Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: 2lHUVgS7URIy7Si0VRWo/qQChlij5YlXJMlePc4zMso=
Subject key identifier: BD:14:F9:B2:E8:A5:74:EF:FF:BD:83:49:B8:6D:96:CE:96:CC:BF:76
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 019D2703AB9EC42651F8DF89D1B86922E71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 0B58
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: RpVLcsUoBe+5yNRRmMx+n5w8eZAWVmSjmvYPYF4CXyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:9e:c4:26:51:f8:df:89:d1:b8:69:22:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=bd14f9b2e8a574efffbd8349b86d96ce96ccbf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:f2:8c:d8:b8:ca:68:f9:ff:56:71:e8:90:
2e:2c:4e:72:6b:72:21:bc:67:fe:13:94:60:c5:87:
08:86:a0:90:35:43:0a:c4:f8:fa:09:03:08:84:12:
b8:f5:19:31:64:08:ae:83:c9:ff:23:6b:25:34:5c:
f2:95:17:41:7a:0a:e3:02:fe:1a:2f:64:2f:3b:87:
f6:dc:05:22:01:47:6f:d4:af:9a:79:e3:a1:08:b6:
ea:ff:06:10:a7:ee:e0:45:71:af:3c:23:5e:ee:57:
09:0e:9e:27:3e:e9:44:78:04:0f:4c:15:cb:82:2c:
f7:c5:2d:1b:fd:ed:1a:87:c0:1d:58:3f:e0:fa:ad:
8b:1b:d4:8a:ad:62:e3:33:7f:80:68:f7:0e:31:bd:
f3:48:d7:95:c5:fc:7d:10:8e:05:15:a3:f8:86:d2:
19:7a:f2:5b:77:f4:78:f8:7d:ff:7f:6c:26:f0:fc:
7d:39:af:10:67:87:66:ee:e8:9b:66:5d:9c:7a:5c:
60:ca:82:73:ec:df:fc:71:9f:ac:b1:db:1f:3a:0d:
1e:80:91:09:c3:91:5b:47:c0:5b:7f:f2:4c:23:d9:
7b:a0:b6:3f:2e:97:b6:79:7b:0d:ce:52:b6:ab:4e:
14:fc:c7:e8:d7:b1:5b:2f:9a:5c:e7:70:b8:56:7b:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:F9:B2:E8:A5:74:EF:FF:BD:83:49:B8:6D:96:CE:96:CC:BF:76
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:ad:b1:9a:dd:8f:29:f1:19:97:b5:4d:ab:44:52:bb:d3:
39:e5:f7:3b:4c:b5:6d:9b:3a:7f:8e:7f:ef:53:b2:4e:0d:eb:
95:e1:2d:24:a3:e0:19:ad:0c:ae:43:8f:5e:ad:c9:ff:d8:d7:
86:58:79:21:10:36:c2:2d:ef:a6:9b:0f:b5:c3:a1:be:4b:56:
c1:60:7d:0f:9b:40:0c:f0:77:c7:a4:7f:26:60:e6:b2:cc:e0:
e9:ad:fa:2f:d4:99:da:f4:94:de:f9:09:50:76:9c:16:b3:c4:
45:eb:6a:0f:4e:12:54:93:09:41:04:06:f6:00:1a:35:63:25:
69:3f:60:9e:8e:d4:95:49:94:02:60:47:fe:55:68:2f:fb:74:
5e:77:8c:e3:2f:c0:46:ef:eb:91:e1:14:c1:f5:f0:4f:88:ce:
07:32:1e:00:07:e6:1b:39:b3:31:b9:94:15:11:e7:a2:0c:f8:
df:fc:3f:a3:d4:f5:bb:80:6c:c8:9e:ba:74:12:cf:02:a5:93:
1a:7e:2e:fd:4d:07:a4:d9:c5:43:47:73:0e:8a:92:68:e6:a2:
aa:e4:c2:ce:1e:96:c2:37:c2:c0:9c:1a:61:52:81:56:3a:fc:
a0:7f:af:b2:dd:f1:55:45:ee:15:f0:72:18:22:46:ae:3f:4a:
fa:22:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:21 2026 by rpki-client