Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: c0p6wRdPRAh70+VIj6loEHySAf9dmtF0zydUHUuU5o8=
Subject key identifier: 20:23:CE:67:43:2C:5C:92:C6:85:F4:C2:DA:A9:D0:15:5C:2B:C6:5C
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019EB9213DE17B454556BB78A58243DD1067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0C86
Signing time: Fri 12 Jun 2026 00:00:23 +0000
Manifest this update: Fri 12 Jun 2026 00:00:23 +0000
Manifest next update: Sat 13 Jun 2026 00:00:23 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: ZGJz6oBFpTq/H0z7PP7hxMFwJL3HovNDbDyDi92S9j4=)
2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:3d:e1:7b:45:45:56:bb:78:a5:82:43:dd:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Jun 12 00:00:23 2026 GMT
Not After : Jun 13 00:00:23 2026 GMT
Subject: CN=2023ce67432c5c92c685f4c2daa9d0155c2bc65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:62:73:e6:34:c3:48:e9:04:4f:b8:a7:0b:
08:c5:3d:f8:96:8d:66:10:d7:de:fc:b9:79:dd:ae:
a2:2c:0b:fd:55:1f:53:01:2d:b1:19:2c:1b:5f:fc:
0d:86:69:04:6c:21:2d:92:e9:c7:9e:ec:bd:76:cd:
e0:d5:1b:fe:be:87:59:14:8f:1c:d5:49:ca:76:4e:
63:81:16:28:0b:d4:f0:b0:0e:ec:f3:65:88:6b:36:
c4:e0:be:9e:e0:37:a2:4a:21:2e:ad:f5:02:16:24:
d5:58:df:62:f4:12:82:c0:53:da:7a:3c:77:6e:5e:
d9:88:ad:ab:7b:71:6b:13:58:36:6b:05:03:47:22:
c9:bd:0c:15:66:1f:dd:8f:1b:80:9e:87:f0:f7:82:
95:34:77:c3:66:fd:d0:8a:37:08:bd:7a:61:6c:40:
cf:d5:b6:e0:1e:ee:73:b1:67:6f:f3:f1:53:26:f3:
c9:86:e7:ed:ab:95:09:29:4b:e3:95:fc:55:c5:ad:
c7:fd:81:1e:55:29:f0:bf:96:b6:73:f2:83:22:d8:
41:7f:ed:9c:51:29:ff:de:67:7d:04:9d:96:5c:2d:
fa:f2:60:99:15:47:dc:32:9d:a6:e0:24:29:2a:c0:
44:67:2c:53:80:cc:31:43:60:71:3e:2a:ba:61:ba:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:CE:67:43:2C:5C:92:C6:85:F4:C2:DA:A9:D0:15:5C:2B:C6:5C
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:70:b4:14:02:b3:2d:12:fa:81:81:0b:86:5e:4a:e6:19:
6a:66:ea:92:71:66:55:11:d2:58:d4:67:c0:05:42:27:0b:ab:
3b:dc:66:4f:4b:03:99:84:76:6d:07:7e:11:bd:26:bf:05:21:
be:b0:1d:72:3c:ab:bc:ca:1d:38:53:48:6a:92:7d:ae:4f:b7:
ce:4a:88:eb:27:6b:c6:3f:d2:92:60:9d:d6:a8:9d:fe:ab:e7:
5c:01:80:c3:d9:ce:a4:7f:ab:fd:44:c9:cf:82:b8:f9:5e:b0:
68:d1:f0:bc:28:ab:06:40:cc:1a:d9:a7:96:05:97:dd:56:d0:
37:5f:2f:7e:97:04:1b:61:65:11:84:4d:1d:81:2b:d9:4e:84:
b3:23:1b:26:b6:2e:08:a9:d3:74:f3:bc:da:6a:67:21:09:f8:
6a:c7:c9:10:98:2e:0a:a9:67:cd:63:cd:d7:7e:33:29:09:2d:
dc:25:38:c4:65:fb:a1:dc:d3:fb:86:29:6b:16:36:f1:6c:6a:
95:49:cd:f8:37:66:b9:7e:a4:6a:45:18:3f:d3:45:69:12:0a:
2a:ff:d6:0c:59:5f:ec:8f:48:98:49:aa:f3:ef:38:a7:2a:0a:
5c:a4:29:ef:08:4c:2c:7a:bd:84:9c:b3:7b:7c:19:f0:be:b4:
b4:52:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:53 2026 by rpki-client