Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: cGfuPxlbk+zfyTyme9dFAQLNlCvT0EmxG28l74HJmF4=
Subject key identifier: 0E:A9:E3:B6:6F:0E:80:E9:43:E9:73:6F:D7:D5:13:D0:D7:0D:EA:10
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019E1E6C08D9A3B72EA73AEFDB8FF72B66C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0995
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: NkWOKyV48cyQ0/SEuiDTLVPguCDdK54gfUYPgMxn7pA=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:08:d9:a3:b7:2e:a7:3a:ef:db:8f:f7:2b:66:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=0ea9e3b66f0e80e943e9736fd7d513d0d70dea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:11:6a:8a:e3:2d:27:50:89:2e:62:7f:b6:
ab:82:9d:b2:aa:35:d8:ea:d8:6d:3b:37:e5:f3:58:
2e:4c:ad:7f:46:87:4b:d0:59:e6:e2:9c:e5:be:19:
2c:e9:32:e9:32:23:17:ae:a9:0f:1a:03:38:60:6b:
e5:e2:a5:5d:db:c2:78:46:26:a3:b7:90:31:10:a6:
cd:11:78:25:18:be:32:8c:0d:95:b0:0e:7d:7d:79:
c1:f5:7b:13:be:d6:1c:26:d4:5f:e5:3e:41:c6:f3:
88:d7:d2:e7:c0:74:92:20:6a:25:14:47:fa:d3:6f:
a0:28:41:8d:bf:fe:7b:f1:83:38:d1:e8:1f:ce:0d:
ac:b1:01:fd:9b:75:5c:8c:73:82:0b:a1:11:1f:30:
c7:ff:37:ef:11:53:5d:84:07:74:14:f5:09:be:53:
39:2a:f2:94:24:96:dd:e4:83:86:72:5b:e2:f4:fe:
9d:44:a1:1e:18:82:b3:b8:46:56:00:84:b2:af:86:
79:98:0c:74:ab:24:33:d9:b5:c5:be:bf:ca:07:cc:
1c:70:bf:81:ce:9e:e7:8e:fe:06:60:de:2e:ca:72:
f8:5a:ce:c5:ac:61:91:f6:73:88:64:69:45:4f:e8:
40:4c:c8:dd:45:72:ed:3e:74:91:41:16:10:ee:11:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:E3:B6:6F:0E:80:E9:43:E9:73:6F:D7:D5:13:D0:D7:0D:EA:10
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:9c:da:0a:9f:9b:6a:45:28:6a:6d:a8:33:cc:b0:ec:70:
d7:15:2c:39:ec:cb:78:82:d5:3a:5e:30:b7:00:f1:c5:0d:05:
4d:ad:66:7b:d7:a0:95:73:87:39:55:8c:e8:d4:27:d6:ef:a8:
0a:3d:3a:b7:1a:2d:20:97:3d:bf:d1:dd:02:51:e1:fa:4c:79:
ba:61:49:4e:7e:5b:9a:8b:71:91:7b:c6:b1:44:bb:a0:8c:2e:
a5:3a:f3:ea:02:37:01:f0:82:a6:8c:75:37:dd:0a:57:15:00:
15:4f:e1:ae:c4:2d:1d:cb:40:b9:b9:ff:9e:3e:c3:74:7f:51:
b3:46:6f:13:6e:a7:02:62:cd:f0:9d:ce:ca:59:92:b7:ee:cd:
0d:c2:56:6c:09:10:08:96:03:31:b5:64:2e:c7:28:2f:78:eb:
c4:4c:01:93:a8:a2:db:fd:5e:bf:d5:23:9f:fb:c8:dd:30:3a:
df:71:63:82:c9:e9:00:bb:e0:bb:86:29:7f:0f:dd:5a:c7:67:
84:f7:f2:82:da:d6:1c:2f:9b:60:d9:08:a5:2f:5d:26:8a:67:
65:88:0b:7d:8f:5e:e4:eb:bb:e8:4a:ec:37:a7:43:67:9d:52:
0f:b8:aa:2b:8a:a2:df:1c:c3:a0:f3:43:5b:14:74:41:6c:ad:
ee:b3:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:44 2026 by rpki-client