Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: +deVV3FONNSyl5qqh7khKMjK8tkS98fS65lLzofjyQ0=
Subject key identifier: 2D:26:6C:95:DA:52:50:BE:B9:BD:22:F7:95:3A:BF:CA:02:02:A9:E3
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019D27725DF42F9F30E52108D9D4B9AFFCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0BB6
Signing time: Thu 26 Mar 2026 00:01:39 +0000
Manifest this update: Thu 26 Mar 2026 00:01:39 +0000
Manifest next update: Fri 27 Mar 2026 00:01:39 +0000
Files and hashes: 1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: PcYSRTsr0PhNp4c1AUwrj6Q2juepX48gtM9c/ErkbIk=)
2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5d:f4:2f:9f:30:e5:21:08:d9:d4:b9:af:fc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Mar 26 00:01:39 2026 GMT
Not After : Mar 27 00:01:39 2026 GMT
Subject: CN=2d266c95da5250beb9bd22f7953abfca0202a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:b0:e0:cf:14:69:61:54:d1:b7:f1:ca:a0:
16:82:e2:28:f0:74:5d:26:b8:a9:51:09:f1:d1:7f:
f2:d8:14:5c:67:2e:fd:90:ee:f3:0b:3a:7f:74:b4:
25:08:4b:78:fd:bf:15:9a:b9:09:ce:d2:8e:8f:63:
77:da:84:38:8e:86:95:f5:21:af:c6:a8:10:97:a8:
fa:2a:cb:04:31:77:07:f9:f4:83:ce:0a:73:bd:ed:
c2:a5:84:d1:f7:04:9f:48:fc:45:2e:a3:ee:e7:e6:
08:88:50:db:1b:1e:5a:d9:a3:2c:f5:b2:e7:79:eb:
1c:94:2c:a7:08:b4:91:b0:70:8d:a3:bf:e1:76:5c:
e5:94:00:29:da:c4:b5:ac:b8:6c:10:34:d4:3a:a9:
99:4e:b2:b3:ca:4e:2e:35:4a:ee:65:46:c8:35:33:
4b:a4:6e:22:1a:57:59:66:15:47:5b:48:9c:f7:32:
82:99:93:70:12:39:09:d0:07:62:3e:4a:b6:26:f8:
aa:a8:09:37:92:55:d4:6c:4c:9b:1d:1a:18:e7:67:
1a:d3:f4:af:a2:2f:14:a1:ec:f6:3e:d5:7c:f4:c8:
1e:38:29:e3:46:9f:a3:57:c5:a8:a0:41:c1:5d:4d:
dc:ad:11:46:8b:a2:4c:4a:b7:ef:93:2b:f6:59:06:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:6C:95:DA:52:50:BE:B9:BD:22:F7:95:3A:BF:CA:02:02:A9:E3
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:12:3a:27:f5:81:d7:37:d7:e2:9c:3a:cb:07:f9:3a:28:
a1:d5:c4:ec:41:8d:e1:36:f1:0b:7d:7b:e9:76:ae:4b:82:4c:
26:a6:c2:42:d4:19:e0:79:7f:0b:69:05:e3:93:16:21:a8:5e:
97:f8:72:a2:6f:df:0b:45:a2:8b:dc:56:5d:33:9c:8d:32:da:
e8:d1:d4:33:24:8b:78:5a:de:8d:11:1a:07:2f:67:c1:e1:0e:
0f:c8:dd:29:39:2a:ac:3a:3f:36:e0:ec:22:de:0b:44:fc:7f:
3e:e5:2d:33:9c:ab:e0:95:42:92:7a:fd:f1:05:55:f6:df:e3:
79:9a:3a:24:a4:c4:85:91:71:97:b4:77:be:a6:2c:49:f3:eb:
45:45:d8:b2:12:ff:24:6c:7d:7d:81:10:72:db:95:7a:c1:ff:
2e:83:05:8e:6e:42:a5:5d:cf:00:a8:31:55:6d:db:82:53:fc:
d1:e2:0b:f5:9a:5b:ed:b7:d0:19:3c:07:1a:63:d4:f0:ce:7e:
31:48:8d:91:c4:29:ad:5c:8a:18:46:f6:bb:04:97:d3:28:fa:
8a:88:72:21:bf:c4:41:16:66:68:72:cb:5d:ee:1d:b2:6d:f7:
97:9a:e1:b6:15:84:e6:8a:5c:b8:92:6a:a4:c9:39:e3:80:65:
76:14:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:05 2026 by rpki-client