Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: PNNmxA1RULsa/M0IDr9DFlxtn+VJfADpnqr/QFxJTqk=
Subject key identifier: E0:A1:43:80:FC:05:85:E2:7D:A8:BB:75:53:02:20:82:8E:11:94:C5
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019F93C88E45BF8BABFD70370477794C932B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 11:00:22 +0000
Manifest this update: Fri 24 Jul 2026 11:00:22 +0000
Manifest next update: Sat 25 Jul 2026 11:00:22 +0000
Files and hashes: 1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: gfydHIXeqQXkUPqOFsbzmUZGAvLNC3w86wY175aN/yU=)
3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8e:45:bf:8b:ab:fd:70:37:04:77:79:4c:93:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jul 24 11:00:22 2026 GMT
Not After : Jul 25 11:00:22 2026 GMT
Subject: CN=e0a14380fc0585e27da8bb75530220828e1194c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:3e:f8:b8:e9:bc:84:7b:7c:cb:f2:d4:ed:
92:12:95:e1:7b:e4:53:f3:df:e5:fb:68:93:2d:06:
90:61:f9:4d:37:28:5a:59:01:6d:20:fb:24:94:9d:
55:95:5e:94:87:57:1b:a3:e3:0a:10:06:08:41:b3:
d3:ba:7d:8c:aa:16:0f:27:fe:e5:43:3a:fa:cc:68:
86:09:19:0c:c6:b8:60:dd:df:4d:5c:09:14:9f:0c:
b3:ac:4b:98:26:08:d1:10:29:27:04:e0:b0:ad:f1:
6c:52:6a:ff:01:0c:a3:96:1d:a0:c9:79:b8:51:83:
7e:2b:72:29:00:e9:59:73:c5:65:d2:81:e1:10:39:
f8:44:db:1f:dd:fc:fb:55:ab:25:df:5b:a6:97:8c:
33:64:da:3b:72:74:90:86:a4:5c:6e:da:d8:b7:22:
bb:37:12:0a:6c:c2:e6:2d:f6:46:11:2c:ac:27:df:
e1:e9:db:02:f7:d9:d4:bb:24:89:e3:0a:7d:5f:84:
a8:ec:6f:db:e0:8d:44:da:30:02:b8:c0:e9:b8:24:
ca:74:e5:a9:e1:9b:18:9d:c4:35:a6:b4:0a:75:5f:
39:28:eb:1d:dc:50:ba:26:87:da:a5:86:b5:ba:d3:
16:54:2b:6a:e6:0d:94:07:3c:2d:a4:29:e3:f0:6e:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:43:80:FC:05:85:E2:7D:A8:BB:75:53:02:20:82:8E:11:94:C5
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5d:f9:ab:f7:60:94:a4:33:45:68:77:09:ab:aa:0c:d6:57:
41:e8:34:aa:75:dc:40:58:8d:ea:f4:ed:aa:6e:2d:76:66:8d:
55:2c:42:74:b6:bc:ab:1e:89:f1:8a:3e:05:68:1e:9a:36:a8:
e9:84:bb:fd:2e:f3:8d:29:3c:3a:ee:ac:b6:1f:88:88:b1:ed:
b6:fb:b3:ba:a0:86:14:77:15:54:bd:36:f7:79:72:d1:de:41:
2d:44:43:e2:e8:9e:c8:53:1e:ee:65:07:62:68:3b:d0:83:8f:
0f:08:ac:32:e7:ea:3f:b3:ef:64:94:16:e4:7a:9e:a1:34:a3:
34:35:59:bf:56:57:d2:8e:fb:c7:72:dd:83:ff:f9:3d:f8:c5:
2b:84:c5:83:92:be:86:f0:2b:f3:5c:de:43:3b:a0:b3:c4:d2:
b5:1d:5a:8d:a2:9d:ff:c1:0b:11:53:f4:83:f1:53:c7:c9:d8:
aa:30:fe:9b:4e:6c:e5:8d:a7:41:e9:8b:b3:ef:7b:5d:ad:9b:
50:63:e1:5a:10:a4:d6:7d:bc:6e:be:f3:2e:1e:01:cc:ff:b6:
2d:b2:73:21:7e:a7:5b:68:4a:86:7d:dd:c1:81:8b:24:bc:c9:
26:4f:85:3c:0b:d9:4c:a0:78:e4:56:f5:78:88:e9:27:ff:9b:
07:de:e0:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyI5Fv4ur/XA3BHd5TJMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzRkYjVjNDFlNzExYjczZDhmMjlkYWMxMmU5YjgzNjRj
ZDFmYmQwHhcNMjYwNzI0MTEwMDIyWhcNMjYwNzI1MTEwMDIyWjAzMTEwLwYDVQQD
EyhlMGExNDM4MGZjMDU4NWUyN2RhOGJiNzU1MzAyMjA4MjhlMTE5NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVA++LjpvIR7fMvy1O2SEpXhe+RT
89/l+2iTLQaQYflNNyhaWQFtIPsklJ1VlV6Uh1cbo+MKEAYIQbPTun2MqhYPJ/7l
Qzr6zGiGCRkMxrhg3d9NXAkUnwyzrEuYJgjRECknBOCwrfFsUmr/AQyjlh2gyXm4
UYN+K3IpAOlZc8Vl0oHhEDn4RNsf3fz7Vasl31uml4wzZNo7cnSQhqRcbtrYtyK7
NxIKbMLmLfZGESysJ9/h6dsC99nUuySJ4wp9X4So7G/b4I1E2jACuMDpuCTKdOWp
4ZsYncQ1prQKdV85KOsd3FC6JofapYa1utMWVCtq5g2UBzwtpCnj8G7VjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOChQ4D8BYXifai7dVMCIIKOEZTFMB8GA1UdIwQY
MBaAFBc021xB5xG3PY8p2sEum4NkzR+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYt
NWYyNjUwYzkwMTJkLzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYtNWYyNjUwYzkwMTJk
LzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal35q/dg
lKQzRWh3CauqDNZXQeg0qnXcQFiN6vTtqm4tdmaNVSxCdLa8qx6J8Yo+BWgemjao
6YS7/S7zjSk8Ou6sth+IiLHttvuzuqCGFHcVVL0293ly0d5BLURD4uieyFMe7mUH
Ymg70IOPDwisMufqP7PvZJQW5HqeoTSjNDVZv1ZX0o77x3Ldg//5PfjFK4TFg5K+
hvAr81zeQzugs8TStR1ajaKd/8ELEVP0g/FTx8nYqjD+m05s5Y2nQemLs+97Xa2b
UGPhWhCk1n28br7zLh4BzP+2LbJzIX6nW2hKhn3dwYGLJLzJJk+FPAvZTKB45Fb1
eIjpJ/+bB97gvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:58 2026 by rpki-client