Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: J/0f6Y4iArL/Xs5sRQjO5CYy/w4XjsfseaHs/jj/eFU=
Subject key identifier: BC:B1:9A:D9:78:1A:30:04:AF:E8:56:31:C5:88:3B:BC:66:CF:FB:96
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019D389C42882867EBCB4DA96B31F4FD2E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 117C
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: 4wZnla9/gP7aY/RTdgBy8YUkICPqYhlQ0pbuGAdNK9A=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:42:88:28:67:eb:cb:4d:a9:6b:31:f4:fd:2e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=bcb19ad9781a3004afe85631c5883bbc66cffb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:2c:56:e5:c0:d6:34:fd:e6:83:98:4a:9d:
da:9f:46:5c:96:0c:de:50:25:ca:ed:5c:f2:07:9c:
76:01:d5:87:b3:4a:58:0a:3e:6f:74:3b:ce:5a:8e:
d3:64:54:ee:c1:00:21:62:b7:6f:74:73:6d:4f:67:
b4:d7:7f:cb:9f:6a:b3:a1:75:ca:7d:74:63:f9:72:
26:6d:66:4a:53:12:5b:45:c3:18:9e:f0:7b:29:80:
78:5a:70:2b:b6:2d:c4:23:88:a5:8c:66:6c:d6:74:
a5:ee:63:d1:98:da:a5:a2:c4:86:aa:04:0c:81:fb:
b1:fd:27:1c:50:e4:1a:eb:e6:0a:a4:ca:bd:3f:55:
ab:c5:e4:0a:43:c1:25:29:d4:b5:87:b5:46:fe:57:
37:03:97:26:52:c7:77:ba:76:9e:72:74:48:84:15:
f9:aa:37:09:81:32:76:43:3a:57:36:c5:d5:cc:74:
55:95:df:a8:a1:90:63:23:84:21:b0:c8:dd:4b:52:
a2:04:02:b2:95:2c:9f:16:cc:e1:26:92:2a:b5:92:
08:d5:0d:b5:05:21:4e:40:64:44:ae:af:d9:66:b8:
53:a3:c8:23:c6:8b:33:48:64:f3:de:df:0f:e1:d7:
e1:f7:64:18:fb:b5:38:00:26:23:ab:46:7a:2d:9a:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:9A:D9:78:1A:30:04:AF:E8:56:31:C5:88:3B:BC:66:CF:FB:96
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:28:75:de:29:63:25:9f:a0:d9:d0:5e:75:f2:ca:57:9d:b2:
14:cb:6a:c8:a4:07:f0:26:c1:bd:b0:22:13:fa:ac:2d:e4:cb:
8f:1b:86:28:3f:1b:f5:b4:65:a0:07:96:64:60:4c:38:a8:d0:
fd:38:df:b3:fa:af:c8:96:f4:9d:a8:c1:96:72:00:5c:0d:b0:
43:98:56:a4:4d:6e:71:47:2e:f0:fa:fb:e4:9d:72:e8:29:ee:
ab:44:8a:d3:cd:ea:2b:65:5e:85:6d:45:b1:ff:20:b0:28:ea:
b4:e1:6e:79:0f:cb:e5:16:bc:0f:54:d9:f2:97:98:2e:05:87:
2a:fe:c9:46:31:eb:cb:56:8a:d5:a2:5c:ca:ca:82:c9:ce:82:
ee:fc:8f:61:c3:57:95:30:f2:2e:7e:7b:e6:0f:95:a8:7c:c7:
46:ac:89:5f:56:66:e4:cd:00:7e:41:ef:14:07:03:4b:33:81:
58:3c:b0:7d:dd:1a:e1:b2:10:1a:d8:e8:40:0e:fd:d9:e3:12:
76:35:33:f9:a1:08:6d:cf:73:e9:88:6e:66:a9:aa:a0:33:c9:
9d:9e:25:10:99:34:9b:26:9f:58:89:fa:f0:8d:9d:50:f2:e8:
46:cd:c9:72:f6:e8:60:f1:cf:3b:e5:41:63:f5:40:6c:ac:6c:
1c:4f:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:57 2026 by rpki-client