Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File: frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier: PAvfChBmM7Ma1qXvhfy0L8/YEQ9D1+c9mxG0ejDK9AQ=
Subject key identifier: 23:30:0E:E4:99:A4:51:D8:0E:DB:D4:A7:C2:15:B5:BF:A6:8C:AE:20
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer: /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial: 01A0D7CC4FE02B11F6C171513555165B4C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:26 +0000
Manifest this update: Fri 25 Sep 2026 09:01:26 +0000
Manifest next update: Sat 26 Sep 2026 09:01:26 +0000
Files and hashes: 1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: LYA3yV+AISvde7qgO92OkCOZwzhI8WEclI2ytubDbz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:4f:e0:2b:11:f6:c1:71:51:35:55:16:5b:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Validity
Not Before: Sep 25 09:01:26 2026 GMT
Not After : Sep 26 09:01:26 2026 GMT
Subject: CN=23300ee499a451d80edbd4a7c215b5bfa68cae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:38:e4:1c:c0:19:3d:7d:4f:74:ef:fc:8b:
d7:ad:11:fe:a6:8b:ed:d0:f8:fd:27:f5:b0:45:bb:
cf:bd:07:b3:0b:12:10:e7:82:4b:4e:93:05:3f:9b:
45:f7:10:84:22:9a:8a:22:e7:1e:ff:d7:f1:3b:6e:
13:92:19:67:04:cb:40:99:57:73:ae:87:ea:2e:ce:
c2:5f:84:6b:c8:05:97:18:98:d4:86:c8:f4:07:5b:
37:e0:f2:26:e0:8c:fe:44:7b:65:55:41:9e:1a:f2:
01:f1:c6:3b:0e:64:3d:33:28:16:f7:53:e5:c4:49:
bd:43:26:eb:e3:d3:63:c0:c3:01:f4:07:fb:12:b5:
14:31:a8:72:5d:e4:78:fb:47:79:00:4a:4e:7a:e9:
5b:c4:3a:09:62:fe:ea:4f:7a:df:f7:11:66:b7:45:
b9:69:69:79:60:45:ea:58:2b:37:39:25:39:da:a4:
3e:d7:46:bd:0e:c2:04:ea:30:90:aa:68:80:0b:7e:
4a:13:d4:c8:62:a1:90:14:45:b7:bc:a4:f1:d1:61:
b2:00:3e:00:65:5e:59:17:e4:7c:f4:4c:2c:26:14:
a7:0f:8c:94:c0:fe:c4:30:ad:e7:b4:f2:27:32:1f:
a7:03:98:86:11:12:9d:61:8c:9a:69:64:3b:fa:d8:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:0E:E4:99:A4:51:D8:0E:DB:D4:A7:C2:15:B5:BF:A6:8C:AE:20
X509v3 Authority Key Identifier:
keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:42:02:d1:ff:ae:95:98:10:71:d2:d1:e1:c8:d8:61:c1:44:
16:ef:dc:9f:a1:1b:da:ba:ce:08:6d:f1:bb:73:09:1b:c4:08:
a1:9b:ec:3b:2d:19:dd:3f:61:f1:77:bc:94:1c:c4:ff:f2:17:
7b:1d:d9:c0:d5:d8:05:f5:4d:0a:19:cd:f1:b6:ca:86:5b:5b:
25:92:e5:68:4d:13:a8:04:d1:a4:f5:86:82:74:4b:b6:1e:43:
13:99:9c:30:48:d7:f1:45:5f:5a:f5:d9:56:db:22:32:27:0c:
05:7c:7b:ad:00:bb:0b:9b:70:76:3b:4b:bd:a3:b4:56:2a:26:
47:96:1f:e4:bf:93:b6:84:d6:7b:29:b3:ce:af:d6:aa:bd:87:
da:c3:04:7f:7d:52:70:b0:31:30:95:24:f1:bb:ab:10:f7:01:
42:00:a4:48:58:b7:d7:c4:e5:cc:81:86:89:87:45:1c:7b:9d:
10:2b:96:5c:cf:f0:1d:df:44:67:7a:c6:34:96:2d:b3:9a:d7:
05:37:d9:7b:0f:3a:ac:99:58:3a:d9:bb:e8:c7:ad:56:ac:68:
34:e2:c3:b2:e0:94:d1:73:68:b8:cf:f7:27:a4:a0:c2:8b:a8:
cd:a4:27:a8:49:7c:08:5a:a7:4f:0f:5b:5a:e4:2b:b5:34:dd:
81:9d:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:04 2026 by rpki-client