Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: nf58rh2q3cdFZClBPbUVuWs7yhi0Mth8PY2PYrabOfM=
Subject key identifier: 64:38:E7:C6:BE:30:61:16:1A:4C:51:6E:F9:3B:EA:DE:61:BF:2D:63
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019D38D2D5A7D2D4FFF642A4B2938B91C773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0BBF
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: 4B3yK02kCIlF4/wQc/YjozbJVBV0Uw9QZHAyhAS/lzk=)
2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d5:a7:d2:d4:ff:f6:42:a4:b2:93:8b:91:c7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=6438e7c6be3061161a4c516ef93beade61bf2d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:26:a5:a9:73:db:bb:33:3f:57:c0:7e:51:
b5:10:8f:d4:a6:2b:67:d4:53:5f:e1:1a:9b:a5:41:
ad:b2:ca:0d:52:49:17:82:19:56:81:b6:00:d8:03:
ac:95:f7:7f:d6:80:50:b4:e1:80:85:10:f5:c2:da:
aa:d8:70:d8:ac:38:dd:ae:55:a2:39:dd:bd:83:2f:
3a:7c:e9:b5:9b:52:d2:b0:4d:b4:88:64:02:3f:fa:
03:d6:78:ea:3d:72:de:c7:3d:d3:e2:07:6b:91:f6:
31:30:b5:01:b6:e0:d6:ba:71:d4:05:a6:00:81:61:
14:a9:a9:bb:97:df:87:f2:44:22:6f:f7:b0:70:68:
a4:22:17:cc:1a:2a:9e:ee:00:ce:dc:39:f9:1d:15:
98:6d:66:34:db:14:59:3f:d2:1a:6c:b2:33:ad:99:
87:3f:4d:c5:7a:39:8d:36:09:d4:49:9d:3d:9b:a4:
8b:2b:23:a4:34:f1:85:20:09:a2:eb:63:a0:89:88:
49:8b:32:83:38:b2:c2:c0:c3:f0:e0:e7:ff:be:9d:
a6:d3:fb:e9:e5:64:1f:06:9e:56:b3:f7:25:cd:ff:
2b:3b:78:41:d9:14:da:84:3c:28:07:88:c1:fe:3f:
8d:70:a0:2d:88:cb:6c:ab:b7:bd:bf:29:df:6c:f8:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:E7:C6:BE:30:61:16:1A:4C:51:6E:F9:3B:EA:DE:61:BF:2D:63
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:6d:d4:3f:ec:8c:7d:81:7f:d7:12:ed:79:13:39:47:2e:
70:80:01:53:ae:3d:a6:90:28:5c:29:2c:b3:99:12:e2:ed:0c:
d2:89:43:6f:c0:c0:38:8b:01:0d:ac:e2:64:a8:5d:af:d8:8b:
eb:a8:83:2e:3f:c7:31:9e:51:fe:d5:eb:16:14:f8:61:09:f8:
08:46:4d:35:98:b3:a5:ac:2b:a0:1f:d1:c6:70:c5:a4:d0:dd:
e0:ac:e4:58:b7:af:ee:6c:82:66:27:ce:10:af:31:ea:28:03:
26:00:34:c9:6a:19:ea:f6:22:3a:f6:9a:4e:b1:f5:59:df:84:
d1:e0:33:a8:11:3b:84:3b:83:47:4f:da:ce:82:bb:2c:25:c8:
c7:ab:ed:5b:0d:8d:ab:f9:8a:02:18:20:76:60:e4:d0:68:b2:
fb:3c:22:ee:80:42:53:17:fe:cf:c3:da:13:03:3a:e9:3d:82:
4f:5b:3a:5d:05:bc:47:66:44:d3:0b:2e:a9:67:52:7d:2e:7e:
7f:77:cf:84:76:95:06:71:60:65:2d:ed:af:3f:0d:ce:00:35:
ab:7c:67:b5:d5:a4:6c:75:ac:48:95:2e:b8:c7:96:66:8b:6e:
ec:c9:97:b4:8a:72:6c:da:a9:32:cd:57:e2:68:24:a1:96:a0:
5c:a8:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:18 2026 by rpki-client