
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: Mpxp3s43CYRwlrLriQG9QXBdgC3MTjQPCYMFPsBUnGw=
Subject key identifier: C5:B7:68:12:3E:75:1D:16:CE:84:F3:C6:BC:1F:59:32:42:3B:8E:CD
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019D389BFE785C7214D4149CC5E6F25A4C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0BB5
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 2RRCxNGK8cSlyLsGkJHAoOaED/yorWmgb1dPJBMShyo=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fe:78:5c:72:14:d4:14:9c:c5:e6:f2:5a:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=c5b768123e751d16ce84f3c6bc1f5932423b8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:6a:60:dd:e1:71:a0:2c:8f:45:58:6e:3d:
31:0f:3f:8c:89:1d:2a:8c:f5:b7:96:8c:aa:cc:81:
cb:99:89:02:75:40:79:03:a4:b9:f1:24:b9:a1:4b:
4f:8c:09:cb:cd:34:83:30:c9:bd:e6:2c:d8:2b:1a:
55:92:0b:3c:12:4e:21:cd:43:5d:d8:ae:90:1a:ae:
08:78:1b:8e:b8:ff:7a:e4:53:80:a9:4d:fd:8e:ca:
6c:cd:68:be:5e:1f:47:68:3a:6c:99:3c:77:79:d1:
4b:e0:bc:7d:89:6b:7e:64:cb:e4:77:76:71:80:93:
e7:c4:b1:3d:ce:46:db:0e:03:4d:18:73:e7:01:6f:
e4:06:d3:ee:90:55:a1:7a:e6:2d:06:73:0f:83:4f:
86:0c:38:0f:9b:f8:36:6d:8d:b4:85:3f:d4:e5:eb:
0d:9d:1d:85:e5:a1:43:48:fa:01:8d:d2:a8:c1:58:
b0:3e:7c:37:60:08:33:1b:3a:af:cb:d2:31:21:ce:
9e:b9:2e:fe:8e:c4:06:0b:2a:58:a1:40:b6:c2:10:
a7:19:63:06:4b:28:28:2a:18:17:0f:6e:81:f1:83:
a0:a2:ce:d5:e8:7d:d8:07:56:c1:2d:75:33:23:3d:
68:d0:62:28:fb:66:e3:d9:db:42:bd:0c:a3:cd:7f:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:68:12:3E:75:1D:16:CE:84:F3:C6:BC:1F:59:32:42:3B:8E:CD
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fb:9f:7e:e2:ab:5c:04:73:b9:75:8e:c2:61:54:f7:75:90:
ed:b7:bc:6c:b9:6b:bf:5c:b2:2b:90:15:fc:c0:8e:4f:3a:b8:
f1:31:ca:17:4e:9f:3f:89:81:c1:22:6d:24:3f:44:35:d6:f5:
ec:5d:1c:62:89:be:11:63:5d:59:33:65:86:55:53:50:d2:23:
12:15:1e:23:c8:69:a0:83:82:4e:33:91:12:fa:76:4e:ac:f5:
df:da:03:75:c1:95:b7:dc:6f:a0:cb:2c:4c:f2:2c:10:29:fb:
86:52:d9:a6:24:62:4e:dd:79:86:6c:2a:a2:cb:7f:ec:57:cc:
40:ee:90:d2:48:73:1b:0e:d1:c8:49:2a:4a:5c:86:69:e4:39:
d1:df:ab:8a:32:e8:78:1f:3a:ff:3a:2e:51:8e:ab:f6:6b:5b:
0a:7c:88:b7:d8:3d:a5:2d:dd:50:f4:d1:3d:0f:b2:f6:cb:20:
38:2a:96:16:bf:a0:5e:71:33:d7:a3:13:49:8b:94:1a:d3:e8:
a2:a6:7b:a2:49:e9:e1:40:cd:82:ff:f5:d7:c1:74:6a:69:b0:
6e:7f:6e:a7:9c:dc:4e:ce:f0:26:20:74:f2:ef:8b:d5:b7:e6:
f4:89:a3:36:1a:3a:98:2e:ee:54:3d:cc:83:0b:45:27:2d:2f:
c8:09:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:20 2026 by rpki-client