Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: jKprTnWqRXwIssyRHkrh/0tX5xPlsQAObIUVDCxjl+s=
Subject key identifier: 35:BD:2A:9B:9F:C6:26:87:DA:45:83:5B:B0:8D:63:F4:7E:71:6A:EF
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 01A0DFBD2ECB30A175703EB401EBB0A95B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 1A5A
Signing time: Sat 26 Sep 2026 22:01:52 +0000
Manifest this update: Sat 26 Sep 2026 22:01:52 +0000
Manifest next update: Sun 27 Sep 2026 22:01:52 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: hEQArcXzyNdGHOR1dcqL1IjjF6oEh0KjuZOqeLVvJLE=)
2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:2e:cb:30:a1:75:70:3e:b4:01:eb:b0:a9:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Sep 26 22:01:52 2026 GMT
Not After : Sep 27 22:01:52 2026 GMT
Subject: CN=35bd2a9b9fc62687da45835bb08d63f47e716aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:cd:65:f9:7a:67:61:df:69:ca:b5:4a:6a:
2a:19:af:c6:55:41:f2:a4:0c:53:96:ec:3c:bf:02:
20:88:6f:67:d9:d5:9f:9e:69:fd:53:0b:53:47:d8:
56:3b:c1:76:7b:d6:b9:60:f4:87:66:c3:48:b9:de:
6e:f2:75:3d:0a:3f:54:0b:6a:0e:2c:4a:be:cb:b9:
f8:ec:b3:d9:2e:a5:13:3c:b2:95:e5:c8:e3:71:db:
bd:ba:f7:17:9c:61:c8:1b:ff:31:a8:df:63:4c:41:
28:0f:df:a1:19:ca:2f:8d:59:4f:5a:ca:da:2a:50:
50:1b:19:cb:26:28:6a:94:e3:0a:cb:7d:9b:a0:07:
e0:c2:76:59:b6:df:ea:dc:65:95:4d:f4:bb:db:12:
11:d9:4f:ac:ef:ac:21:0f:27:21:a6:2b:36:fb:f9:
f7:b6:b2:47:a2:d0:e3:7e:ea:15:20:66:10:0f:7d:
10:b2:51:24:eb:26:30:3a:78:f0:aa:57:1e:f3:f2:
09:96:7c:45:40:35:65:b4:79:a2:a7:7f:2a:07:65:
35:be:0b:8f:0e:6a:e1:8a:33:5c:94:64:d0:72:d1:
35:b9:ed:ce:e9:d2:cb:48:fd:10:39:29:0f:6b:e5:
c0:27:b8:2b:8c:5a:5b:17:5d:1d:d4:1e:00:d5:37:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:2A:9B:9F:C6:26:87:DA:45:83:5B:B0:8D:63:F4:7E:71:6A:EF
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f5:cc:a6:31:c9:8d:d9:6c:54:2d:5d:96:fd:70:fe:b2:6e:
d7:5a:be:1e:0a:c7:44:23:ac:61:07:58:41:3b:d6:eb:68:50:
a7:31:5d:69:9f:45:02:1d:39:56:a4:ea:f2:08:17:11:fd:a8:
e7:f1:ae:9f:26:2e:56:58:38:a3:f7:96:42:26:7d:79:ee:b6:
0a:ba:bc:a9:e8:31:25:71:db:02:eb:ad:1b:0b:2f:37:06:5b:
ef:db:6a:7a:42:ee:f7:3c:49:57:15:69:58:b0:1e:be:f5:43:
01:3c:56:e5:b0:b8:3a:50:3f:32:c2:a2:48:4b:09:ee:7b:15:
d5:8a:13:18:5c:29:44:56:22:56:71:5c:42:e0:c0:ad:24:5b:
32:dc:b0:dd:91:21:c3:9a:ed:2c:82:06:d2:f1:1f:83:5a:79:
d7:43:ad:ae:11:4f:17:bb:d2:f8:ba:9f:01:af:0a:32:94:40:
08:8e:fc:2f:10:41:78:e4:9f:31:72:98:4e:f0:49:10:40:d2:
6e:3f:f7:19:d0:35:3e:57:24:4c:00:c4:b8:1f:05:2b:f5:e0:
60:6e:d8:bd:c9:fe:65:60:df:d1:a9:95:48:35:2b:91:a8:a7:
8e:c5:81:6b:79:ca:2f:10:92:38:bf:44:2b:b7:33:6a:7f:6e:
3e:cb:5a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvS7LMKF1cD60AeuwqVueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk
YjZjZTcwHhcNMjYwOTI2MjIwMTUyWhcNMjYwOTI3MjIwMTUyWjAzMTEwLwYDVQQD
EygzNWJkMmE5YjlmYzYyNjg3ZGE0NTgzNWJiMDhkNjNmNDdlNzE2YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0vNZfl6Z2Hfacq1SmoqGa/GVUHy
pAxTluw8vwIgiG9n2dWfnmn9UwtTR9hWO8F2e9a5YPSHZsNIud5u8nU9Cj9UC2oO
LEq+y7n47LPZLqUTPLKV5cjjcdu9uvcXnGHIG/8xqN9jTEEoD9+hGcovjVlPWsra
KlBQGxnLJihqlOMKy32boAfgwnZZtt/q3GWVTfS72xIR2U+s76whDychpis2+/n3
trJHotDjfuoVIGYQD30QslEk6yYwOnjwqlce8/IJlnxFQDVltHmip38qB2U1vguP
DmrhijNclGTQctE1ue3O6dLLSP0QOSkPa+XAJ7grjFpbF10d1B4A1TfRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW9KpufxiaH2kWDW7CNY/R+cWrvMB8GA1UdIwQY
MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt
ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz
LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPXMpjHJ
jdlsVC1dlv1w/rJu11q+HgrHRCOsYQdYQTvW62hQpzFdaZ9FAh05VqTq8ggXEf2o
5/GunyYuVlg4o/eWQiZ9ee62Crq8qegxJXHbAuutGwsvNwZb79tqekLu9zxJVxVp
WLAevvVDATxW5bC4OlA/MsKiSEsJ7nsV1YoTGFwpRFYiVnFcQuDArSRbMtyw3ZEh
w5rtLIIG0vEfg1p510OtrhFPF7vS+LqfAa8KMpRACI78LxBBeOSfMXKYTvBJEEDS
bj/3GdA1PlckTADEuB8FK/XgYG7Yvcn+ZWDf0amVSDUrkainjsWBa3nKLxCSOL9E
K7czan9uPstaPw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:32 2026 by rpki-client