Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: Ls6QyN2R2KKy4O46nLH5CSPTaEJ6CXmCWrYfWllSGTQ=
Subject key identifier: 42:02:A3:2C:D8:16:9A:2D:DD:51:CC:BF:87:C5:0C:E7:F6:B2:C1:3C
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 01A1C8FB713E2C37F71AC7F67853AE529EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 1A7F
Signing time: Wed 11 Nov 2026 05:01:23 +0000
Manifest this update: Wed 11 Nov 2026 05:01:23 +0000
Manifest next update: Thu 12 Nov 2026 05:01:23 +0000
Files and hashes: 1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: aXwzhDxDk5vGKSKxUSiDhAXdpYHDP1+aBc9muO4TBIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c8:fb:71:3e:2c:37:f7:1a:c7:f6:78:53:ae:52:9e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Nov 11 05:01:23 2026 GMT
Not After : Nov 12 05:01:23 2026 GMT
Subject: CN=4202a32cd8169a2ddd51ccbf87c50ce7f6b2c13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:93:9b:59:4f:07:ae:79:75:dd:19:31:ee:
5b:d1:0c:8a:7c:b1:8c:a4:04:3f:08:b2:ed:cf:ec:
e4:89:e6:9b:31:12:92:77:e1:fc:5e:60:57:12:ea:
d3:45:3a:5c:90:3d:e8:9b:68:35:51:da:31:b0:e4:
3d:76:48:c5:8c:df:6d:34:1a:70:bb:3f:8e:a1:fa:
f8:1b:36:fa:6e:c8:7e:f8:64:f5:dd:f7:48:34:4e:
50:23:e8:e2:50:d6:a9:ea:e8:01:8e:a1:aa:94:56:
db:db:e4:94:b2:65:4e:ed:64:b6:7f:07:73:08:f2:
c7:3b:d3:51:6a:85:03:2c:6c:bd:22:11:c2:d0:d0:
87:60:43:dd:61:f0:22:ae:00:c7:16:96:c5:02:b9:
fd:e1:b7:f9:15:0c:15:a8:29:7b:26:31:90:4a:d5:
6e:68:d2:19:f7:ee:d2:34:39:54:38:c6:c2:f1:55:
89:d3:28:15:b4:3d:29:5a:bc:f2:bc:0d:7b:d9:3f:
9d:ed:fd:5c:a4:2e:23:2c:42:4b:b1:09:9e:42:a3:
a8:cf:74:0b:9b:23:82:b6:d9:a4:38:ed:bf:2d:78:
f3:6a:a2:6b:95:0c:15:e1:67:eb:6e:fb:dd:d4:82:
80:83:96:f9:b3:e2:7c:2d:e4:0b:24:4d:ca:9c:95:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:A3:2C:D8:16:9A:2D:DD:51:CC:BF:87:C5:0C:E7:F6:B2:C1:3C
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:7b:90:be:e7:12:46:0a:8d:e1:72:f4:f8:a3:a4:ee:d5:
d3:e0:be:33:e3:06:69:09:64:c8:8b:34:46:48:24:6c:57:23:
d1:25:a0:85:85:46:70:01:2e:59:6e:8d:55:2f:18:d5:e6:10:
25:b9:2b:3f:69:92:79:40:34:79:3d:4c:f6:3d:bd:a1:f7:40:
a0:2a:ee:46:93:ff:00:bd:3f:3f:cd:5d:58:b2:25:b7:23:3a:
af:ab:be:30:31:71:99:b7:fd:c1:ba:91:41:7c:d6:51:d3:dd:
c1:58:7d:dc:a4:dc:bb:aa:3f:31:ff:91:29:9c:bc:11:6f:44:
4f:71:20:65:08:d3:a8:84:58:65:74:ae:96:5d:0a:be:92:2d:
b1:01:84:14:a4:5f:ab:a2:98:57:6c:a8:8b:c7:b3:55:a7:8f:
f6:39:37:a1:7f:b3:ef:0a:e2:79:cb:7c:4b:b2:9e:f7:fa:ca:
1d:02:2b:57:e6:57:06:0b:15:50:05:bd:26:3b:0f:ea:5c:90:
3a:68:f1:20:05:f0:7f:76:98:c4:d3:51:12:94:59:4a:52:33:
b4:d3:21:9a:61:90:76:dd:ea:cf:59:de:b0:3a:d7:55:53:47:
57:91:03:2b:ce:c0:b8:2d:38:51:4c:fb:21:86:52:29:b1:c6:
e4:4d:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:21:49 2026 by rpki-client