Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: tqIwljYLtpkiBc3lqLVWUSpt/5Wo9P9pFTVzggXO9kM=
Subject key identifier: B1:48:82:4E:85:FC:40:8A:5B:5F:9A:7F:89:CE:2A:80:E3:64:C1:61
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019D9D07FEA3232EBBE0B5C12A0570AC5981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 11B0
Signing time: Fri 17 Apr 2026 20:00:39 +0000
Manifest this update: Fri 17 Apr 2026 20:00:39 +0000
Manifest next update: Sat 18 Apr 2026 20:00:39 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: LtamKyFlxdg2dwuTDhX5WPoueuT6MyvE5T5hrvKbw6M=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:fe:a3:23:2e:bb:e0:b5:c1:2a:05:70:ac:59:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Apr 17 20:00:39 2026 GMT
Not After : Apr 18 20:00:39 2026 GMT
Subject: CN=b148824e85fc408a5b5f9a7f89ce2a80e364c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:4c:fe:b5:c0:73:39:c6:6f:26:a3:87:72:
6e:b1:f4:57:f3:bf:f8:a0:46:aa:cc:ea:d7:58:a0:
ae:55:77:f9:65:58:7d:93:87:2d:eb:76:d5:fc:22:
cd:fc:08:e6:6f:8e:0e:5c:2d:15:48:c6:ec:28:f1:
88:52:0d:50:e0:cc:ef:28:d3:0c:a1:11:c6:4d:78:
f0:20:a7:5a:bf:65:84:47:95:4e:9e:56:1c:63:ce:
5d:6c:05:cd:c2:8e:84:6c:86:38:94:e1:ea:99:57:
80:fa:a2:91:e7:97:d8:0d:79:c9:04:0d:54:4b:56:
c6:25:78:c5:e0:d2:12:81:ee:83:9b:20:e1:4f:b0:
37:39:b6:8e:c9:99:e9:1e:5a:1c:22:66:14:c0:5f:
86:0c:27:4c:7e:97:40:4d:9f:63:1a:79:96:b5:23:
3b:13:f4:c0:3a:2d:9d:99:0f:42:c3:d5:6f:6d:7e:
7d:d2:8e:6e:03:ad:a1:a7:90:f0:dc:91:af:50:52:
74:ea:18:80:bc:97:74:16:df:a8:fa:8b:33:dc:56:
7e:28:4b:5f:7c:17:bc:21:12:45:85:ce:b9:2a:66:
61:8d:19:c7:cc:5f:27:2e:8b:96:96:aa:77:44:db:
2e:a3:55:f9:c5:c4:d9:20:83:51:d0:6f:ea:d7:6e:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:48:82:4E:85:FC:40:8A:5B:5F:9A:7F:89:CE:2A:80:E3:64:C1:61
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:65:1c:3e:a2:47:d1:96:03:6d:df:aa:57:32:4d:dd:f0:a6:
7e:d5:31:fc:c1:63:8f:06:73:bd:b9:0c:44:c3:d4:be:5b:a2:
40:c1:09:8d:87:9d:5a:ac:7a:7d:06:b3:4b:15:7b:35:9d:77:
60:32:82:d0:01:49:0d:bd:0b:64:21:75:e3:cf:8d:07:43:0b:
83:7e:8f:ce:2d:27:d0:ba:56:2c:21:14:5c:56:c7:97:b9:e2:
a2:8b:2f:a0:95:3d:04:ee:0b:49:ab:72:1e:26:98:83:8a:a2:
1f:d4:8a:80:88:18:94:79:ae:18:3c:61:69:be:df:3a:d9:85:
e0:60:94:91:8e:69:d4:70:3b:b1:92:76:75:1b:06:cb:fe:02:
2f:45:65:ec:f1:9e:f5:20:30:be:33:49:f3:7a:bf:fa:7f:f0:
5f:b3:97:01:45:11:25:f2:69:44:fa:dc:65:f5:1f:44:cc:26:
a0:8a:00:fb:d6:fd:89:f0:ae:30:37:e1:c0:90:16:ba:23:45:
dc:16:c8:37:15:d3:18:60:a1:42:e5:68:2d:7d:77:39:d7:98:
85:f7:a9:f0:2e:a4:93:2d:94:7d:13:21:6b:2f:3a:46:b3:61:
18:98:88:8e:3c:67:24:c5:fe:be:75:3b:94:b7:ff:89:0f:28:
70:5f:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:51 2026 by rpki-client