Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: tT+9DII/ScvtV7Ql3TNhpwyiqkEwDCczCWSQKm46Yfg=
Subject key identifier: 09:92:50:E7:38:23:31:24:C9:F2:C8:38:00:E1:71:03:49:24:4C:BD
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019F9512A3B9C2077DB4F93F34E552D9B9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0CEE
Signing time: Fri 24 Jul 2026 17:00:54 +0000
Manifest this update: Fri 24 Jul 2026 17:00:54 +0000
Manifest next update: Sat 25 Jul 2026 17:00:54 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: H9VN/eEUPANnijXNIOuDSp11eTWAn9vlEVaYWV7qQg8=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:a3:b9:c2:07:7d:b4:f9:3f:34:e5:52:d9:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jul 24 17:00:54 2026 GMT
Not After : Jul 25 17:00:54 2026 GMT
Subject: CN=099250e738233124c9f2c83800e1710349244cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:d6:90:91:27:01:ad:3c:3b:0f:fe:fa:a1:
c7:70:c5:bc:29:3f:dc:10:d2:cd:2a:f0:fa:cf:90:
f7:d6:67:5b:2f:21:60:a0:35:76:e5:a2:0e:cc:12:
80:87:63:b5:e3:1e:ad:32:47:9d:4d:98:b1:aa:56:
5d:6d:02:d4:35:2b:c6:f5:95:11:7a:fa:7e:ef:0f:
a1:15:3e:66:17:43:5c:be:72:f9:59:98:21:c9:76:
f9:ce:38:bc:1f:4a:d4:28:1f:4e:d6:cd:df:1d:6d:
2a:92:c9:0f:5b:84:64:f8:ef:0a:24:7a:cc:68:78:
7e:f4:82:68:16:9a:60:da:25:a4:6c:8b:ce:c9:10:
f6:d6:53:17:1d:5c:22:2d:e8:eb:8b:3a:38:b5:fc:
fa:d6:45:4f:72:4b:a1:f7:00:5b:62:a6:f8:9b:12:
7f:11:6c:81:9b:52:08:60:c1:e4:74:51:c1:7d:23:
98:4a:df:0c:47:48:3c:c7:4b:ed:10:6e:39:8c:03:
de:3c:e7:c3:a3:11:84:2a:f9:36:ed:c3:e0:d4:ed:
d8:a9:32:3e:70:03:2f:b1:a3:71:19:e1:7a:12:81:
f3:ba:43:e3:af:9d:29:21:24:f7:d9:6c:e0:97:42:
ce:42:94:02:c7:ee:e0:2d:f2:36:0f:b2:48:db:f7:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:50:E7:38:23:31:24:C9:F2:C8:38:00:E1:71:03:49:24:4C:BD
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:73:45:32:44:50:20:1e:95:6c:e9:66:f9:55:38:1f:a3:cf:
ee:7e:4f:3a:b9:85:ca:5a:ca:52:e9:4b:f2:c3:92:c6:97:53:
4b:b9:3c:12:39:72:80:a8:7d:fe:5f:0d:73:48:7d:74:75:1d:
30:a6:a1:03:1d:d3:ae:cf:3a:0b:70:8d:a8:b8:a9:52:5d:0f:
60:43:ea:f0:d3:56:64:df:7a:2a:6d:cd:11:55:2d:41:f7:c2:
ba:d2:68:e8:88:6d:d7:f3:77:d0:35:a8:4c:62:a1:f2:b3:16:
00:c2:f5:9d:0a:f3:78:3b:c9:ad:74:29:82:38:4c:86:52:2a:
95:7d:fd:d0:58:d8:ce:27:72:59:15:75:bb:96:3a:94:6a:4e:
2e:40:b6:50:6d:a7:b7:99:5c:1a:11:18:1e:5d:d5:a4:fc:82:
ec:dd:11:66:1e:a5:52:88:a4:3b:80:b7:de:75:f7:92:1d:25:
93:0d:06:01:c9:d9:6b:2b:5d:34:4d:36:67:31:da:55:da:31:
1a:da:f3:0f:aa:16:9e:eb:73:77:eb:fd:58:5a:7e:3d:e7:b1:
6b:02:66:4b:21:7d:f6:4f:ad:f8:fe:66:7a:a0:fa:77:2e:a3:
82:f5:be:71:e4:20:e9:c4:19:2e:2d:48:fa:5f:26:f4:a4:85:
7f:86:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:35 2026 by rpki-client