Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: /Cea2VRlFqNiVKtvpqg17akdVXMFVco1ZPfaVngyVSA=
Subject key identifier: F0:89:B4:F6:4A:7C:A9:98:A7:A9:6A:64:D2:7C:BD:1C:98:B8:68:5E
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019E1F117FBB51FA05BD249EFAE0507F85F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1897
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: gmDUcoh8jhtJizP9+FIyNRymYdA5b2UDj51Nqz2sLys=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7f:bb:51:fa:05:bd:24:9e:fa:e0:50:7f:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=f089b4f64a7ca998a7a96a64d27cbd1c98b8685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:81:3d:86:bb:76:9c:8d:37:0d:e4:21:b3:
8a:ba:5b:b0:ab:d0:7f:8e:be:eb:8b:ca:bf:57:6d:
cc:59:ce:43:69:b3:3f:75:dd:d4:67:4f:bf:fb:fb:
ce:80:a8:e7:2a:1f:5a:77:63:26:af:34:f8:87:12:
f7:07:31:66:b3:22:1f:39:65:3a:28:17:24:3a:f6:
f1:8e:b8:ca:09:bd:e3:3e:9b:e7:c0:2b:e6:b9:79:
3b:1c:8b:da:c3:69:f7:f0:d2:f3:6d:1b:9a:90:85:
3b:45:93:27:e9:4e:ce:6f:80:98:cf:4f:16:86:88:
8c:c3:58:a0:d0:39:57:15:05:f0:db:22:f5:26:58:
d0:de:ac:c2:80:ec:56:ae:d6:60:dd:4a:f7:9b:7e:
20:21:d5:77:d8:9f:7c:1a:98:f5:3e:af:02:4b:bf:
d2:ef:a6:39:ca:ce:35:84:4e:cf:4f:1c:e6:e0:fb:
bd:40:52:94:89:33:f4:73:b4:8f:35:ff:08:51:8f:
47:a6:7a:2c:ec:4c:84:64:9c:61:b5:81:de:b7:6e:
8a:ed:66:58:a6:1f:1c:e6:e8:be:bf:df:94:ae:9e:
ce:a3:b5:35:8f:2d:7d:b3:68:22:d9:98:e3:3d:54:
65:47:17:9c:3c:8f:18:7d:4d:75:be:0c:6e:67:e7:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:B4:F6:4A:7C:A9:98:A7:A9:6A:64:D2:7C:BD:1C:98:B8:68:5E
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:6a:53:79:0a:57:13:cf:ec:92:fa:73:ca:d9:34:ab:5c:
b6:8a:66:f4:77:c4:ca:c6:96:35:53:b6:55:bb:66:d9:36:5e:
62:c0:97:81:23:d6:18:f7:8d:f3:17:ae:a5:e0:d0:1d:9f:d0:
a0:99:14:89:f4:4a:ec:0b:6d:0e:eb:66:15:84:ca:cd:1d:c7:
b5:f0:fe:8c:9a:45:67:c0:df:be:ae:21:96:77:59:a5:46:bc:
0f:37:c8:38:b6:1d:07:9f:d4:aa:3c:14:c9:e7:aa:0f:e9:ab:
91:c5:9c:15:dc:e8:ab:9d:b0:d6:3c:99:12:9e:aa:9f:16:aa:
3f:bf:5c:e0:71:bf:e3:6e:c5:c9:19:88:8f:4f:b5:81:ed:b7:
5c:f1:25:6f:a4:7b:93:f9:7e:09:c0:4e:79:0f:d6:b3:2d:ed:
88:ac:86:44:ac:50:f8:a8:a6:c5:f3:ef:be:e9:43:1a:25:87:
35:86:c7:2c:b1:31:8a:9a:25:f7:17:13:c3:e4:fa:63:47:67:
65:bf:bb:db:05:f1:8a:76:c5:fc:6e:84:ee:53:04:ac:7b:50:
41:1b:d0:13:09:ae:d0:00:16:a2:ff:16:a1:dd:05:17:61:6f:
ab:55:40:74:8f:2d:4d:25:af:f2:6e:06:7c:8b:ca:38:a7:c7:
f8:15:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:39:35 2026 by rpki-client