Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: Q7zUQabSZF4Co24ag3DSBTdGwA0dehICm6CJX1S3RP4=
Subject key identifier: A7:1F:3A:32:A4:A6:34:48:6A:56:9E:53:8F:DC:77:E4:E3:E1:DE:DA
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019CABA250E039656C240EB7FAA9D7F46798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 08D5
Signing time: Sun 01 Mar 2026 23:01:07 +0000
Manifest this update: Sun 01 Mar 2026 23:01:07 +0000
Manifest next update: Mon 02 Mar 2026 23:01:07 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: LaI4G4Fdpk/1GyP9QACh1JkuCz7OrwjIiVkbkUNXRGY=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:50:e0:39:65:6c:24:0e:b7:fa:a9:d7:f4:67:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Mar 1 23:01:07 2026 GMT
Not After : Mar 2 23:01:07 2026 GMT
Subject: CN=a71f3a32a4a634486a569e538fdc77e4e3e1deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:f0:8a:fb:81:0b:4e:9d:fa:8e:e3:65:b6:
bf:68:97:2b:e6:17:7a:ad:af:9f:91:b4:9b:86:1b:
91:c5:66:57:a4:3d:e0:e6:31:87:7b:08:27:92:10:
17:1c:6f:fe:ae:96:f3:bb:3f:de:f0:68:ba:d2:7f:
28:39:23:e7:52:27:55:ae:10:02:24:6f:de:55:2a:
2c:fb:65:a8:18:9b:ef:78:12:df:97:34:e9:44:8d:
ce:87:4e:db:34:fb:22:31:ef:c0:2a:a1:a5:2c:7a:
8c:d2:0b:f5:d8:c2:11:fc:1d:6d:9d:41:f2:72:b1:
dd:f6:c3:3a:b0:d8:b1:ad:d1:70:3f:b9:c2:d9:94:
79:23:d4:c2:96:1a:c2:b8:56:60:8b:1e:76:a2:a8:
e4:aa:5c:da:b2:a3:87:20:99:41:26:70:4e:ff:cc:
b2:98:65:f7:f4:3b:c2:dd:f7:02:6d:0a:03:57:c6:
2b:37:a0:6e:ab:66:17:bc:1d:01:69:72:c8:bc:fb:
23:2b:ca:58:ce:17:05:35:ff:e7:58:08:f4:0a:97:
4f:4a:f6:17:f5:7b:a7:74:a3:35:38:90:73:15:c7:
4e:e4:d4:45:16:80:33:b6:b9:17:22:63:a5:6e:db:
57:95:ed:50:90:75:a5:41:ad:2d:36:e2:58:92:a6:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:3A:32:A4:A6:34:48:6A:56:9E:53:8F:DC:77:E4:E3:E1:DE:DA
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bf:a1:1a:07:9e:0d:ce:d7:1f:be:c8:3c:69:9d:af:ef:2d:
5d:c2:d3:a6:49:05:be:d8:25:ec:28:79:a8:6e:a5:c7:46:24:
0d:d9:27:11:84:40:65:62:21:dd:32:bb:ad:11:21:2a:73:7d:
2e:11:94:b6:23:49:a8:9d:b7:9a:3e:03:88:80:9e:3a:20:91:
b2:2a:c4:64:fa:06:56:3a:b9:a7:84:f0:28:0b:21:1f:bc:1c:
91:fd:54:8c:d6:8a:52:95:59:81:68:44:49:da:75:97:37:2a:
52:16:af:d0:4b:0e:2a:33:83:df:35:c9:89:fe:1d:71:39:0b:
0d:1c:a8:ce:08:4c:50:6f:a9:0e:46:52:06:33:ac:08:4f:87:
0e:3d:cc:c1:e8:b0:c9:3b:76:42:b1:7c:2e:7d:76:c2:23:8f:
8c:5b:36:1c:2b:ad:a0:92:04:bb:34:05:16:3a:48:39:e8:06:
19:c1:e9:79:39:14:37:b1:a7:c3:bc:d9:f6:6a:67:c9:52:4a:
8a:17:c1:75:6a:17:5f:c2:dd:f4:ae:2f:1c:a4:7f:56:f1:16:
c0:4e:74:70:24:53:fc:bc:be:6e:8d:f4:71:46:54:7b:4f:a8:
62:42:6d:f9:60:d3:3b:95:1d:48:90:6a:c4:ab:30:e0:f0:c2:
97:6b:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:59 2026 by rpki-client