Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
File: FZLn4r66W82NQp2b7lN2sIEEdas.mft (raw, json)
Hash identifier: AeEXJm/7fqB2WHvKYNep9XiutMBk9kCTNxepohnG8IY=
Subject key identifier: 95:8A:87:13:55:75:EB:24:59:6E:8D:43:61:83:6A:34:12:51:C4:47
Authority key identifier: 15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
Certificate issuer: /CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Certificate serial: 019F935BF0EC06CC5A17904AE6FB0876A2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:43 +0000
Manifest this update: Fri 24 Jul 2026 09:01:43 +0000
Manifest next update: Sat 25 Jul 2026 09:01:43 +0000
Files and hashes: 1: FZLn4r66W82NQp2b7lN2sIEEdas.crl (hash: /f24MXx4OiQXoord13mN1dQNTw2uHayJDbpy88iDGKs=)
2: tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa (hash: Ga9D1Kj+eOQFH1ST/P7sI0dH985uIKk/1LYCPBqpD78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f0:ec:06:cc:5a:17:90:4a:e6:fb:08:76:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Validity
Not Before: Jul 24 09:01:43 2026 GMT
Not After : Jul 25 09:01:43 2026 GMT
Subject: CN=958a87135575eb24596e8d4361836a341251c447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:5d:52:94:8e:00:ff:62:50:9e:53:d2:54:
b9:b1:c7:a5:55:7a:3d:06:69:bb:56:68:3e:1a:0b:
2a:8c:af:0d:9d:1b:d3:4a:72:0c:79:70:5d:b5:7f:
79:fc:45:7d:d3:80:d4:a7:eb:e2:cc:f0:47:76:d7:
84:0c:a2:d2:01:f0:46:a0:d3:70:8f:0e:b7:7a:b5:
3f:20:9c:98:4c:1f:7a:07:6a:82:b3:2e:93:b3:6c:
aa:2d:4a:6c:94:23:f2:8b:91:ea:fc:dc:38:ba:ac:
a3:51:4f:ab:dd:2a:d9:8a:55:0d:97:b3:c7:45:ac:
ed:92:0c:fe:29:99:b9:69:fa:93:e5:d9:80:d4:14:
67:21:19:28:c4:b3:f4:94:d5:34:8a:7b:61:5f:6b:
92:4d:73:cd:75:b6:48:a5:e7:ad:c1:1b:5a:a2:ab:
a1:63:21:bd:b5:fc:95:71:a3:b0:20:81:8c:b9:11:
16:1a:22:95:5c:a2:56:64:cb:ee:7b:24:d3:d0:24:
3c:b0:9f:48:f6:89:ab:17:77:e3:60:28:d2:c7:20:
ab:33:39:37:02:59:07:e1:e9:90:49:4f:a2:a2:2a:
20:c9:d9:71:b2:9a:b0:f5:78:35:9b:36:0b:b6:91:
f2:b8:f2:a9:78:72:3e:93:6b:12:c2:ff:41:21:a6:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:87:13:55:75:EB:24:59:6E:8D:43:61:83:6A:34:12:51:C4:47
X509v3 Authority Key Identifier:
keyid:15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:84:2a:50:6e:2e:e0:a3:9c:39:ad:d6:eb:be:5e:49:61:
5d:8a:20:5c:d7:ee:f0:fa:5c:78:54:4a:de:70:33:a3:8c:99:
2d:13:8a:e4:9a:1d:40:fe:99:57:7a:d7:e7:fe:06:7a:d8:0b:
16:bf:75:60:6f:b9:60:e6:df:4c:21:6a:9a:b3:62:a4:84:03:
09:45:2f:fe:f4:67:71:62:21:60:c6:ce:d4:73:93:6d:fd:f1:
27:ef:69:8e:ce:24:8f:3a:50:15:5a:6d:25:7c:f5:7c:6f:ca:
fa:73:f5:f0:0c:b3:13:f6:57:74:23:bb:90:91:90:44:fc:66:
f1:72:16:d0:38:03:06:02:80:83:0c:5b:9a:1b:3f:08:21:78:
35:6b:e8:1b:a7:75:7d:15:f2:0f:48:20:36:ba:5a:1d:21:9b:
8b:79:d2:d7:b1:cc:64:5e:7b:32:52:a7:34:fd:67:66:8f:0a:
6c:aa:0d:f2:58:1e:a1:d0:3f:1f:9f:dd:11:72:fe:b0:e0:df:
c2:9b:fe:37:65:37:46:d0:f5:c7:9b:78:52:7a:33:ae:e1:52:
42:b9:ae:36:86:b9:28:89:cc:a8:e2:bd:df:46:b1:45:4a:17:
00:d6:d8:10:7b:26:75:aa:d9:ff:66:6c:0c:ce:c6:d1:2b:63:
4d:ca:2e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW/DsBsxaF5BK5vsIdqL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTJlN2UyYmViYTViY2Q4ZDQyOWQ5YmVlNTM3NmIwODEw
NDc1YWIwHhcNMjYwNzI0MDkwMTQzWhcNMjYwNzI1MDkwMTQzWjAzMTEwLwYDVQQD
Eyg5NThhODcxMzU1NzVlYjI0NTk2ZThkNDM2MTgzNmEzNDEyNTFjNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaZdUpSOAP9iUJ5T0lS5scelVXo9
Bmm7Vmg+GgsqjK8NnRvTSnIMeXBdtX95/EV904DUp+vizPBHdteEDKLSAfBGoNNw
jw63erU/IJyYTB96B2qCsy6Ts2yqLUpslCPyi5Hq/Nw4uqyjUU+r3SrZilUNl7PH
Raztkgz+KZm5afqT5dmA1BRnIRkoxLP0lNU0inthX2uSTXPNdbZIpeetwRtaoquh
YyG9tfyVcaOwIIGMuREWGiKVXKJWZMvueyTT0CQ8sJ9I9omrF3fjYCjSxyCrMzk3
AlkH4emQSU+ioiogydlxspqw9Xg1mzYLtpHyuPKpeHI+k2sSwv9BIaa+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWKhxNVdeskWW6NQ2GDajQSUcRHMB8GA1UdIwQY
MBaAFBWS5+K+ulvNjUKdm+5TdrCBBHWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt
MjlmZmM0NDQzOTAxLzEvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx
LzEvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHGEKlBu
LuCjnDmt1uu+XklhXYogXNfu8PpceFRK3nAzo4yZLROK5JodQP6ZV3rX5/4GetgL
Fr91YG+5YObfTCFqmrNipIQDCUUv/vRncWIhYMbO1HOTbf3xJ+9pjs4kjzpQFVpt
JXz1fG/K+nP18AyzE/ZXdCO7kJGQRPxm8XIW0DgDBgKAgwxbmhs/CCF4NWvoG6d1
fRXyD0ggNrpaHSGbi3nS17HMZF57MlKnNP1nZo8KbKoN8lgeodA/H5/dEXL+sODf
wpv+N2U3RtD1x5t4UnozruFSQrmuNoa5KInMqOK930axRUoXANbYEHsmdarZ/2Zs
DM7G0StjTcou+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:06 2026 by rpki-client