Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
File: fzErCdH2kPJXAL1dzwfJGAxelmM.mft (raw, json)
Hash identifier: bM3zp9Xie4GsjdU7B6chbGtnHhYn5BD1kQIe1LPIvKQ=
Subject key identifier: DC:49:0D:73:B1:F9:2D:28:30:F9:4D:66:77:B3:D4:C3:30:3D:19:98
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 019F9737AC86556CC397FF40E6B76EA6FF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
Manifest number: 02F2
Signing time: Sat 25 Jul 2026 03:00:35 +0000
Manifest this update: Sat 25 Jul 2026 03:00:35 +0000
Manifest next update: Sun 26 Jul 2026 03:00:35 +0000
Files and hashes: 1: BCFG1E3vkLJzX3xYHBAXCR2M-Dk.roa (hash: kLXCiyzJI0lL3gfuo31f6jHCm4NoCsgw/6nrJV+kat0=)
2: fzErCdH2kPJXAL1dzwfJGAxelmM.crl (hash: smnmZ5tjEwHLXUX7VOHduvETQeqNuZRq500ZZ269jF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:37:ac:86:55:6c:c3:97:ff:40:e6:b7:6e:a6:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Jul 25 03:00:35 2026 GMT
Not After : Jul 26 03:00:35 2026 GMT
Subject: CN=dc490d73b1f92d2830f94d6677b3d4c3303d1998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:69:b4:7e:3f:e2:4c:23:5d:bc:1a:f2:5a:
7e:6c:c5:eb:1f:15:b6:ba:5b:23:a8:83:f3:23:92:
85:40:01:9a:7f:9f:26:5f:2e:d8:ed:1d:bd:b5:59:
d0:e7:21:fb:9d:75:49:7b:38:14:9d:5d:c4:e1:18:
0c:e4:65:7b:71:fe:8c:3d:bf:c8:ca:63:4f:12:0b:
43:b6:9e:b8:69:85:8f:1f:2a:41:1f:a0:62:c8:9b:
57:8c:94:00:c3:49:f7:5e:8b:d4:c9:79:74:a0:64:
7b:c5:42:c3:5c:4e:5f:f6:d0:99:67:2b:ff:38:ed:
1e:9d:4c:e3:2d:4a:98:af:82:af:42:58:70:11:bd:
47:47:f7:43:ac:f4:c8:4c:17:14:d8:ef:35:e5:c1:
da:fd:ef:ff:ea:24:9b:38:d2:ab:b3:a8:bf:30:37:
d8:8f:af:4e:31:78:f5:80:b5:b4:30:1a:9c:14:4a:
ed:1b:a8:ce:c9:3d:b1:3c:ff:5c:36:23:43:48:43:
61:28:b6:08:7f:f8:51:00:a8:87:56:7a:c3:dd:e3:
93:c8:a3:2f:c2:c2:71:4f:01:09:56:30:be:89:11:
60:6e:ea:d3:a3:f5:a4:80:69:f1:25:ce:09:c4:0d:
bf:3f:4e:35:89:0c:15:0a:8f:04:25:08:ab:de:62:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:0D:73:B1:F9:2D:28:30:F9:4D:66:77:B3:D4:C3:30:3D:19:98
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:89:08:c2:aa:17:05:15:2c:4a:4a:f0:16:b7:33:7a:bc:ac:
fc:e1:79:a7:09:c5:80:61:06:9a:8d:f9:c9:b9:90:c2:22:52:
86:53:9e:f0:4c:bb:bd:31:a1:7d:25:78:fd:b2:de:4e:ce:78:
bd:cd:17:63:11:01:66:3e:96:f2:b9:5d:6d:b0:e2:90:8d:ad:
a1:75:d3:54:97:c7:9a:e5:69:de:1a:d9:42:65:2c:6a:36:70:
a8:ca:50:9d:dc:8c:51:8c:77:66:9b:54:b1:91:29:5d:7f:d6:
7e:8a:ad:88:9d:ab:e0:97:80:f0:1e:6e:2c:e8:3c:dd:9a:f9:
e8:46:ae:3b:75:fd:ed:22:ae:63:43:8c:bd:e7:55:72:a3:ba:
31:8f:27:d2:cb:3a:7c:8c:3d:da:2e:ef:a2:45:e7:7d:7e:f5:
de:41:8b:32:40:e9:6b:b9:03:6b:4a:91:80:bd:fd:b8:c4:75:
1f:72:ee:b7:f8:24:e5:fc:61:af:3b:5b:99:04:8f:1f:92:48:
dc:96:46:89:30:0d:85:84:ac:d8:2c:6f:4a:df:72:3f:01:90:
54:b8:e3:93:be:7f:eb:d0:bf:ba:06:9a:f8:e5:7b:5b:58:af:
78:7e:ad:b8:64:ce:ce:93:84:18:46:bb:56:f1:27:b4:29:bd:
d5:5e:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:15 2026 by rpki-client