Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: 5Th2GRQT0Li3PfLg3PLFLzhJuInvrOzDEXlMxAwQ2ys=
Subject key identifier: 51:31:6C:3D:01:82:0B:81:FD:81:80:70:AE:CB:5E:E9:05:DA:0B:95
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019E326063A6810DAC4996ABDF60B2BFC809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 20:00:38 +0000
Manifest this update: Sat 16 May 2026 20:00:38 +0000
Manifest next update: Sun 17 May 2026 20:00:38 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: CVEsDJlskoP/jspwTt58+0rd4MmcZDjLyjGoTS/Yi5E=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:63:a6:81:0d:ac:49:96:ab:df:60:b2:bf:c8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: May 16 20:00:38 2026 GMT
Not After : May 17 20:00:38 2026 GMT
Subject: CN=51316c3d01820b81fd818070aecb5ee905da0b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:82:7b:2e:5a:2c:1e:ad:25:5c:c8:e3:0e:
11:21:f2:57:ef:f2:69:9c:65:7a:cf:e8:3d:de:e8:
af:8f:45:73:73:da:62:71:ac:55:9e:5d:d3:5d:53:
75:40:0e:d3:37:06:30:a2:06:bd:30:83:b9:3b:13:
8b:d4:53:f3:6c:ea:1a:51:28:49:b3:49:48:9c:4e:
5f:9c:a3:30:22:d3:73:a1:83:37:7f:cd:45:b3:e9:
29:3e:73:20:bd:4c:1b:a8:31:0d:7d:16:05:67:d7:
00:17:f3:49:6c:4f:c2:3e:97:17:20:64:e3:56:0c:
04:24:7f:e1:10:cc:6c:f4:66:bd:d6:2a:c2:0e:4c:
11:73:69:42:3b:f9:5b:95:97:a9:e4:8e:fa:93:8c:
a4:2e:62:dd:3f:2c:27:6c:1b:4f:53:31:c7:9e:6b:
6f:f7:09:e5:55:fb:df:b7:f6:f5:3a:e0:36:02:81:
d4:d6:8b:f7:49:be:a1:32:34:a9:8d:5b:78:08:6d:
0e:80:cf:6d:75:e5:32:1e:64:64:98:b9:14:b9:2a:
52:78:71:13:29:a7:a2:40:32:fb:6e:d2:52:20:bb:
b5:d9:a6:a6:e0:78:ef:8c:c0:04:7f:11:44:cc:db:
96:3b:8d:da:17:3b:4b:07:25:48:fb:6f:2c:39:8f:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:6C:3D:01:82:0B:81:FD:81:80:70:AE:CB:5E:E9:05:DA:0B:95
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:b4:47:2f:c7:b5:e0:d2:64:82:2a:c5:c9:28:6c:c0:7a:
65:9a:2e:74:b8:28:82:4e:ec:de:c5:cc:7b:71:8f:ca:9e:ed:
70:36:bf:01:d2:ab:f8:16:73:26:f7:c5:6c:2b:b6:14:d4:81:
c7:0c:bf:f8:59:29:57:55:12:40:e8:fe:de:2f:fc:8a:74:06:
c3:3c:0b:f5:23:83:b5:8b:21:38:f2:8e:1b:40:41:9c:f7:3a:
7b:d9:6d:bd:ff:78:5a:42:8e:83:a6:e7:7f:36:64:05:70:bd:
da:f5:43:8a:94:37:df:02:21:fd:24:ad:ef:fc:09:e5:59:1e:
a4:40:b3:d7:c0:fc:86:19:5b:02:dc:1a:82:d2:d0:3e:e9:36:
b2:26:d8:f9:5d:56:eb:00:3e:66:33:2c:4f:96:76:7c:2d:bf:
b0:98:2c:35:0b:86:e4:4b:8c:10:40:c3:0c:1c:cd:1e:8a:6a:
31:09:62:2e:1b:d6:a2:36:05:5a:d4:50:20:87:50:b8:d1:b5:
5e:7d:8d:ff:ec:fc:2a:32:de:32:bc:3e:5a:6a:36:21:1d:b9:
e5:9e:9e:27:2c:dd:7e:ea:05:21:75:99:22:8b:e8:f3:5c:0b:
70:e3:d3:c8:7b:21:26:0b:d3:da:b3:2f:81:80:f8:43:22:83:
b3:d5:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:46 2026 by rpki-client