Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: 1da/NuIjMGfsAa6tnc+zaB6BNBFLA61N617bzkgClxU=
Subject key identifier: 9F:0D:06:63:D6:EB:B3:5F:BB:69:C7:E0:D7:A2:67:15:CC:E8:09:E3
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 01A0D7CCD5499E391055FBD53ECD3C5B5922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:00 +0000
Manifest this update: Fri 25 Sep 2026 09:02:00 +0000
Manifest next update: Sat 26 Sep 2026 09:02:00 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: h96TtYyF+ZQ97+zZ0pByizu/l74EosFJyOFpQT/FP/s=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:d5:49:9e:39:10:55:fb:d5:3e:cd:3c:5b:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Sep 25 09:02:00 2026 GMT
Not After : Sep 26 09:02:00 2026 GMT
Subject: CN=9f0d0663d6ebb35fbb69c7e0d7a26715cce809e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:37:ec:06:b9:bd:62:fb:b1:49:95:6f:55:
af:70:1f:07:2e:24:fd:f7:87:a4:30:05:da:53:7c:
f2:a2:00:81:9f:93:bb:77:3d:53:58:d4:76:23:ed:
81:e5:db:98:48:8d:3b:98:2c:a2:b8:af:bf:87:13:
45:a5:b5:0f:14:20:a1:b6:e0:70:b3:c5:33:d3:5c:
6b:8e:ba:38:cc:2b:59:80:aa:9a:64:f1:e0:13:c8:
a3:e3:bc:21:1d:4b:fd:ce:a9:4a:47:e4:01:cc:a1:
b8:7f:9f:31:6b:66:61:6b:fa:8a:1e:6c:4a:fa:52:
ed:b9:58:41:00:55:3a:bc:eb:5a:34:85:f5:b2:25:
15:6c:29:43:be:14:d7:6f:a3:08:e1:af:1d:86:de:
57:99:7f:4f:02:71:28:e3:42:1e:26:2e:ff:67:fa:
dc:af:c8:b6:4e:28:2d:d3:8a:a3:c7:54:bd:c8:be:
4b:32:27:6c:45:ba:6b:1e:31:9d:4e:e4:98:db:7f:
b9:8e:c5:6d:f6:b8:3d:27:b7:2e:25:47:c2:21:36:
1c:61:0e:ab:26:b2:50:d0:f6:29:17:1c:a3:9e:27:
15:e6:7c:cd:53:1f:32:c8:0a:32:20:6b:fa:36:54:
67:28:1b:35:45:68:be:c2:47:e4:1a:0f:81:2d:6d:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:06:63:D6:EB:B3:5F:BB:69:C7:E0:D7:A2:67:15:CC:E8:09:E3
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:85:7b:6c:ed:1a:67:0e:a6:c8:4b:27:62:ce:b6:63:e8:
4f:1c:bb:d2:77:48:7f:25:6c:bb:7a:66:25:37:91:de:5b:d1:
42:fc:42:90:57:84:42:eb:9e:2c:aa:a3:cb:2b:90:fb:02:a6:
ea:c1:02:78:b4:e8:c6:23:b2:a1:d8:9f:85:10:30:45:3b:31:
38:2b:a5:e3:31:6a:06:c6:d2:6b:35:27:f8:85:3c:16:74:85:
23:f2:0c:52:5b:84:64:49:85:54:c9:15:7b:6f:93:1d:fd:db:
31:34:16:71:64:35:43:d7:cb:57:db:bb:14:87:85:e4:ec:2f:
15:2d:e7:79:a0:6c:d5:2f:ca:49:bf:bf:42:12:94:ef:d5:c8:
ad:28:7f:4d:4f:b5:ca:51:fd:78:9c:34:a4:0b:10:14:2f:13:
e2:e9:51:cc:bb:39:15:1b:4f:4e:77:4f:95:84:bf:85:43:cd:
0c:98:d1:dc:72:34:3d:ed:61:58:9c:f1:9b:b6:7b:e2:0f:b7:
5e:ea:c6:d5:d9:fc:75:09:bf:e3:ac:cd:93:0a:ce:9a:61:7d:
92:65:ea:f2:9c:0a:ce:fa:3f:4d:07:01:d8:8b:79:d3:85:e3:
16:40:53:f6:63:2c:f7:04:c6:76:46:bf:2f:d0:4d:bd:60:22:
92:4a:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:00 2026 by rpki-client