Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: u0akdU3oEmq0kXBqyaPhVWiriTalk2CJCDVeTMEUXyc=
Subject key identifier: 3F:9B:D8:FB:C8:68:E2:9F:29:3F:E3:5B:90:D8:0B:76:BE:14:6C:D2
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 01A0CBFE36E31C66B154CC8D73DE603C4A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0AF8
Signing time: Wed 23 Sep 2026 02:00:30 +0000
Manifest this update: Wed 23 Sep 2026 02:00:30 +0000
Manifest next update: Thu 24 Sep 2026 02:00:30 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: i1F0XpYIGvE/NGC4KPQ/DNQgx55rEuNmm1ykcjtQkZg=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:36:e3:1c:66:b1:54:cc:8d:73:de:60:3c:4a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Sep 23 02:00:30 2026 GMT
Not After : Sep 24 02:00:30 2026 GMT
Subject: CN=3f9bd8fbc868e29f293fe35b90d80b76be146cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:95:76:42:23:ec:df:50:bf:dd:e0:c2:89:
37:0b:56:66:e1:69:15:42:84:83:39:91:b5:fa:10:
a9:e0:a8:63:ad:17:41:86:11:d0:af:89:9d:a9:8b:
c7:5e:a5:95:16:76:26:55:3c:2c:66:f2:e8:09:8c:
2b:72:df:ec:1d:8b:e8:7b:14:ba:a3:50:e8:da:9f:
41:eb:e5:d8:5c:6c:c9:d4:69:b4:75:70:a8:cb:93:
35:8a:8d:55:08:b3:c8:7e:64:d9:41:78:3d:0e:bb:
d1:bb:29:7a:f0:6c:bd:ab:80:bc:19:06:1d:96:46:
7c:1e:c3:64:cd:9b:01:c9:a8:ce:4a:35:5d:00:1d:
05:ac:00:46:02:c4:1b:0e:04:c9:63:15:85:fd:de:
ab:7f:dc:9c:24:2c:7b:a6:7d:d3:cb:c6:66:37:3c:
03:b5:55:36:cf:dc:78:5d:f1:c2:12:ca:34:62:e4:
6b:06:24:2d:4b:57:be:2c:80:78:0f:b7:66:f1:89:
dc:6a:b6:a6:c1:ca:c7:b1:90:68:e5:85:c8:d8:05:
11:42:3a:56:ca:4d:23:16:dc:eb:01:29:22:14:2e:
de:55:d9:57:8e:54:37:b1:a7:9b:d7:d5:b9:19:63:
22:77:01:78:1e:66:b3:a7:4c:41:50:7b:d7:06:8b:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:D8:FB:C8:68:E2:9F:29:3F:E3:5B:90:D8:0B:76:BE:14:6C:D2
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:a7:1f:8a:ba:be:90:c5:e4:ae:15:f4:f9:6c:aa:b5:3a:
cd:5d:98:80:45:c9:ea:ad:1c:d1:a1:66:86:36:b0:9d:2f:b5:
18:95:88:3e:d3:6f:63:3e:b2:b3:df:22:a8:c4:d1:58:27:c6:
75:c5:56:54:94:25:e5:e6:66:17:b1:7d:38:4a:c6:14:f8:4d:
66:fd:1d:0b:17:4d:c7:f8:ec:6c:79:f5:a5:32:84:07:cd:f6:
2b:c9:78:a1:46:c2:87:f2:24:f0:6a:ec:a3:b5:1b:ef:e0:c1:
f6:48:44:a3:84:fa:d3:68:c5:1e:3f:03:d5:fe:b5:1d:bf:7a:
b4:0d:fe:d7:a5:6c:67:59:a9:b6:45:fb:c3:2c:38:eb:24:a3:
96:37:de:27:c7:d6:97:fa:2c:7e:3f:8b:82:32:99:6b:1b:70:
33:0a:29:23:cd:14:66:a8:40:a6:e9:65:83:d2:1f:92:c2:5d:
91:8f:0a:58:eb:85:c8:f3:53:11:37:b1:af:de:11:79:60:7a:
6b:0b:8d:77:13:65:a2:fb:40:6f:d9:07:59:19:99:82:49:3f:
1c:ba:66:82:12:81:75:c6:ae:3a:5c:9a:44:fd:92:48:6d:f2:
c3:b2:f8:7d:48:0c:dd:ce:10:06:87:12:5f:19:2a:94:ce:61:
d1:4d:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:13:43 2026 by rpki-client