Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: mELF/4XWi16S7+W/LEK0Hlw4fdGYKYPQll1KvqvGhLE=
Subject key identifier: 21:A9:B5:62:A5:BD:A0:67:7A:AA:81:2D:16:5F:09:EE:D5:D4:CB:CF
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019CF6F35D3A37BFD273ED247BDB06DDAD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 08FC
Signing time: Mon 16 Mar 2026 14:01:09 +0000
Manifest this update: Mon 16 Mar 2026 14:01:09 +0000
Manifest next update: Tue 17 Mar 2026 14:01:09 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: 5nhEwqqRx1M4L2Ek7YrmDTgC8D01KkihJbqfEZ7P3u4=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:f3:5d:3a:37:bf:d2:73:ed:24:7b:db:06:dd:ad:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Mar 16 14:01:09 2026 GMT
Not After : Mar 17 14:01:09 2026 GMT
Subject: CN=21a9b562a5bda0677aaa812d165f09eed5d4cbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:5c:9f:8d:5e:37:c1:24:b9:e4:4a:5e:2f:
e9:5c:25:0c:38:eb:56:17:bf:1b:57:e5:79:f9:9e:
f3:9b:f8:fc:cb:58:05:ea:58:20:f2:20:b2:9d:4a:
7c:11:3d:f5:c8:8b:8f:55:be:e9:83:30:8b:35:98:
f0:df:18:44:19:48:da:4f:f3:1c:10:04:5d:d1:68:
04:20:b5:88:b2:0a:72:29:12:80:5c:50:60:19:9c:
72:31:e2:8d:38:1a:c4:29:a2:12:12:28:01:8a:a7:
55:57:8a:b0:fa:dc:5b:34:a6:06:35:11:fb:51:64:
a6:ce:76:d8:9f:ab:42:29:ca:fe:21:ec:ae:7c:e6:
ff:13:bb:8d:29:86:00:72:50:3f:d4:10:56:ed:f4:
38:a7:fa:36:4a:90:ee:a2:f1:d5:8c:82:33:0c:cf:
8c:b2:a2:c9:53:93:db:8b:17:55:da:e2:27:17:2a:
58:d6:c0:6c:25:83:6f:58:91:d5:5c:46:b2:a1:26:
7c:07:a2:53:4d:bd:f7:2f:4e:7a:11:db:5e:42:11:
a5:58:44:66:ec:be:11:7e:a1:0c:2d:de:56:6b:2a:
7f:c8:93:52:4c:3a:0d:03:de:0e:ba:7d:13:52:a7:
b9:7d:a5:e1:02:ac:27:38:e5:53:50:a0:0c:98:16:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:B5:62:A5:BD:A0:67:7A:AA:81:2D:16:5F:09:EE:D5:D4:CB:CF
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:0c:61:7e:b3:fb:39:6f:aa:2c:8e:63:c3:07:7d:af:58:
c8:ee:7b:cf:8b:71:43:64:ca:a5:1a:d4:b6:d7:10:0e:0c:94:
7d:26:d8:26:32:e6:af:cc:01:25:b9:b2:08:13:7b:ed:0e:05:
5f:69:34:17:e0:19:88:58:7d:c0:12:6c:ea:70:b6:4a:d3:ab:
1a:66:d2:d8:90:80:8a:5b:41:9a:f9:5c:93:cf:e7:b5:27:6d:
74:9f:b9:e1:4c:1f:80:99:5d:75:57:9b:c5:67:96:9d:50:cc:
4f:ae:eb:0c:bc:40:f3:6b:dd:45:53:93:55:d7:18:ed:a8:ad:
9e:ae:31:17:f1:41:b9:69:fa:4d:e5:b5:56:ff:e5:f0:fc:59:
fb:dd:eb:26:fb:4c:b6:bc:ea:59:38:b0:7d:e8:15:1a:a8:30:
54:a8:25:a5:1c:c7:68:96:0c:f5:79:9c:88:fe:39:6b:99:93:
49:d9:d1:62:d2:32:35:fc:53:49:c0:7a:e2:21:23:c0:c5:72:
91:b7:b9:a9:28:da:1c:08:9e:78:1f:0f:d6:d9:3c:0e:5e:00:
0f:a0:b3:e4:c1:91:13:6f:53:0f:2e:bc:90:33:c8:52:de:4f:
55:f6:0c:ae:0b:dd:72:5f:47:e9:da:64:1e:53:65:52:e5:9e:
3c:db:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:34:22 2026 by rpki-client