Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: Dx0DO5eLtMuY7TkyaWdX6qpqZiSfNfYTdzA3iIrj148=
Subject key identifier: 87:92:CD:C1:1A:59:72:4B:91:0C:C8:26:2B:A2:FA:15:94:9A:21:DE
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019D292971992680388B762855D47791D0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0BAD
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: /IAM6jBY0lKqOSGQMPDn7MHwaWIIp/F6FKJfhmV73oc=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:71:99:26:80:38:8b:76:28:55:d4:77:91:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=8792cdc11a59724b910cc8262ba2fa15949a21de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:a6:e7:97:e2:f6:d9:35:63:e0:1f:cf:28:
7f:b2:7e:10:3e:b8:07:27:40:d8:a2:d9:5d:7c:ae:
8a:78:2b:6d:cb:a1:b8:f9:99:4b:40:03:0e:09:9b:
ed:1f:ba:a8:52:2f:0b:9d:23:ee:d3:1f:14:a8:f6:
e9:0b:4b:be:b6:07:cd:ec:b8:8f:de:31:09:9f:32:
d3:7b:08:3f:16:07:e9:d5:66:d4:f1:8b:57:eb:16:
fe:fc:5d:58:4d:94:15:ef:a6:8c:b7:c2:20:55:ea:
8e:49:ff:f4:51:7e:dc:1d:3d:1b:4d:b0:87:7e:12:
ba:81:a4:02:8b:cf:ba:e3:63:71:ca:59:4c:d4:7f:
55:a3:70:35:62:bf:60:d6:63:d5:c6:c4:14:71:10:
b3:ea:a3:15:25:0d:d5:9c:d4:f3:c8:e2:15:e9:d9:
aa:8c:5f:3e:c3:11:90:94:be:24:3f:46:a5:d1:35:
d2:a7:44:22:cb:f9:ec:3a:fd:57:65:8a:c7:fd:52:
7c:23:ce:5c:d6:05:de:18:eb:f4:87:33:c8:04:1c:
ee:39:c5:c2:d6:46:ef:42:3b:ae:49:c6:fb:39:84:
51:b8:c2:e3:06:44:85:93:c9:38:df:92:81:5f:91:
f3:51:67:76:96:bc:af:5f:3b:68:91:e6:c0:e9:3e:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:CD:C1:1A:59:72:4B:91:0C:C8:26:2B:A2:FA:15:94:9A:21:DE
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:89:b1:c0:4f:04:a9:33:fc:39:b9:97:a6:1e:46:27:2d:
a5:e5:21:08:29:2e:49:ad:c1:03:fe:e9:10:86:3b:22:65:02:
63:39:fc:5a:80:e4:95:c5:d4:d2:81:50:2e:c8:24:21:dc:8f:
f3:f2:ba:45:03:3c:ae:a7:f8:a7:4f:47:3c:ed:b8:cd:28:d9:
54:d0:f6:59:13:92:49:29:8f:57:43:de:b1:71:97:d5:da:26:
f5:09:d6:c2:f7:ce:b2:1d:b5:ef:26:4f:34:fc:f8:d3:5b:ab:
30:f5:04:27:9c:40:3f:99:ad:6b:6c:e4:77:23:93:a4:61:0e:
8c:60:2a:c6:6b:20:e3:7a:b3:ef:4a:4b:4a:e5:70:a8:77:08:
f4:ed:63:c0:88:a4:fc:ec:77:d0:4e:81:71:21:e7:7d:0f:c6:
3e:06:6a:95:4a:45:d0:3e:60:dc:f7:5d:40:a1:24:ef:a9:94:
f0:eb:96:08:4a:17:23:c5:35:e1:40:e1:1d:9b:99:ac:f1:cf:
ab:86:dc:a0:0b:2b:ae:e5:56:7e:6b:19:00:c2:ef:9a:74:01:
84:cd:32:76:c6:8a:e6:91:c5:39:fb:06:f9:a3:98:b7:fd:62:
01:4f:ac:c3:d0:d0:fb:83:ba:6c:36:a3:37:13:0e:03:d8:98:
1e:15:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:38 2026 by rpki-client