Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: V37bgsPJLeWhH+qU8QIHYagWth/En4nrwpfLGXjQLs0=
Subject key identifier: 7F:F7:67:87:87:08:76:F8:E6:E7:F7:3C:6B:0E:81:66:8E:B4:6A:34
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019D27DF7BC757C7B5F4B9379811199D77B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 07D0
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: I0dQswC8slWDTBRqh+fczL5FUEn5kuuxyuJapVW51SQ=)
2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7b:c7:57:c7:b5:f4:b9:37:98:11:19:9d:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=7ff76787870876f8e6e7f73c6b0e81668eb46a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:3c:52:7a:5d:e1:50:ae:56:bd:f5:21:cc:
3b:34:fe:03:d2:a8:b0:4c:e4:e7:43:ff:a6:b4:38:
4e:81:21:ca:d5:0f:3c:53:7e:f4:8b:8e:24:6c:18:
4d:08:1b:5b:f3:16:6d:1c:7a:68:2f:42:c7:ea:64:
17:26:f4:be:34:15:ec:4f:4b:35:05:36:ec:29:15:
78:7b:a2:9f:9a:1c:6d:5c:a3:74:ed:80:57:b4:c6:
54:4d:3e:47:f8:55:88:9c:95:32:27:15:8b:8e:fe:
06:41:d3:36:40:15:90:e0:74:d2:9a:f3:fc:79:7b:
b5:0c:c2:2f:c7:79:f8:82:d5:e1:a3:f4:0a:b2:8c:
2b:12:76:14:72:f6:ac:6f:74:91:40:e1:2a:2d:8b:
a9:58:f2:5d:bc:d4:44:8e:39:03:90:72:d2:2a:d5:
35:46:60:ad:5f:41:10:f9:cd:54:9d:8a:ec:f4:05:
44:e5:32:20:73:b8:a5:23:1d:82:61:be:95:c1:9f:
e3:bb:7f:1d:b3:fe:fd:6c:72:1d:6f:e5:0f:eb:b6:
fc:88:17:99:a9:2a:36:29:63:b4:0b:60:1c:c3:49:
5e:29:78:76:60:cb:a8:4a:00:c3:52:47:b6:5a:55:
2c:c1:08:ca:73:bd:51:8d:78:11:b0:22:fe:b5:b1:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:67:87:87:08:76:F8:E6:E7:F7:3C:6B:0E:81:66:8E:B4:6A:34
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:f0:8d:43:3c:50:02:b0:e4:e8:57:2b:ae:a8:7a:a5:3d:
0b:af:1b:c5:db:1c:e6:7b:5b:4e:3b:d0:17:fa:9c:65:b6:cb:
ec:38:38:41:5e:18:28:02:1c:fe:95:36:cf:cb:1d:95:99:f6:
0b:81:35:bd:35:78:b3:04:f7:98:55:33:18:4c:ed:2e:0f:4e:
f9:a9:91:01:dd:72:ba:b1:c2:a8:89:b9:2d:cb:d1:52:7d:5e:
b8:e2:c7:70:fa:ac:c7:b1:cd:19:aa:1b:aa:c1:5c:b3:ee:f6:
27:e0:d7:5e:fb:6f:da:05:73:27:9e:cc:e3:54:4f:66:b9:ea:
51:15:74:cb:0f:64:69:95:72:4d:14:f1:ab:c2:40:62:af:b0:
96:ef:ba:70:a4:d0:7c:16:1d:a4:b5:bd:87:79:65:59:0e:f4:
3b:76:07:ab:b5:40:70:ce:3d:9d:49:b8:0e:f1:55:ad:2a:41:
24:f0:16:99:29:dd:52:24:c3:dd:57:30:a1:b2:0c:6c:30:2a:
9a:de:fe:a1:3e:26:8a:61:f3:6c:eb:21:bd:5f:1f:b0:7b:e5:
22:71:ff:7c:fc:08:80:a2:e7:ce:58:5d:60:db:49:3a:2e:77:
14:26:87:15:4f:58:56:c0:da:fb:c0:32:c6:50:46:7c:32:95:
df:d1:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:41 2026 by rpki-client