
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: SF/lGsVKD0Gn+ynLhXaqU/MuFZ7BEA1duqNUxSNhSxQ=
Subject key identifier: 8C:BB:D7:4A:2B:1B:1C:CC:AC:7C:0B:EA:41:9D:4A:73:87:A1:FE:11
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019D273B11006DF53BD4F72F9DA3C1B93FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0915
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (hash: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs=)
2: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: BjTg2IfluHZnfS4DyCRiOVFDdRgap7L9Nt3XIauFQsk=)
3: ZDjYliWD0oQH__BfRtAhVecXudc.roa (hash: EqrDJr+rXgFnW5BPHzLM4MtDhMgQ7CjiVJSQnOFIC3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:11:00:6d:f5:3b:d4:f7:2f:9d:a3:c1:b9:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=8cbbd74a2b1b1cccac7c0bea419d4a7387a1fe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:2f:00:61:9a:8c:97:6c:8f:a7:8e:3c:fb:
3c:d5:30:44:3e:82:2a:66:4f:50:81:91:49:43:46:
00:bd:f6:a5:f5:7a:11:ab:2f:ff:97:04:82:f1:54:
4f:4f:2d:8f:f5:e0:d9:3d:cc:dc:f4:c2:e8:68:53:
0d:1b:8e:62:5d:a6:07:1f:10:54:54:33:14:f2:fc:
7c:d8:94:80:27:a8:77:2e:99:c7:0b:c2:a8:a4:8e:
54:71:5d:a6:5b:c6:83:5e:a4:fb:7e:57:1e:90:db:
35:6f:ff:95:f4:f6:e4:79:fc:65:3b:21:0f:45:90:
19:9b:3c:f2:af:2f:c6:2b:aa:54:1e:91:65:24:f9:
04:6c:d6:ae:5f:ba:70:35:d5:88:38:ed:a6:e3:38:
a8:9b:a7:b8:a2:17:1f:06:57:d0:7b:25:86:b3:e7:
73:4b:94:a5:93:54:96:13:7c:19:5b:ef:80:6d:af:
cf:f9:78:09:50:af:31:24:54:fd:b3:7a:64:46:6f:
39:67:cb:04:1f:0a:f1:b5:c0:f3:b7:2a:7d:23:c6:
b6:98:66:e7:fb:01:25:ca:77:48:6a:5b:fa:c4:de:
cf:46:59:ee:62:65:a7:e9:d7:34:fc:c2:3a:03:94:
b4:67:22:a3:83:68:7a:3c:b2:ed:ff:9a:e6:4d:3b:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:D7:4A:2B:1B:1C:CC:AC:7C:0B:EA:41:9D:4A:73:87:A1:FE:11
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:82:d6:5d:00:cf:a9:87:66:b6:95:4e:48:e6:64:21:fc:
d7:67:5e:d7:77:6b:09:88:29:56:ba:d9:e0:00:89:14:b5:83:
fc:13:98:a2:46:13:43:41:00:89:9b:82:48:7d:46:db:97:32:
f0:85:05:da:84:8c:f7:6e:0d:c7:ff:fe:35:1d:5b:ac:a6:77:
72:90:d4:c9:5d:62:98:f3:d4:f2:98:e1:a3:1b:37:28:32:04:
27:44:83:87:68:41:d2:6c:0a:15:75:42:b1:37:0f:20:69:75:
26:fb:8d:ca:51:c0:b9:82:a1:ef:38:63:07:00:ad:43:3e:09:
b1:9e:82:d0:96:4d:8f:1a:8f:42:17:3f:00:6b:e9:a8:aa:fc:
4b:48:ea:fe:28:4d:2b:04:f2:49:4d:e0:09:da:3c:7d:8c:9b:
ea:ac:21:3e:3c:53:ef:42:d1:32:71:64:c8:d6:63:d4:d0:2c:
2d:1d:6f:c2:d6:aa:76:e7:f6:ae:03:46:57:0d:6f:6f:ca:d2:
6c:ae:e2:e2:7f:7c:ca:ea:36:ec:4e:3c:10:37:cb:38:50:a4:
5b:60:2e:86:ca:2c:db:94:64:02:5e:55:54:a6:2f:f4:09:44:
d3:23:f5:d8:36:49:1c:4b:46:d9:f4:8e:fb:e2:11:56:d3:3b:
0e:7c:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:31 2026 by rpki-client