Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: 24v6FEi292CDuuZYi7/C+wFxcQUL6eecNkMA97kX88w=
Subject key identifier: DA:78:23:C6:F1:07:6B:D3:FC:47:45:4C:5D:13:69:93:C9:57:93:B3
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019CAD9032554301F0B03CD6EB9C9758DED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 1134
Signing time: Mon 02 Mar 2026 08:00:34 +0000
Manifest this update: Mon 02 Mar 2026 08:00:34 +0000
Manifest next update: Tue 03 Mar 2026 08:00:34 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: xAxueALeUqG8bG0Z3CsYIX4nzvq9cmy6ryF1f6HpSS8=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:32:55:43:01:f0:b0:3c:d6:eb:9c:97:58:de:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Mar 2 08:00:34 2026 GMT
Not After : Mar 3 08:00:34 2026 GMT
Subject: CN=da7823c6f1076bd3fc47454c5d136993c95793b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:f5:8c:27:22:cf:3a:80:01:a3:84:ee:88:
f5:aa:41:db:c3:02:a4:0a:2d:ce:9c:5b:42:65:53:
8b:cb:50:bd:6d:e8:3d:43:d2:64:d9:69:43:6e:5d:
3b:2e:6b:8d:ac:13:d6:0f:3b:07:17:1a:82:e7:4d:
f2:4c:cf:be:8f:96:76:82:08:8c:a5:0b:04:21:28:
2e:93:d8:76:bf:4a:40:8f:64:ca:5e:12:45:07:da:
f6:48:0f:83:d0:a6:2b:84:69:c1:e1:0b:07:be:e5:
c9:00:46:58:e2:a0:de:fb:14:e6:4c:6f:60:65:87:
0c:84:e5:cb:54:c5:9d:d9:f9:b6:54:48:7e:cd:c7:
42:be:2e:ce:11:c3:8d:34:df:1f:84:91:a3:43:28:
0e:66:45:b1:4f:6f:74:93:ee:3c:e5:ae:1b:52:24:
bc:b3:87:57:df:fd:66:cb:a3:05:d8:fd:7c:85:cb:
6d:0c:b1:b8:46:24:f5:94:09:9d:96:7a:99:5c:0e:
64:75:25:2d:cf:2e:1f:1c:42:ef:95:3c:ee:29:17:
42:60:11:09:ef:82:62:53:b0:ce:aa:1f:b9:41:1a:
02:37:3b:3e:ed:14:5d:75:77:70:b3:e9:be:70:e3:
a2:6b:29:e0:75:78:ad:33:08:5d:58:e3:fe:7c:c8:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:23:C6:F1:07:6B:D3:FC:47:45:4C:5D:13:69:93:C9:57:93:B3
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cd:f6:58:80:66:a0:3f:35:ff:70:77:d5:92:54:78:91:ee:
62:bb:27:1d:38:25:95:f5:9f:8b:ca:58:4e:ec:7b:c9:58:e7:
f6:e8:83:90:1c:98:2a:2c:30:4a:d7:3f:a0:3c:b1:28:2f:bf:
8a:24:e5:c7:8c:b8:0e:f8:f8:e4:4f:89:cb:99:e9:c8:35:39:
7d:56:1b:66:b0:c2:85:49:5d:aa:c9:fc:46:97:57:db:75:85:
ec:27:e9:99:b9:87:5b:51:37:f3:fb:65:40:da:8b:44:00:c7:
ed:e2:43:a8:be:ec:bb:1b:a8:b4:c9:53:30:5d:95:10:a5:49:
e0:8f:01:78:13:2f:cf:07:05:f0:b5:06:c3:87:e2:82:77:dc:
dd:41:c2:a5:e9:41:87:69:a7:e0:11:bb:2a:48:cd:b6:48:7c:
2b:6d:c7:fc:ea:6d:dd:fd:e2:ec:b2:5a:2c:28:23:3b:e2:c7:
6a:8f:d4:fa:05:34:96:08:93:5d:a5:86:b4:1f:1c:8f:12:40:
68:b7:48:df:3f:77:d3:31:96:4f:a7:0f:be:a3:69:6f:06:3a:
c5:81:96:47:76:98:40:95:8d:cb:9d:f2:ac:e2:2e:8e:e3:e8:
5d:cf:be:21:db:83:33:8b:15:4d:45:dc:ba:55:b6:c6:ce:87:
33:70:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:53 2026 by rpki-client