Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: r+tNQj2KQ0m2SfTtqWjf9Rb+jkM+dm4x2yTkRf/gZ1g=
Subject key identifier: CD:7A:DA:54:06:8A:41:98:78:64:42:F0:3E:75:F1:AF:61:2F:B8:C8
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 019D39AE9AB47B775C7493C664900F9DF55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 132E
Signing time: Sun 29 Mar 2026 13:00:37 +0000
Manifest this update: Sun 29 Mar 2026 13:00:37 +0000
Manifest next update: Mon 30 Mar 2026 13:00:37 +0000
Files and hashes: 1: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: 6kx6CI6FRZ0TCbGN1mcVLvmcSwsx6DO7g3WrJahCrt4=)
2: gYLvy5DjMihQxbK3CpNYolCJCbs.roa (hash: nk0QPIHhBJ+tkBFjYJBMoGr2Na3j2yW9OuuUU/oPTZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9a:b4:7b:77:5c:74:93:c6:64:90:0f:9d:f5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Mar 29 13:00:37 2026 GMT
Not After : Mar 30 13:00:37 2026 GMT
Subject: CN=cd7ada54068a4198786442f03e75f1af612fb8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:48:84:95:11:69:cd:8d:40:61:25:33:c8:
ea:81:91:39:b3:90:c0:70:87:16:21:ec:bd:3d:62:
63:2b:1c:e0:99:92:c8:63:5e:3f:69:52:91:bd:61:
50:54:a8:1e:99:87:21:87:a4:03:12:c1:70:ec:b5:
dd:6d:32:6e:17:eb:e7:86:54:67:be:af:0a:d1:2b:
7d:00:54:97:36:38:dd:59:01:c4:ea:5e:e2:54:4a:
8d:82:db:79:7c:fa:6f:d7:d1:c8:99:b9:d9:d0:6c:
49:e2:29:39:95:74:09:4d:8b:af:13:ed:31:d6:a9:
bb:72:d0:9f:89:03:d5:95:ac:58:17:37:69:54:07:
f2:e1:75:69:c7:cf:83:de:59:7a:6f:23:94:15:92:
f4:7c:3a:a4:f6:f5:59:7d:23:b2:6a:1f:8c:c8:d2:
d5:4b:1d:12:3c:1e:0e:17:02:7e:75:c4:08:54:27:
ad:49:05:b3:d3:97:65:92:f0:51:37:a2:cf:63:99:
8d:34:61:db:22:67:4f:06:dc:83:d7:b4:be:64:6a:
04:bb:95:23:ed:e3:f0:8a:b3:3e:ff:fc:fc:37:dd:
41:99:b0:82:7f:cb:7a:ae:c4:89:4f:6a:b5:bd:cf:
d6:53:92:95:06:71:18:ab:4a:6b:d2:f3:c7:e4:ed:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:DA:54:06:8A:41:98:78:64:42:F0:3E:75:F1:AF:61:2F:B8:C8
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:d4:07:b6:93:92:01:48:33:97:a0:ff:0a:c4:68:7b:8e:
30:c4:27:61:3b:6d:a6:e6:52:79:15:e3:39:b9:b2:f6:ad:d6:
75:b5:c8:dd:04:b8:cb:7c:06:22:94:5f:b7:bf:21:96:92:83:
76:44:78:9f:a7:2d:3f:4f:0d:e0:a7:dc:eb:fb:70:36:c1:ab:
c4:e0:da:dd:5e:ab:cc:2c:95:47:f1:ac:a8:c0:01:7f:20:72:
df:d7:19:e3:c0:04:11:16:94:20:22:8a:a7:53:81:b5:5a:35:
be:6a:a4:57:b9:fe:78:86:2d:05:90:7a:cc:cc:f6:89:e1:20:
41:22:30:82:87:ab:8c:00:e2:70:be:73:72:e8:c9:c2:ee:4a:
d7:e2:d9:98:85:4a:d2:21:f2:08:43:b6:ac:15:b6:fe:f1:7e:
f1:3b:54:bb:24:77:45:7b:ba:ea:94:1e:71:78:40:7f:97:88:
7c:68:88:98:db:45:49:ec:f2:5f:3e:71:22:f3:cb:2b:1f:ab:
4e:2e:74:19:a7:d1:94:fb:28:0c:97:f4:5c:83:78:0e:ea:da:
71:e3:d4:dd:91:2e:50:c5:85:db:b7:99:40:bb:ba:eb:96:c1:
c9:07:02:17:3e:50:36:89:e0:3f:06:f6:1f:3c:92:b3:40:72:
22:66:eb:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rpq0e3dcdJPGZJAPnfVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzlmOTY0Y2Q0ODlmY2QyNTAwYjM3NjgxZDU4NDc5ZDU1
M2M4YWIwHhcNMjYwMzI5MTMwMDM3WhcNMjYwMzMwMTMwMDM3WjAzMTEwLwYDVQQD
EyhjZDdhZGE1NDA2OGE0MTk4Nzg2NDQyZjAzZTc1ZjFhZjYxMmZiOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR5IhJURac2NQGElM8jqgZE5s5DA
cIcWIey9PWJjKxzgmZLIY14/aVKRvWFQVKgemYchh6QDEsFw7LXdbTJuF+vnhlRn
vq8K0St9AFSXNjjdWQHE6l7iVEqNgtt5fPpv19HImbnZ0GxJ4ik5lXQJTYuvE+0x
1qm7ctCfiQPVlaxYFzdpVAfy4XVpx8+D3ll6byOUFZL0fDqk9vVZfSOyah+MyNLV
Sx0SPB4OFwJ+dcQIVCetSQWz05dlkvBRN6LPY5mNNGHbImdPBtyD17S+ZGoEu5Uj
7ePwirM+//z8N91BmbCCf8t6rsSJT2q1vc/WU5KVBnEYq0pr0vPH5O1JHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM162lQGikGYeGRC8D518a9hL7jIMB8GA1UdIwQY
MBaAFBc5+WTNSJ/NJQCzdoHVhHnVU8irMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTIt
NzJkMWZmZTI1YmQzLzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTItNzJkMWZmZTI1YmQz
LzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS3UB7aT
kgFIM5eg/wrEaHuOMMQnYTttpuZSeRXjObmy9q3WdbXI3QS4y3wGIpRft78hlpKD
dkR4n6ctP08N4Kfc6/twNsGrxODa3V6rzCyVR/GsqMABfyBy39cZ48AEERaUICKK
p1OBtVo1vmqkV7n+eIYtBZB6zMz2ieEgQSIwgoerjADicL5zcujJwu5K1+LZmIVK
0iHyCEO2rBW2/vF+8TtUuyR3RXu66pQecXhAf5eIfGiImNtFSezyXz5xIvPLKx+r
Ti50GafRlPsoDJf0XIN4DuracePU3ZEuUMWF27eZQLu665bByQcCFz5QNongPwb2
HzySs0ByImbrXA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:24 2026 by rpki-client