Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: kIAM58qrYuKFTwZ0ZUAd3g9AISo3kWj4b5LvyveMSfs=
Subject key identifier: 80:D0:6C:80:E0:84:CD:FA:8D:AE:07:F8:ED:FB:4C:52:23:4C:11:FF
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 019D37523B64A73B44B4FC816544B00C7634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: dVxzjaoJTVmp7c05edH5q9mIkhxAmv9lIfxP27QnQgc=)
2: lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa (hash: njg2lEvNlP78vJZCgNqoI9ZZjFefykyHjoEjFHNtef0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3b:64:a7:3b:44:b4:fc:81:65:44:b0:0c:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=80d06c80e084cdfa8dae07f8edfb4c52234c11ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:22:6f:01:62:16:e3:89:06:57:2d:61:03:
e2:17:0b:e3:7a:8a:35:12:a7:b2:0d:e1:86:53:e1:
aa:71:c8:68:38:da:c8:e9:d3:9d:35:63:d8:84:e9:
95:f0:03:6d:c6:13:64:90:aa:d8:95:99:e3:91:ea:
44:67:e6:e7:60:dc:a2:e9:2b:a9:94:99:66:f2:61:
10:8c:7b:7a:00:4d:bf:1f:82:26:9a:ea:6a:02:4e:
75:33:2a:76:8f:4c:75:95:a6:23:23:18:6b:93:5a:
aa:93:4a:32:b7:14:09:46:e1:d9:a7:32:cc:33:3e:
9f:ed:3b:65:50:df:e9:ab:7a:f9:2d:0e:ee:1d:06:
c5:f0:f3:02:06:38:6f:5c:d2:1e:b3:0a:1b:56:52:
21:84:b3:1d:45:6a:fc:9e:a7:ba:26:31:ea:08:0e:
98:91:31:21:ed:ae:e3:a1:31:58:df:bd:0a:df:53:
8b:2a:b0:9f:e6:2a:67:42:8f:81:48:2e:8e:26:f3:
09:f0:34:61:70:99:b7:d3:5d:89:0c:8a:a7:a5:0e:
48:8b:b3:c5:db:ce:1e:ba:be:7a:94:9f:33:98:dd:
86:17:95:4f:0f:68:2d:d1:f4:a9:cb:41:36:69:e2:
3e:41:f4:91:60:b5:5f:d9:10:d8:8b:03:70:be:0e:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:6C:80:E0:84:CD:FA:8D:AE:07:F8:ED:FB:4C:52:23:4C:11:FF
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:48:d4:1b:f8:08:3f:f9:db:d9:c8:d9:7e:7b:b9:f9:8a:
b0:bd:6d:8d:67:ea:8f:8a:39:fc:88:e8:5b:e7:76:8b:77:91:
c2:ea:3d:9a:10:29:0a:e1:8a:54:42:38:db:81:37:6d:24:8c:
bb:14:f3:0d:bf:d1:9d:a3:2c:fd:a9:ef:1f:e9:09:21:0a:be:
4c:da:ee:a9:85:ee:ce:0a:84:be:d6:a7:07:cd:ad:f3:09:05:
89:d7:55:d9:21:f4:08:05:4e:63:5c:f4:56:65:d4:d3:7b:3a:
e0:93:6e:de:d8:20:41:43:67:ba:96:4e:3c:7b:f4:fb:14:2b:
1f:5f:e2:c0:6b:41:5f:a1:4d:94:f8:e4:3d:9b:82:84:a5:99:
f3:e6:5f:e8:4b:08:2b:3c:6b:b0:3f:e8:1d:39:eb:69:63:1f:
60:0c:f6:bd:78:60:a5:59:0c:3f:03:24:c0:be:6d:a8:38:c8:
46:33:c3:b8:9f:45:03:7b:29:f0:73:2e:70:ca:10:ee:41:0b:
3e:09:c8:2d:7b:d8:bc:71:20:88:da:d9:2e:9c:bf:a4:10:dd:
3e:50:9c:14:b0:5e:34:49:6c:f1:4a:5f:bb:9f:3d:ec:4e:59:
57:d0:ff:82:09:8c:54:50:c3:70:df:43:ed:8d:a3:48:2f:73:
0d:b1:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client