Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: v+tMuSvdkCGcDBsgQv10qKxakHOYQEb6qBVBkz9H+Kg=
Subject key identifier: B8:8B:42:DA:BD:F8:5C:81:6E:AB:09:16:2A:C4:EC:BB:9D:6B:88:35
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 01A0D983ADF3D228AFE7270E34329C5E8577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0AFF
Signing time: Fri 25 Sep 2026 17:01:20 +0000
Manifest this update: Fri 25 Sep 2026 17:01:20 +0000
Manifest next update: Sat 26 Sep 2026 17:01:20 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: H2m934aFx0sUplOJD2AMnac2XT486nhbLPUYcVrULPU=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:ad:f3:d2:28:af:e7:27:0e:34:32:9c:5e:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Sep 25 17:01:20 2026 GMT
Not After : Sep 26 17:01:20 2026 GMT
Subject: CN=b88b42dabdf85c816eab09162ac4ecbb9d6b8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:47:04:02:50:eb:e7:33:91:0f:ec:71:d4:
79:c6:5d:f6:d9:ed:2e:db:98:29:62:50:dc:c3:32:
17:4e:97:f3:51:9e:3b:6e:3e:f5:c3:f3:90:03:3b:
20:f2:49:40:28:a1:07:f9:4d:ec:d4:c6:42:6d:f2:
7a:3e:e3:df:c8:00:44:a9:6b:ee:2a:58:98:f7:10:
49:a5:c6:95:70:39:32:41:e0:c0:2e:32:96:99:e2:
c2:c9:f7:98:3b:18:b5:3d:ce:fe:72:0a:77:e1:22:
1e:aa:d2:35:d3:39:59:c6:1d:9d:69:99:2e:6f:d8:
d7:91:10:bd:8e:1d:5f:65:3e:61:4d:82:86:41:87:
2f:79:54:85:fe:4e:df:a6:45:b2:8a:c6:1e:f4:c0:
44:1b:11:ae:17:8d:f9:a1:3f:34:bf:e7:d1:5d:11:
07:a2:ae:2e:6f:43:23:cf:b5:78:1e:68:0b:97:9f:
6f:e5:75:1e:77:09:31:19:73:41:bd:ff:5e:66:d1:
26:23:ed:3a:62:83:02:04:b2:ea:ac:34:70:8b:16:
60:ae:b3:26:2a:e9:7c:e5:52:06:50:de:6b:4a:f6:
6b:6c:c7:3c:e0:f4:82:98:85:bd:73:b3:ff:08:76:
10:6a:69:1e:4e:7f:8c:fa:46:8d:c4:f9:06:c6:a7:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:42:DA:BD:F8:5C:81:6E:AB:09:16:2A:C4:EC:BB:9D:6B:88:35
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:a1:cb:eb:94:d2:44:cf:01:27:08:95:e9:95:b0:26:f7:
f7:78:d1:40:26:08:b0:26:e8:99:00:87:b5:03:4d:d5:e0:5f:
5b:ab:2a:b3:fe:8c:00:c9:d0:09:f4:ff:b7:61:a4:cd:2a:ad:
6d:cf:a3:e7:4d:07:f3:f2:1a:ef:86:8f:44:ba:b4:c3:a2:e6:
98:88:85:6e:c0:7f:9b:2c:09:a7:39:09:b5:a2:9a:90:a0:4e:
c4:be:01:7c:ef:ea:d0:fc:22:4e:e5:ab:86:2f:80:a1:a5:dd:
bd:17:e4:cc:d0:c0:a1:a1:53:57:7a:a8:db:36:2b:14:46:e0:
d2:5f:e7:ff:94:13:83:43:f0:eb:5a:57:4c:16:af:34:99:57:
98:c9:57:a0:76:86:dd:00:d4:79:de:f3:56:b6:4c:ce:44:44:
e7:5a:a2:9f:8d:44:df:eb:d6:45:80:20:d4:fe:05:21:84:43:
8d:8c:f1:60:b7:2e:1d:21:08:eb:bf:eb:6c:99:6f:1c:2c:a7:
cd:80:b3:72:1d:0b:2d:f2:f7:90:f0:16:10:2d:4e:df:da:2c:
7e:b3:9c:81:d0:99:26:d4:8e:86:86:5d:36:e9:dd:af:c0:7b:
a4:07:62:99:1d:80:cc:6d:10:6f:6b:7c:97:bc:dc:41:0b:7b:
ee:2e:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:20 2026 by rpki-client