Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: 792+JPi9RzpB/R7dr2pm3GRdWGJhyq9wj65yHEWrgSQ=
Subject key identifier: 2C:CB:34:0F:88:51:9C:4C:CB:B1:C3:EF:C9:9C:56:C0:A5:FE:91:B3
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019F951246FEB0541BD3BB8E2875D1BFBA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 12B5
Signing time: Fri 24 Jul 2026 17:00:30 +0000
Manifest this update: Fri 24 Jul 2026 17:00:30 +0000
Manifest next update: Sat 25 Jul 2026 17:00:30 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: hxv8fkxpjLV6TThX0S0lHnuOjjtNJq5X6LrKZEPxVa0=)
2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:46:fe:b0:54:1b:d3:bb:8e:28:75:d1:bf:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jul 24 17:00:30 2026 GMT
Not After : Jul 25 17:00:30 2026 GMT
Subject: CN=2ccb340f88519c4ccbb1c3efc99c56c0a5fe91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:3e:64:ca:ea:b0:a3:d9:07:cc:50:b7:30:
a5:3d:c7:32:ec:76:a8:98:cf:c5:36:4e:55:15:e4:
bf:ab:7f:b6:2c:fa:20:36:44:e1:89:ce:d7:3d:e7:
0a:9e:f2:b4:2a:2e:a4:44:ae:6c:73:c1:d1:2c:b4:
11:dc:1e:8f:d6:48:8c:ad:32:1d:b4:fa:4a:71:57:
15:33:71:b0:24:8b:69:17:dc:fc:56:23:7d:6a:3e:
b6:50:4c:ae:b7:3a:a8:1f:3e:a1:9b:a4:a4:ca:fc:
5a:5a:52:a0:23:1d:27:6f:cd:0c:54:0f:66:6f:1e:
99:3c:7c:65:fc:da:c0:23:3d:d7:77:3c:33:23:57:
85:1c:c7:ad:c1:bd:34:64:cf:8d:42:bb:26:d4:66:
1a:e4:c5:71:2c:dd:a8:bb:2e:37:e1:6a:2d:fd:bd:
8e:56:bc:c5:88:79:fd:25:d6:bb:7f:10:13:32:a6:
37:16:36:6a:78:c4:0d:d6:af:57:00:0e:a4:c8:1e:
60:a5:a2:1c:96:b9:3a:9f:a9:7e:ae:11:be:8d:e8:
71:e5:f6:d1:c4:8d:31:5c:13:a8:90:4c:ce:41:14:
08:dd:a7:12:d8:e8:db:1c:b1:f3:2b:69:ed:73:6a:
b6:13:49:c1:28:f2:95:ea:51:be:c4:b9:c7:06:64:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:34:0F:88:51:9C:4C:CB:B1:C3:EF:C9:9C:56:C0:A5:FE:91:B3
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3c:90:c3:cc:10:e1:54:50:1d:6c:b8:a0:4b:cd:0e:59:5f:
bf:10:cf:60:b2:e1:fc:c2:3a:f9:11:cc:24:8b:fb:41:dc:49:
e6:d7:28:4f:38:fc:55:0c:71:93:46:be:21:2a:ba:84:a6:b4:
47:6d:77:ee:ad:ef:45:da:cc:fe:a5:16:90:2f:6c:53:2d:36:
be:0d:8d:24:01:6a:1e:89:b6:82:75:06:ce:0f:80:bb:69:a1:
29:cb:0a:39:dd:93:fc:df:e0:17:f7:7c:f0:1c:22:a0:d1:aa:
c2:a7:6b:fa:25:ed:3b:30:04:c3:ba:66:a1:9b:d4:bd:c6:48:
c9:90:61:b1:96:3b:73:f6:60:be:70:a9:20:08:5a:37:c2:c3:
b5:cc:05:3e:31:06:02:ea:ef:a5:78:13:9f:86:31:01:c5:ba:
e7:c8:5a:d3:fe:92:79:54:0e:8b:66:35:93:1e:f9:2b:07:f7:
23:e9:e1:33:3e:f6:80:6f:58:87:29:70:bd:0d:38:ff:e5:80:
a1:77:57:95:33:a0:a5:3f:82:ce:26:88:ac:15:2c:be:7c:9a:
e8:22:6b:6c:63:79:bc:16:5f:d2:28:b5:c7:46:b8:da:1d:98:
81:2a:1a:7c:19:fc:09:60:d1:1d:ba:8a:b2:25:57:47:11:2e:
36:34:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:26 2026 by rpki-client