Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: EHMkQdtWDmkA34MDWnHFEGMZVEd3xCWfeEWQwhWQ1u0=
Subject key identifier: 73:B0:93:57:D9:39:85:64:75:3F:15:A7:98:20:DA:62:A8:F1:2A:98
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019D28BB1CF4C4BA468195BA0FEE5563DB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 1610
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: IBfMvbxboT7q07qmRd-Z-auoMxY.roa (hash: M2necPHfBLeWIy1vVtOPQiCkqRUXkFRpCHpeFgAr5p4=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: ti4mkqyBCiWdQ6490e5aEFBQQM8LWwhG36vYjyNF1Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1c:f4:c4:ba:46:81:95:ba:0f:ee:55:63:db:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=73b09357d9398564753f15a79820da62a8f12a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:f3:62:ee:2d:29:c9:bb:de:7f:4a:30:5a:
1b:43:c5:13:bb:c2:67:c6:1c:42:dd:3d:f1:11:27:
e4:94:b9:c7:b6:f1:09:4f:26:3e:ae:da:7c:d9:b9:
b5:6a:69:40:70:9d:81:b0:ce:72:11:03:28:f3:03:
59:3c:7c:52:d1:c3:ba:c3:a9:90:a7:c4:bd:ae:4f:
e5:9e:75:95:4d:3a:10:88:2c:8e:92:8f:78:93:e5:
84:4d:e3:34:30:f7:cf:38:05:8d:e3:22:2e:20:3c:
5c:d1:da:89:05:d4:47:d1:b5:45:a8:f3:45:39:44:
5d:b0:3b:2c:76:4d:87:c3:40:4f:c3:ad:ed:9b:11:
a4:79:99:73:9e:17:d1:00:85:69:91:d4:6d:89:0f:
ac:df:5f:02:89:82:24:af:62:64:1f:f9:cf:e6:bb:
ff:01:da:7e:dd:3d:e8:ee:b0:48:2d:9b:ab:fc:9a:
f5:8c:eb:8d:e7:72:f9:d4:5e:ca:ac:b2:3c:62:82:
d2:08:3e:b3:df:34:9c:f0:35:e3:f1:c3:c0:eb:a3:
27:a9:5a:d1:4c:c0:74:c8:37:91:01:e6:fb:97:1f:
f0:75:60:74:88:a5:03:21:72:d3:63:a5:a1:85:71:
19:45:3d:52:27:7c:d2:92:fe:f4:84:f5:3c:3f:0f:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:93:57:D9:39:85:64:75:3F:15:A7:98:20:DA:62:A8:F1:2A:98
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:de:9e:f3:57:e4:6c:a5:d6:be:51:ee:96:c5:63:81:a5:4b:
0c:18:fd:6c:94:fd:1a:c6:3e:71:8a:0b:66:be:1d:15:07:ba:
e7:c3:0a:01:23:5a:b9:96:95:da:25:12:f8:e7:c9:a6:23:da:
b6:95:9e:7a:d1:35:0b:a1:88:f9:a9:e4:f5:01:8a:bb:41:98:
f3:83:a7:4f:62:65:b5:91:4b:3e:51:0d:ad:99:d3:ea:36:6d:
77:a8:7a:52:96:06:09:a9:f5:bd:1d:15:9e:ad:79:83:eb:33:
e5:d5:3d:79:99:bb:a7:62:18:89:60:94:12:7c:76:d2:95:5e:
88:6f:6e:69:30:2d:6f:4f:24:16:89:cd:6a:c5:8d:a3:6d:b3:
90:ad:86:c6:75:aa:d1:0c:0d:71:6e:e8:70:8f:df:5f:a9:3b:
74:a6:4f:7d:88:3d:85:57:10:0f:55:43:cd:68:4b:b2:44:0b:
39:2d:f4:ea:a2:4b:d2:21:9e:56:3a:de:8a:82:bb:53:da:5b:
07:06:8a:de:b9:bb:85:c6:db:e1:55:64:9a:92:7c:94:d3:95:
bd:40:47:ad:21:8d:5a:a3:95:fd:a4:67:3a:72:a8:d8:61:cb:
b4:b4:58:cf:6d:a7:bf:7d:b4:48:d9:6d:57:3f:7f:db:e8:1c:
f7:20:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:03 2026 by rpki-client