Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: 08MPoDULOt6NCaXFUFjBJPpiBJ4RUs/0kPsMu2HR3k0=
Subject key identifier: C1:E6:69:F8:06:E5:E1:6A:6D:80:D1:7C:EA:B5:55:83:C6:AD:50:A0
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019FA0A8952D2D89DC3B4677D443A586EF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 12BB
Signing time: Sun 26 Jul 2026 23:00:30 +0000
Manifest this update: Sun 26 Jul 2026 23:00:30 +0000
Manifest next update: Mon 27 Jul 2026 23:00:30 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: LwhJbZaqi6Y0uB1G18RtHHZHqqrSjAl+Kc9qYiSar0E=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:95:2d:2d:89:dc:3b:46:77:d4:43:a5:86:ef:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jul 26 23:00:30 2026 GMT
Not After : Jul 27 23:00:30 2026 GMT
Subject: CN=c1e669f806e5e16a6d80d17ceab55583c6ad50a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:23:29:5d:70:77:b5:ba:cd:7f:23:5a:58:
f0:be:e1:22:3c:86:73:8a:67:7f:d2:c1:92:82:38:
6a:1e:bb:4d:02:de:c8:d2:77:b7:95:53:50:f1:ff:
de:83:88:17:b4:b0:de:56:8b:e9:fb:7c:22:5b:7d:
c9:e6:49:51:8f:91:92:ec:3a:b2:a3:43:3f:b0:22:
1a:04:c9:48:02:89:87:51:f2:68:f3:90:cb:01:84:
a8:f1:a2:9b:0d:8e:a8:76:0c:cb:f8:36:5d:ac:75:
a0:f6:a4:ea:9d:ac:40:65:c8:8a:5d:c1:bb:c7:69:
75:a4:c7:b2:0b:21:d1:bd:99:21:b2:2e:f2:74:73:
dd:15:1c:dc:61:07:a3:f3:03:89:37:e1:df:8e:d2:
be:cd:d7:d8:de:36:ad:e6:7b:79:5d:54:bf:ea:3e:
55:74:d0:90:06:fb:84:43:9c:91:5d:01:e6:6f:f9:
7c:ac:60:35:bb:8a:c3:ff:f0:60:c5:39:e6:73:74:
5d:1d:dc:07:f5:f3:96:4b:27:f6:f8:66:10:3a:cf:
17:43:7c:ea:01:1b:49:c4:d6:3d:01:c6:30:fb:bf:
e7:4a:c5:97:ca:07:5f:e0:19:96:bb:0e:3c:a7:93:
de:2a:b7:0f:d6:d9:0a:69:3f:0d:e6:1f:3e:8e:f4:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:69:F8:06:E5:E1:6A:6D:80:D1:7C:EA:B5:55:83:C6:AD:50:A0
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:51:19:37:57:14:8e:a2:6a:53:bf:ac:94:a0:02:cb:5a:59:
e2:8d:b3:fc:32:ed:09:13:fe:25:cd:6a:38:d2:c9:8d:b5:da:
9f:0e:1d:e5:44:2f:ba:0c:7d:32:9b:ee:1c:96:72:0d:98:38:
b0:2c:fd:82:21:ac:f7:5d:e8:fa:8d:2d:b6:bf:72:b9:09:31:
f1:b0:a7:32:27:76:b8:f1:9d:c5:c5:4d:51:e8:db:71:f7:85:
04:e7:2d:ba:b5:6d:64:64:fd:b8:e2:80:41:7f:ea:bc:67:03:
d6:ae:c0:1c:57:4e:04:dd:e7:4c:15:9e:62:8e:5e:6c:4c:d1:
e4:65:62:f9:03:e4:3d:bf:3c:5c:fa:e0:9e:3b:77:76:b0:05:
e4:36:b9:22:5a:99:6a:fa:66:4d:45:c3:9b:80:a3:2c:39:00:
68:5e:26:2a:89:19:63:da:b7:53:88:8b:e3:94:94:e6:5d:46:
0a:e5:00:1e:8c:3b:3e:94:85:a4:a3:be:5b:54:d4:e1:f1:9c:
b4:d7:cb:75:d6:26:94:47:45:93:fa:aa:a5:c4:e6:6b:f0:26:
88:86:d2:d8:6c:8b:14:53:71:ac:81:8d:b3:27:c6:b9:84:48:
90:5e:42:48:2f:0e:b0:28:be:ff:c1:60:74:2b:03:d2:e4:37:
10:89:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:07:57 2026 by rpki-client