Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: n+tJf4nVETpHt94cR/nEmV1nrr9nEU4rZ7QdFbk4y24=
Subject key identifier: A1:B8:0C:FA:49:48:B3:57:63:1E:82:A4:36:9E:AF:3A:1B:AD:6B:B2
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 01A0F0B0E30D95946BD2CE013112A902C6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0DA2
Signing time: Wed 30 Sep 2026 05:01:59 +0000
Manifest this update: Wed 30 Sep 2026 05:01:59 +0000
Manifest next update: Thu 01 Oct 2026 05:01:59 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: fgAmIIWPb3SMtITTbsHd4reYX9tNgy8YcGpjkM35Rk0=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:e3:0d:95:94:6b:d2:ce:01:31:12:a9:02:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Sep 30 05:01:59 2026 GMT
Not After : Oct 1 05:01:59 2026 GMT
Subject: CN=a1b80cfa4948b357631e82a4369eaf3a1bad6bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:6a:a9:91:54:2f:ac:fa:d4:04:56:a6:7b:
b4:43:36:7f:8f:b3:24:a1:c5:d4:66:0b:89:ba:c8:
09:9d:b7:91:97:ba:c1:03:ba:ae:34:ef:81:fa:34:
6a:ba:5e:4b:00:da:5f:d0:39:c0:98:17:16:fa:d1:
ce:1e:40:c6:d8:3e:df:a7:18:52:52:91:6b:68:eb:
0f:53:f7:cf:98:67:16:15:9e:58:27:0b:6d:a0:7f:
cc:ed:2d:51:20:94:73:2e:06:3b:c8:54:ee:d4:e3:
d7:58:e3:f1:b8:73:fc:c3:00:74:ae:e8:e4:b9:e5:
f4:51:75:ef:49:8b:eb:5a:80:60:65:6d:0b:60:31:
39:96:d3:60:fd:de:30:06:0d:a4:49:69:7e:af:08:
46:e3:d9:e8:c1:f6:bf:2f:81:47:59:67:dd:04:54:
57:0a:62:8f:da:6f:4d:74:ed:2e:91:ff:d4:02:49:
c6:3c:ce:43:fe:f0:42:e4:ea:5a:ff:dd:da:b6:9e:
d0:10:dc:08:6b:da:67:d2:02:85:e4:89:29:72:77:
d9:aa:ed:fb:c1:b6:b4:57:03:2f:ef:85:6e:c4:8a:
7e:15:f4:5c:f9:cd:59:8a:4c:9d:7f:70:c1:dd:e6:
24:cb:22:6c:7a:c1:2c:58:4e:ab:18:1a:da:53:88:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:0C:FA:49:48:B3:57:63:1E:82:A4:36:9E:AF:3A:1B:AD:6B:B2
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:49:50:d1:32:c1:5b:84:08:04:5b:e6:b5:53:08:a9:f6:
02:b5:d0:ed:12:79:d1:a4:31:63:fb:f4:a5:1e:b6:bb:06:87:
2b:f3:9b:8d:b8:c5:67:f8:0b:a4:3c:44:9b:2a:41:79:73:ed:
9b:71:fa:28:83:e4:46:3b:4b:0d:c0:65:b1:29:79:ae:7b:8d:
e0:6d:ce:a1:f3:26:fe:ca:ef:08:d6:d8:c4:f6:62:fe:91:98:
b2:73:2b:2b:99:59:51:5f:b4:04:03:b9:8e:61:76:61:b3:92:
86:23:59:ea:9f:30:ab:23:43:fc:ea:04:10:df:c4:64:9f:e6:
01:a4:60:24:aa:79:a0:7b:a0:35:27:2a:8e:c8:fb:33:0f:90:
29:74:21:13:8d:2a:f9:51:60:c7:09:a1:fc:a0:fb:b9:d3:1a:
3e:ce:a3:24:82:6e:16:e6:33:b8:21:a7:12:40:5d:73:2d:ca:
f3:d1:1e:4d:53:ff:a9:14:be:20:3b:5d:80:e3:34:44:e8:95:
e3:1b:43:b1:b1:20:48:35:07:1d:62:fe:98:90:35:2f:06:d7:
b4:ca:91:b4:8a:ab:5a:14:00:38:1a:57:7a:75:6f:7b:85:ce:
b5:e6:77:b8:6c:46:50:46:55:18:a6:40:59:55:31:61:2b:d3:
75:1e:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:52:07 2026 by rpki-client