Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: tsxwoArFMOLv+xfeQ/WKvRq0cvSl5ofHr6q50W4dt0s=
Subject key identifier: 53:C5:3F:35:9B:80:A8:DE:34:DF:8D:95:70:51:8D:73:C7:91:BC:44
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 019D265F38F7646B7871EF4A962A9BE813BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 1324
Signing time: Wed 25 Mar 2026 19:01:07 +0000
Manifest this update: Wed 25 Mar 2026 19:01:07 +0000
Manifest next update: Thu 26 Mar 2026 19:01:07 +0000
Files and hashes: 1: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: c1eQZ8oKZchv/1ZLkuo40oM7wFqn7X7LdtW7rJc1J6E=)
2: gYLvy5DjMihQxbK3CpNYolCJCbs.roa (hash: nk0QPIHhBJ+tkBFjYJBMoGr2Na3j2yW9OuuUU/oPTZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:38:f7:64:6b:78:71:ef:4a:96:2a:9b:e8:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Mar 25 19:01:07 2026 GMT
Not After : Mar 26 19:01:07 2026 GMT
Subject: CN=53c53f359b80a8de34df8d9570518d73c791bc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:6b:bf:da:d7:49:1d:4e:2b:3a:6d:f8:84:
83:9a:eb:0f:3e:5e:78:e5:a7:3e:43:bb:cd:09:27:
26:fa:f9:15:e3:3d:13:32:2c:08:d2:b3:94:0e:45:
1c:3e:29:94:f4:a9:fd:b4:96:a6:4f:26:a1:ff:c6:
2d:f1:2f:05:0b:a5:27:15:84:1c:22:ee:9e:5e:bc:
f0:94:ac:b2:31:11:02:3d:6b:a0:e1:6b:cc:2f:eb:
a7:9c:91:98:74:1e:05:41:91:4f:cd:68:47:0f:c4:
38:08:d0:87:ce:0d:88:32:ad:99:99:17:8a:06:5f:
29:eb:b9:b3:89:6f:f7:e1:c8:50:c2:c9:d5:76:82:
d6:f3:fa:f0:0e:49:84:36:f9:3c:b6:3f:0e:70:cc:
97:89:d7:1a:65:0e:e8:c1:ee:54:0a:a5:6c:74:7b:
08:c4:43:b0:41:bb:3a:0e:e2:c3:f9:62:49:7e:0d:
e5:2a:ae:2c:1a:d3:26:cb:9a:42:14:73:b5:c8:a9:
50:96:4d:37:7d:ca:f3:a3:86:e9:8c:6d:0d:b2:4b:
25:dc:7a:c9:a1:57:d8:e4:65:b6:ba:7d:2c:cb:e6:
a8:08:4a:2a:55:78:c9:fd:39:2c:0a:02:d4:79:2c:
dc:63:d1:98:85:4b:8e:d2:06:cc:4d:a6:4c:f1:11:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:3F:35:9B:80:A8:DE:34:DF:8D:95:70:51:8D:73:C7:91:BC:44
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:77:23:3f:2f:37:5f:1f:db:10:10:03:0d:3b:32:72:4e:
81:ab:40:5e:12:d5:04:f7:94:fc:88:ba:8e:a5:fd:38:26:bd:
a1:bb:06:f0:96:19:56:f1:6d:bf:17:dd:9f:28:27:b9:5b:ca:
c2:7b:f9:b9:b0:a3:f8:f8:fa:15:3c:4c:61:10:f5:ca:e2:06:
96:bd:be:7e:74:41:14:19:7a:05:7c:a4:a8:d7:91:ea:7d:90:
d8:d7:b2:50:bc:f6:7d:ab:6e:34:69:4d:94:c7:8e:4b:fa:03:
4f:55:6b:87:6f:2a:57:b5:4e:b0:8c:1f:a0:d2:1b:71:24:b4:
95:62:a4:70:73:a8:9e:28:7e:e4:55:d7:fe:0b:d8:2d:08:c5:
8d:ca:d1:3b:0c:c3:d8:5c:3c:4c:73:e2:9b:7a:76:c1:1d:60:
0c:b8:f8:38:cf:44:83:fa:0d:f1:8a:7e:29:bd:a2:45:2a:a4:
48:78:a0:ad:ac:35:2e:c0:49:83:58:0d:54:ce:88:5f:97:eb:
51:21:31:89:cb:b0:96:ea:08:6f:17:56:59:8f:06:01:a8:cb:
32:b1:3a:f5:2c:d2:ac:f1:6e:a0:ba:7f:42:56:0c:83:76:cd:
64:4f:4b:39:39:8c:71:b9:4a:d7:94:7f:f3:5c:0a:08:1d:17:
0f:20:b6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXzj3ZGt4ce9Kliqb6BO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzlmOTY0Y2Q0ODlmY2QyNTAwYjM3NjgxZDU4NDc5ZDU1
M2M4YWIwHhcNMjYwMzI1MTkwMTA3WhcNMjYwMzI2MTkwMTA3WjAzMTEwLwYDVQQD
Eyg1M2M1M2YzNTliODBhOGRlMzRkZjhkOTU3MDUxOGQ3M2M3OTFiYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzNrv9rXSR1OKzpt+ISDmusPPl54
5ac+Q7vNCScm+vkV4z0TMiwI0rOUDkUcPimU9Kn9tJamTyah/8Yt8S8FC6UnFYQc
Iu6eXrzwlKyyMRECPWug4WvML+unnJGYdB4FQZFPzWhHD8Q4CNCHzg2IMq2ZmReK
Bl8p67mziW/34chQwsnVdoLW8/rwDkmENvk8tj8OcMyXidcaZQ7owe5UCqVsdHsI
xEOwQbs6DuLD+WJJfg3lKq4sGtMmy5pCFHO1yKlQlk03fcrzo4bpjG0Nsksl3HrJ
oVfY5GW2un0sy+aoCEoqVXjJ/TksCgLUeSzcY9GYhUuO0gbMTaZM8RHnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPFPzWbgKjeNN+NlXBRjXPHkbxEMB8GA1UdIwQY
MBaAFBc5+WTNSJ/NJQCzdoHVhHnVU8irMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTIt
NzJkMWZmZTI1YmQzLzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTItNzJkMWZmZTI1YmQz
LzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE93Iz8v
N18f2xAQAw07MnJOgatAXhLVBPeU/Ii6jqX9OCa9obsG8JYZVvFtvxfdnygnuVvK
wnv5ubCj+Pj6FTxMYRD1yuIGlr2+fnRBFBl6BXykqNeR6n2Q2NeyULz2fatuNGlN
lMeOS/oDT1Vrh28qV7VOsIwfoNIbcSS0lWKkcHOonih+5FXX/gvYLQjFjcrROwzD
2Fw8THPim3p2wR1gDLj4OM9Eg/oN8Yp+Kb2iRSqkSHigraw1LsBJg1gNVM6IX5fr
USExicuwluoIbxdWWY8GAajLMrE69SzSrPFuoLp/QlYMg3bNZE9LOTmMcblK15R/
81wKCB0XDyC2jA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client