Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: 1w80UwTCyNaElwgXH1D2Y+Xf0DmtvXBAG/Q/YEN2bsg=
Subject key identifier: 02:58:CD:41:E4:63:7D:D3:60:0D:C6:1E:12:81:0D:4F:6F:2B:E9:CC
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019E8EDBCA577EC7BAAE64B9E77D9E10DD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 1927
Signing time: Wed 03 Jun 2026 19:00:29 +0000
Manifest this update: Wed 03 Jun 2026 19:00:29 +0000
Manifest next update: Thu 04 Jun 2026 19:00:29 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: kxW6Vtsp7dDC0vPzObWIAxIn35K8kqAObE0bcQHHFkY=)
2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:db:ca:57:7e:c7:ba:ae:64:b9:e7:7d:9e:10:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jun 3 19:00:29 2026 GMT
Not After : Jun 4 19:00:29 2026 GMT
Subject: CN=0258cd41e4637dd3600dc61e12810d4f6f2be9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:25:5b:96:7e:38:4f:61:dd:c1:5a:e4:e6:
d8:60:96:01:11:44:5c:97:54:e5:af:88:6d:83:da:
c6:e6:ab:53:a7:d7:1c:71:25:09:42:91:19:f2:9b:
d6:98:40:93:e4:ed:0d:bf:86:1b:a2:45:cb:90:e1:
65:f7:d5:97:50:1a:2a:c2:b6:bf:c6:f7:5b:fc:45:
42:81:50:14:f5:78:ef:2e:bd:c4:d4:a7:98:2e:19:
d6:92:ee:f9:88:4f:4d:af:83:eb:85:72:bb:40:b6:
5e:a8:1d:c0:1f:6a:94:70:e9:e7:79:62:e3:cb:93:
4a:45:90:f0:7d:bd:0c:48:29:42:27:ec:8e:2b:f4:
51:c3:b9:24:f5:ee:10:7f:a2:b5:b3:a0:12:85:5a:
49:4a:bc:af:4a:06:ad:38:d5:8a:cb:fe:6d:d8:af:
9b:54:72:c6:61:8c:41:bc:85:06:11:2f:9a:17:2b:
a2:7a:2b:b3:dd:a3:d6:74:29:c6:83:48:6a:dc:af:
3a:63:35:15:45:63:6e:92:a1:37:08:50:dd:75:bc:
df:70:5c:d9:6a:43:4f:6c:5d:01:3e:46:2b:9c:b8:
e1:6a:96:1e:b8:9b:bf:fe:7f:68:f5:06:e4:9a:3e:
73:aa:4e:50:a6:fe:79:da:04:94:7a:88:20:5e:5d:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:58:CD:41:E4:63:7D:D3:60:0D:C6:1E:12:81:0D:4F:6F:2B:E9:CC
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:4b:30:bb:5d:7c:a6:cd:b0:0c:75:ea:2d:8c:90:38:4d:
00:99:57:51:b8:aa:7d:cc:50:f9:b7:81:8c:29:1d:03:2e:ef:
81:96:63:af:fb:1e:e9:35:97:b4:04:dc:5b:1e:1e:da:c6:c3:
4c:72:ed:5a:95:cd:3d:47:d6:38:4a:90:1a:7b:d6:7e:c6:97:
b3:6a:fa:60:d8:ee:44:27:21:f2:22:95:2b:fc:42:ab:68:21:
e8:06:42:8e:4d:6c:e2:94:c0:d7:95:c7:1c:6d:1c:57:7f:ae:
bc:11:c8:2a:e4:61:dc:b4:e0:32:20:f3:94:ff:25:00:57:ea:
b7:7e:ec:6e:59:a3:45:76:d3:5d:e5:c3:27:d3:e0:a5:e2:0e:
1a:8a:2c:67:23:3e:46:31:c2:30:d7:af:45:83:7d:6f:4d:2e:
e2:10:85:0d:30:58:e6:f0:36:1d:ad:c3:e1:7c:f0:cb:97:dd:
37:e3:fc:50:03:52:fe:38:f5:cb:e5:51:84:3c:a0:c7:fb:88:
6f:42:66:fa:9b:6c:5a:ee:e0:79:df:02:33:62:90:a0:4c:39:
18:e2:8a:64:2d:ca:b3:b0:a5:3d:1a:ce:dc:1a:bb:1c:37:db:
62:51:e2:8a:1c:29:bf:a4:42:ea:48:a4:4d:12:7e:67:31:aa:
3d:31:35:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6O28pXfse6rmS5532eEN0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk
YjZjZTcwHhcNMjYwNjAzMTkwMDI5WhcNMjYwNjA0MTkwMDI5WjAzMTEwLwYDVQQD
EygwMjU4Y2Q0MWU0NjM3ZGQzNjAwZGM2MWUxMjgxMGQ0ZjZmMmJlOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy8lW5Z+OE9h3cFa5ObYYJYBEURc
l1Tlr4htg9rG5qtTp9cccSUJQpEZ8pvWmECT5O0Nv4YbokXLkOFl99WXUBoqwra/
xvdb/EVCgVAU9XjvLr3E1KeYLhnWku75iE9Nr4PrhXK7QLZeqB3AH2qUcOnneWLj
y5NKRZDwfb0MSClCJ+yOK/RRw7kk9e4Qf6K1s6AShVpJSryvSgatONWKy/5t2K+b
VHLGYYxBvIUGES+aFyuieiuz3aPWdCnGg0hq3K86YzUVRWNukqE3CFDddbzfcFzZ
akNPbF0BPkYrnLjhapYeuJu//n9o9Qbkmj5zqk5Qpv552gSUeoggXl0RkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJYzUHkY33TYA3GHhKBDU9vK+nMMB8GA1UdIwQY
MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt
ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz
LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpJLMLtd
fKbNsAx16i2MkDhNAJlXUbiqfcxQ+beBjCkdAy7vgZZjr/se6TWXtATcWx4e2sbD
THLtWpXNPUfWOEqQGnvWfsaXs2r6YNjuRCch8iKVK/xCq2gh6AZCjk1s4pTA15XH
HG0cV3+uvBHIKuRh3LTgMiDzlP8lAFfqt37sblmjRXbTXeXDJ9PgpeIOGoosZyM+
RjHCMNevRYN9b00u4hCFDTBY5vA2Ha3D4Xzwy5fdN+P8UANS/jj1y+VRhDygx/uI
b0Jm+ptsWu7ged8CM2KQoEw5GOKKZC3Ks7ClPRrO3Bq7HDfbYlHiihwpv6RC6kik
TRJ+ZzGqPTE1bA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:39 2026 by rpki-client