Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: YMXHRbWykhmFuf2zT6PuciMwx+fY8n6CMxZnXIke79w=
Subject key identifier: 70:22:63:A4:40:66:09:E6:CB:96:55:D6:C9:63:36:96:1C:39:F5:C1
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019D273B3EABA0C8282DD338694C085678EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 1173
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: TRRJtmFus+lUMRfFVENmnHCsBKX7EIN1YgXaBfDwcn4=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3e:ab:a0:c8:28:2d:d3:38:69:4c:08:56:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=702263a4406609e6cb9655d6c96336961c39f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:58:3c:34:d9:f5:46:5a:d0:65:c2:b7:5d:
8e:23:ad:3d:d0:52:f3:89:0e:2a:6a:61:a0:8e:a7:
b7:39:b5:ae:19:bf:dc:89:2a:f5:55:43:40:8c:dd:
5d:22:4c:32:8f:2c:67:0e:f8:a7:43:08:25:2c:1b:
ce:ea:9d:36:97:5b:96:5a:30:f5:11:ce:75:1b:7e:
1c:73:f1:9b:55:bd:69:66:37:85:26:e9:c9:a6:72:
80:21:0d:78:73:2d:34:d3:b8:0a:37:dd:4b:ac:0d:
57:e5:60:ec:18:ae:11:14:47:c3:01:e6:4a:05:3d:
35:fe:f8:41:0a:1a:42:28:97:70:f6:ca:5a:34:b0:
e3:b0:4e:21:29:fa:b8:90:60:d7:b8:ca:6a:d1:db:
ab:f3:23:b3:76:ae:cb:d8:b0:7c:88:95:71:08:73:
8a:db:fa:9f:3d:85:ba:9a:ab:bc:6b:68:fd:c9:20:
68:2e:6e:2a:13:b7:9f:41:25:3c:ef:ca:d1:18:01:
5c:34:5b:7e:03:67:8c:a2:52:14:b8:03:b4:c7:01:
20:27:25:1e:b5:90:d7:13:bf:0a:9f:89:d7:60:9c:
87:17:e7:0f:65:cb:fd:d8:30:e2:3c:4d:54:6d:2d:
ab:61:22:96:1e:9c:b7:0d:76:55:be:ab:60:cb:7d:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:63:A4:40:66:09:E6:CB:96:55:D6:C9:63:36:96:1C:39:F5:C1
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:19:51:ee:f5:9f:01:19:73:6f:34:5f:d3:96:af:b5:5a:
6b:1c:1b:a7:36:0b:d1:5c:b2:9b:39:91:89:72:d9:89:b5:9d:
8a:fe:cf:43:15:5d:39:df:6e:92:b4:0b:86:25:0c:66:b2:f7:
e8:7b:f1:36:93:ae:64:d5:d3:bd:8f:29:36:8d:91:cc:dd:5a:
71:86:fa:0a:9c:9b:0a:f5:6e:74:b9:3f:d0:41:ff:b7:ab:3b:
6e:a4:bc:76:d3:ac:65:6d:cb:b7:f3:cd:50:36:8b:2c:ab:3d:
bf:ee:78:70:6f:46:23:33:3a:37:21:b9:02:25:3a:02:99:e1:
e8:5f:92:46:b0:0b:bd:fc:37:e2:ee:fb:a0:6d:d1:1c:82:13:
dd:98:c5:39:6f:8a:f5:e5:49:d1:92:85:4a:68:93:a5:03:28:
a5:11:12:18:8c:8c:31:cc:cc:a4:e2:20:aa:82:8f:e7:d9:8f:
fa:af:2b:df:09:9e:b4:48:e1:b8:14:38:ae:c6:67:aa:2a:36:
e3:78:bf:62:4d:08:5f:1c:38:54:6d:ad:10:f2:1b:fe:db:91:
03:e3:aa:04:1f:3e:86:0d:43:7d:ef:f8:47:a2:a7:ee:d8:07:
7f:ad:46:0c:99:52:61:72:47:6b:22:86:3e:39:6e:52:29:40:
d2:92:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:54 2026 by rpki-client