Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
File: fzErCdH2kPJXAL1dzwfJGAxelmM.mft (raw, json)
Hash identifier: Ld/mMqcj8A/C7t0g0zabRtpjonGw9jOtqcy64FfgvwE=
Subject key identifier: 74:CD:1A:6B:C7:A4:65:EC:67:E9:3E:10:3C:DC:97:B9:28:9F:AC:6A
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 01A145E0A3F7D11066F47EAC0FA5ECA15A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
Manifest number: 03D1
Signing time: Fri 16 Oct 2026 18:01:52 +0000
Manifest this update: Fri 16 Oct 2026 18:01:52 +0000
Manifest next update: Sat 17 Oct 2026 18:01:52 +0000
Files and hashes: 1: BCFG1E3vkLJzX3xYHBAXCR2M-Dk.roa (hash: kLXCiyzJI0lL3gfuo31f6jHCm4NoCsgw/6nrJV+kat0=)
2: fzErCdH2kPJXAL1dzwfJGAxelmM.crl (hash: IYaTT+tLoR7mRVOt7Qz8qkMJ/ctTt3Y0qXpod/6MQHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e0:a3:f7:d1:10:66:f4:7e:ac:0f:a5:ec:a1:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Oct 16 18:01:52 2026 GMT
Not After : Oct 17 18:01:52 2026 GMT
Subject: CN=74cd1a6bc7a465ec67e93e103cdc97b9289fac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:72:f7:83:d8:4c:64:38:29:9b:05:b3:30:
8f:73:84:92:00:ad:8a:17:0c:b7:76:53:7e:d1:c0:
46:dd:ef:02:58:48:63:ac:44:82:35:4b:61:1a:64:
87:5a:c0:f9:1d:83:5d:b4:e1:e0:36:cb:8c:1f:6c:
50:42:b2:72:ab:eb:a3:5e:5c:99:90:11:88:25:56:
5c:70:f1:6f:54:33:95:c3:10:0e:3b:ac:90:21:67:
ca:90:6b:81:2c:02:e0:15:77:d7:0d:fe:16:fd:cc:
c2:4a:3b:8f:6b:d5:61:44:0d:18:ef:55:98:60:dd:
88:d5:f0:f2:91:af:b3:05:30:61:78:32:a5:97:bb:
f9:73:b8:bb:36:a0:7c:c8:5e:9b:21:96:58:57:78:
3d:a7:6f:6a:0c:17:80:a8:66:9b:ba:7c:b1:b4:12:
1b:d1:d7:c0:5e:13:db:64:7b:72:f5:10:ed:a1:ad:
33:f4:02:10:85:35:35:46:21:43:23:1a:75:90:bd:
f1:e5:e4:ae:53:d8:ee:87:44:c4:70:39:95:4f:20:
52:43:1e:76:0a:99:c4:5c:41:ed:34:9f:31:57:5f:
92:25:7a:f7:73:58:47:11:64:ea:56:76:de:e4:73:
72:1c:1e:01:58:66:55:97:1c:26:8c:e4:b2:ab:be:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:1A:6B:C7:A4:65:EC:67:E9:3E:10:3C:DC:97:B9:28:9F:AC:6A
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:b7:28:83:66:41:97:71:a0:ed:37:cd:12:42:93:ce:58:
25:f5:3b:ca:5d:e4:3a:24:00:f6:f7:d3:32:d6:7e:2d:da:e5:
c0:d0:25:f1:e9:22:c3:c9:df:99:d3:4c:52:72:9c:af:65:a1:
5e:0b:c7:84:85:5b:51:60:47:a5:a2:2b:69:58:b1:33:74:03:
c9:60:74:2e:7d:1a:6f:d3:ce:74:61:63:27:b4:0c:0d:78:4c:
f6:2d:e4:81:02:aa:5f:3f:07:46:83:7d:75:19:93:ea:bf:2a:
a9:fb:f6:01:6d:73:b0:b0:2a:14:c0:bb:10:de:36:ba:b4:9f:
1d:22:e5:c0:fd:8a:e6:95:00:93:71:e0:13:22:f8:8f:14:48:
c1:2b:79:91:07:6b:bc:b1:ba:11:fc:65:7a:a7:7d:59:a9:aa:
67:26:01:33:d7:99:ba:c2:d8:76:cb:3c:51:25:91:62:ef:4e:
f7:3b:ca:85:f7:31:45:4a:b5:59:e7:f5:b3:a5:5a:3a:97:b5:
e6:9e:0c:9f:d5:be:aa:6a:b3:6b:76:75:26:e3:ca:6d:b3:35:
89:c8:55:c7:62:43:e7:88:56:9a:48:b5:8a:9f:09:7d:a7:ed:
13:e3:ff:51:ea:3d:00:3f:ed:b3:08:f9:04:73:8b:2a:e8:8e:
7e:fa:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:16:07 2026 by rpki-client