Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: AM2BTJJNbN3eZkFqIRywKWsYg+itTdLOiGEG7wWZEWI=
Subject key identifier: 2D:75:2D:88:5D:62:D5:26:0D:A4:EF:F5:08:AF:1A:84:8F:09:23:D3
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 01A0D64BAA3E3D6473B2BFB74D881C3156E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 19FF
Signing time: Fri 25 Sep 2026 02:01:18 +0000
Manifest this update: Fri 25 Sep 2026 02:01:18 +0000
Manifest next update: Sat 26 Sep 2026 02:01:18 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: UDh9wkHmJBX1bOCilDiicpXr9I2354F38Z433rv/4iY=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:aa:3e:3d:64:73:b2:bf:b7:4d:88:1c:31:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Sep 25 02:01:18 2026 GMT
Not After : Sep 26 02:01:18 2026 GMT
Subject: CN=2d752d885d62d5260da4eff508af1a848f0923d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:7f:0f:9a:ea:22:4f:74:b1:5f:ca:bd:e0:
ed:4f:e4:35:e7:02:b2:ba:4a:53:e9:39:70:1a:eb:
62:aa:06:f8:e0:8a:a4:54:f1:12:90:32:c5:bf:37:
49:ac:07:4d:26:87:ec:e4:6f:7b:a8:7e:5c:05:85:
77:97:84:5c:76:d4:81:5b:23:59:b0:09:85:77:e6:
5d:70:69:46:09:0c:df:1a:86:37:09:ec:f2:f8:a6:
02:3d:9c:80:60:b3:35:b5:94:e9:db:c2:ac:49:09:
d1:d2:26:8b:a7:f9:88:ce:d1:c2:e3:aa:13:45:fd:
77:98:9e:30:03:42:51:fe:4c:67:ca:45:5c:09:39:
e0:5b:73:de:56:49:aa:78:9b:31:12:a4:1a:6e:85:
a6:c0:68:53:ce:57:46:2b:45:54:bc:50:c5:bc:5e:
69:41:69:a7:72:5d:1d:b0:c0:f7:34:f8:54:45:3d:
68:67:cc:48:9c:96:ca:d0:f2:69:43:21:b5:c3:ca:
75:b5:69:fb:5a:df:bd:c3:04:ab:00:9d:2a:7d:57:
ce:5a:f7:67:4b:31:fb:fa:c8:7c:60:80:fc:d9:3f:
42:58:fa:7f:d5:aa:36:03:f5:ed:de:66:e9:6a:c4:
38:b2:e0:fe:57:fa:fa:a7:8a:24:b0:25:6e:c3:12:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:2D:88:5D:62:D5:26:0D:A4:EF:F5:08:AF:1A:84:8F:09:23:D3
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:62:f0:b6:29:65:42:0c:89:96:8a:54:c2:95:d1:f4:38:
ff:cf:73:4b:dd:97:91:6e:b8:dc:2a:76:65:6c:65:05:35:98:
f5:e1:8d:1b:b7:5a:11:de:d1:21:70:ca:98:1a:5d:1f:3e:71:
e7:86:0a:37:7f:10:49:b0:8e:04:bf:67:5a:02:81:22:e5:73:
69:52:e6:bb:35:ab:d7:ec:86:9e:f5:5b:cd:d8:33:a6:8d:cf:
78:ed:33:60:34:cb:e2:05:27:ed:0d:b2:cf:0d:53:12:bb:56:
2d:64:7a:96:4d:25:69:64:b2:11:b4:c7:a5:ce:8a:43:b6:b6:
3e:b8:d0:e5:23:1b:cb:fb:19:92:90:a0:1a:21:02:9c:c5:5b:
75:37:3d:64:5b:69:2c:7e:bc:6a:6d:3d:22:21:f5:c0:67:b6:
51:c1:05:89:54:6b:01:35:41:f2:09:4b:72:02:32:b1:ba:5f:
86:65:c6:f4:70:b8:41:cd:5b:91:4c:49:73:7f:cc:77:71:5b:
b3:77:79:3a:27:48:a0:56:9d:61:ea:b3:4d:94:fe:0c:a6:cd:
e5:47:40:6b:c6:c7:a1:2b:0f:b0:e0:a5:dd:77:60:8a:20:96:
f6:bc:a5:7d:87:42:b1:25:19:39:b1:8d:38:4f:7d:d4:a2:05:
52:45:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:34:46 2026 by rpki-client