Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: K3SfIzAsudaCtxAHzfvEETA4SaXpwcOE6sXPliW7u2k=
Subject key identifier: C0:CD:4D:22:E4:C2:24:73:75:3A:52:6C:FB:B2:B9:1F:D4:96:C0:B6
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 019F9549F7E09FE9EB1137589BD990C80EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:20 +0000
Manifest this update: Fri 24 Jul 2026 18:01:20 +0000
Manifest next update: Sat 25 Jul 2026 18:01:20 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: AK8fyIefMS9gKhMcYNfVNXTccQSO5KA1VQM0wTVFNxE=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:f7:e0:9f:e9:eb:11:37:58:9b:d9:90:c8:0e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Jul 24 18:01:20 2026 GMT
Not After : Jul 25 18:01:20 2026 GMT
Subject: CN=c0cd4d22e4c22473753a526cfbb2b91fd496c0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:96:7c:4a:01:5d:31:9f:21:e3:15:0c:d9:
68:bc:73:4f:e9:ec:8e:e5:38:80:5b:fa:29:e2:d3:
a6:fd:f6:2c:04:7c:48:f5:3f:14:d3:31:8e:fd:e7:
b3:81:78:41:12:94:fc:6d:20:8d:88:87:61:b2:d0:
a8:3f:14:05:50:25:6b:07:e5:62:4b:a7:95:8c:d8:
e8:79:55:5a:ce:b7:32:60:ca:52:e3:7e:7b:df:d6:
38:13:35:aa:33:f0:6c:ce:72:cf:8e:3f:d8:68:56:
bb:b0:0a:47:54:86:9c:6b:73:4f:1c:d6:ac:2e:bc:
b1:f3:cd:2a:a4:0b:c7:f4:12:3e:95:39:5a:f6:cd:
5c:9f:84:c6:b1:6e:d5:1f:df:c5:58:9f:2d:3d:c4:
a1:70:88:ab:b3:7e:40:b7:7b:d2:60:31:4c:eb:d8:
e0:ce:de:a7:3f:28:de:89:58:96:3c:cb:c0:3f:cf:
9e:4f:cc:85:07:42:05:47:68:05:d0:b9:a1:26:29:
9f:7f:87:c3:5e:38:a8:64:1d:70:75:84:7e:6f:5f:
e8:f8:89:e2:50:92:08:8a:2f:f0:40:6d:f2:6f:6a:
86:72:7b:8d:5d:5d:c8:10:5b:12:30:28:2c:cc:47:
12:5e:92:81:e3:b7:13:d3:c3:85:88:62:9c:79:a3:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:4D:22:E4:C2:24:73:75:3A:52:6C:FB:B2:B9:1F:D4:96:C0:B6
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cd:23:81:d4:bb:f3:87:5e:cc:2e:87:49:87:c8:25:9f:dc:
f3:a4:40:98:28:73:33:d1:e5:7d:46:46:30:29:3e:c4:7b:26:
3c:76:59:69:ab:c0:b8:3a:4e:f3:25:94:ef:73:9f:b4:19:bd:
9d:dc:84:e1:ae:99:2e:d2:90:75:cc:02:a0:99:13:6c:3c:a6:
a7:48:f4:68:47:44:69:0e:64:90:d9:2a:ea:cd:8b:42:b4:b5:
01:7a:26:74:ed:1a:a0:4f:28:42:c9:91:6b:32:48:d8:da:30:
e7:e1:48:e2:4c:29:1a:dc:3f:d2:52:6a:65:50:6f:78:f3:d5:
2b:18:52:ab:a0:5a:41:b8:57:cd:72:04:74:5b:d9:e7:fd:1a:
ea:85:6b:13:2b:92:37:c1:3b:05:62:78:38:75:ef:1f:8e:ff:
a9:c3:33:5e:2e:94:d6:72:27:e6:11:cd:1d:3d:12:ba:06:e8:
b0:8b:7d:9e:86:41:63:ec:a8:59:fc:90:90:10:39:db:77:ee:
69:03:2c:98:f3:3d:25:0a:ad:a7:2d:29:0b:1d:c1:38:fd:44:
a9:58:76:42:7a:40:fc:69:75:3f:46:6f:87:c4:dc:d8:97:6b:
dc:1f:13:7d:ee:f7:10:59:82:a0:0a:21:b0:13:eb:02:af:26:
91:bc:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:29 2026 by rpki-client