Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: yC/pI4Y8SOzhjhv3YEbi5AOUF8tPdNFZfrYrAVffKbA=
Subject key identifier: 7F:0F:E0:94:00:9C:CC:39:70:5D:40:87:A7:F7:43:12:3C:21:82:42
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019D37527515085C17AF09167FCF12A76CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 02:00:43 +0000
Manifest this update: Sun 29 Mar 2026 02:00:43 +0000
Manifest next update: Mon 30 Mar 2026 02:00:43 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: rw1YCCY8dHGuf3pG1Mneyz1RewlXa7+p1QeU77/F4/g=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:75:15:08:5c:17:af:09:16:7f:cf:12:a7:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Mar 29 02:00:43 2026 GMT
Not After : Mar 30 02:00:43 2026 GMT
Subject: CN=7f0fe094009ccc39705d4087a7f743123c218242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:c8:bc:36:b6:85:43:5e:58:23:c2:aa:4e:
57:0d:0c:ab:3b:69:dc:0f:a1:ff:82:5e:5a:3b:d4:
ab:f1:ca:f4:78:2b:8f:e5:6d:24:6e:d5:dc:ec:c9:
a5:03:82:97:cb:54:90:c7:a7:aa:81:33:c3:29:77:
71:a8:3d:54:4b:5c:b6:d0:32:ab:a6:d8:1b:94:ba:
fc:0e:05:a9:05:45:20:eb:8b:39:45:0e:61:56:fb:
41:bf:b8:87:cd:c9:ce:a7:ae:81:03:d6:6f:1c:22:
35:ee:2a:d1:65:37:c4:f1:a5:20:18:28:32:1d:7f:
bb:c3:c1:5a:15:eb:73:3b:e1:ef:1b:35:e5:0f:37:
a1:45:69:7b:e0:4e:18:96:2d:b7:92:27:02:bf:18:
b0:27:5a:49:73:5a:4a:88:ae:96:02:23:08:2e:0a:
b3:de:0e:06:89:58:7f:8d:b7:04:87:34:62:ee:3e:
a8:ae:29:c7:3f:5d:b1:73:2a:78:89:2f:5c:1a:e1:
ab:91:11:3e:eb:ac:ab:37:18:9c:18:46:29:2a:97:
1f:46:17:c4:9a:98:40:0d:28:ee:f7:91:4d:d9:5b:
b6:b7:48:f6:03:5f:67:9c:b9:cb:68:33:96:91:ea:
53:ee:82:8a:a1:51:30:32:d1:51:89:41:30:01:dc:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:E0:94:00:9C:CC:39:70:5D:40:87:A7:F7:43:12:3C:21:82:42
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:1c:02:eb:ea:dd:40:cd:c3:28:97:4c:de:e2:db:37:d9:
5a:79:77:fa:e0:92:7a:49:b1:63:74:d9:03:57:9e:f6:69:88:
ff:b9:7e:95:30:08:a5:bf:7b:d2:b5:fc:b8:a9:5e:6b:f7:85:
e5:1c:a0:c7:32:d1:82:24:4b:b0:a2:e1:d1:54:45:26:d3:a4:
37:3c:9c:e2:c2:5f:0c:01:6b:bf:64:14:0a:c3:e3:a7:12:98:
7a:10:ce:53:87:1d:f9:dd:0a:04:2f:6a:df:86:7d:c6:57:c1:
29:75:56:29:ba:79:14:a3:eb:00:ea:2d:7f:54:2e:4f:ae:80:
72:25:19:ab:cf:04:64:79:2f:81:b5:a3:1d:b4:de:85:80:7a:
31:35:1e:47:02:2b:71:f7:75:b8:4d:5d:a7:ff:ab:c2:aa:b2:
94:ba:b8:c4:7d:6f:2a:b4:ff:f0:d0:94:64:94:a2:81:dd:f5:
d5:2a:cc:1c:5c:00:14:05:06:7c:fb:49:c6:d9:81:ec:78:bc:
3e:c7:bf:92:61:21:41:b3:11:3e:ca:c8:02:63:6e:92:a8:ea:
67:a5:e9:25:42:fe:df:46:4f:e1:75:dc:d0:de:3d:78:24:02:
37:1d:f6:d6:1a:a9:0a:c3:f9:4c:87:33:b7:2c:a4:8f:68:71:
2c:2c:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client