00:31 2026 GMT
Not After : Jul 30 14:00:31 2026 GMT
Subject: CN=c949d136461b5e529365067c9c36c755767b06d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:52:41:40:06:8c:a9:f0:5c:ec:2e:79:dc:
66:f0:e7:d3:b5:a9:18:8b:87:d8:f1:8e:64:7e:07:
03:18:ed:c7:e4:47:11:69:49:42:e6:dd:42:9b:69:
6c:44:c0:52:2a:82:ae:88:64:e7:cc:7b:ca:dc:20:
37:a3:e8:77:5d:6b:b9:1b:ce:f6:0a:a2:c1:c3:b0:
bd:c3:94:7f:4f:6a:0a:4a:26:56:48:cf:0c:ad:6c:
6b:92:34:f5:fd:29:98:aa:39:7c:93:9c:ea:e0:6c:
29:41:4a:07:aa:98:3e:f4:23:4d:91:e5:2a:2a:5d:
73:be:db:29:52:b8:e5:4b:60:29:3a:3c:da:6b:52:
fa:21:9d:5f:6f:6b:23:2a:06:79:2b:0b:0f:2f:93:
68:68:93:ab:ed:92:8f:d9:e5:93:8c:71:cd:54:ed:
b9:36:61:10:9a:4f:f3:d1:b0:12:a5:cd:44:ae:cd:
d4:04:15:6a:99:67:fe:d6:e2:fc:57:81:f4:37:a0:
e4:f3:b2:00:e1:3d:32:7d:e8:5f:cb:62:be:13:4e:
f6:3d:5d:ed:38:fd:b1:cc:62:7e:96:9b:4a:21:10:
21:91:9c:c2:39:b7:cd:4c:40:15:cc:8d:12:c6:32:
c4:b2:69:ce:cc:89:f5:32:54:e9:c2:6c:f7:c1:dd:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:D1:36:46:1B:5E:52:93:65:06:7C:9C:36:C7:55:76:7B:06:D9
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:ce:db:93:26:b4:25:1b:7a:97:2b:84:20:6c:a2:ba:66:
09:31:2f:4a:3f:1b:02:23:51:19:5e:d9:bd:7d:ec:c4:8d:f3:
18:58:87:b0:52:70:58:eb:21:3b:51:b7:97:53:20:2e:35:53:
30:97:f5:07:30:55:67:8b:f2:f6:3d:ba:ad:30:47:00:5f:98:
e9:58:8d:03:a2:d9:70:a9:f1:b2:3d:a1:71:c2:00:b8:63:6e:
5d:d6:42:92:3b:a6:ce:2c:39:02:d2:07:eb:e7:34:3a:b8:8a:
7e:a7:54:63:43:bd:38:35:bb:fb:58:11:f4:18:67:4d:c3:74:
f0:2a:5e:b4:26:d5:e1:3d:78:7d:85:d7:54:c4:3b:f4:06:36:
60:24:b5:9d:d7:b4:70:98:b8:a5:d7:ce:ac:a8:7a:3a:05:42:
1a:ea:b2:8b:8f:18:d7:72:43:85:53:24:d3:d3:31:85:a6:bc:
a5:99:a2:78:aa:62:6e:73:ca:23:47:ea:3d:90:df:bd:f9:4b:
b1:61:ab:02:b2:03:86:4d:7d:7e:2d:33:0c:36:28:1f:01:13:
e5:c6:59:21:67:40:eb:c3:4e:9e:6c:b5:9c:c4:ba:6b:e4:09:
3f:19:68:40:fa:a6:20:c2:32:83:fd:8a:ad:24:74:fb:d9:24:
5f:71:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:12:19 2026 by rpki-client