Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File: frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier: heVPl7l29Saz8iBAFWHKer6g0atomw9AUd9B7uWEQnM=
Subject key identifier: 9E:E6:E7:90:7D:D9:8D:F0:80:08:17:74:98:B2:70:3A:42:60:E3:BE
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer: /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial: 01A0C47BD5DE869F88201E305DCE1B7D4BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:45 +0000
Manifest this update: Mon 21 Sep 2026 15:00:45 +0000
Manifest next update: Tue 22 Sep 2026 15:00:45 +0000
Files and hashes: 1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: DgoIlDri39F5iXjQU22Y773cwt1sPaKMBlEDtZbopZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d5:de:86:9f:88:20:1e:30:5d:ce:1b:7d:4b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Validity
Not Before: Sep 21 15:00:45 2026 GMT
Not After : Sep 22 15:00:45 2026 GMT
Subject: CN=9ee6e7907dd98df08008177498b2703a4260e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:04:7d:5d:6c:90:aa:2f:80:6c:f1:9c:df:
88:10:9c:ca:2f:b6:ac:16:95:fe:b5:76:a8:c9:94:
05:b7:ed:e8:c1:bc:06:86:61:f4:ab:0f:17:ce:b7:
c6:c3:a4:c0:e7:4f:db:11:2e:15:15:c3:f7:bf:72:
51:af:73:32:ea:3e:b4:ca:1f:88:f6:92:11:d0:46:
57:16:37:7d:63:2e:40:c6:4e:69:c3:22:d5:43:17:
de:b9:ec:6b:b1:0c:49:1e:83:51:84:de:1a:c4:7f:
ee:e4:c4:85:d0:65:9c:65:ec:5c:2b:f5:2c:10:ab:
f9:4a:6d:01:99:72:05:a0:d8:30:61:96:32:6c:2b:
ba:99:d7:fb:9d:77:f8:45:2b:41:7b:1e:78:23:9c:
bc:56:4c:6d:ba:37:4d:6a:65:ae:70:38:2a:6e:7e:
47:70:70:5f:a1:20:5e:0b:85:76:55:7c:10:a1:ef:
2a:8f:43:b0:bf:f0:c6:53:6d:2c:5a:f2:e3:4d:0c:
ab:fc:5e:b6:d2:64:a4:e5:3f:ba:0f:6c:89:8a:4d:
27:85:ed:c9:e5:e0:78:ff:ad:21:19:a0:af:46:19:
c2:37:5d:d2:97:6f:7e:33:13:d7:50:65:5a:97:73:
65:49:bb:20:45:ae:fc:e5:15:3f:f3:a1:d4:e8:b7:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:E7:90:7D:D9:8D:F0:80:08:17:74:98:B2:70:3A:42:60:E3:BE
X509v3 Authority Key Identifier:
keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:10:74:99:22:c9:61:25:eb:4d:ce:a8:77:8d:2a:01:d8:
9b:44:ca:f6:74:10:95:b1:94:7c:50:ff:aa:b7:ef:1b:1b:b8:
c7:e4:22:3f:aa:5e:ed:cf:4e:a7:49:ae:de:0a:f9:aa:3f:5e:
f9:6c:49:9e:fc:9c:17:db:02:e3:68:98:8b:f4:82:5a:27:c1:
0c:e7:43:65:ee:53:6d:5d:75:b4:12:20:bc:71:68:01:06:b8:
38:a4:65:2e:49:cb:e3:07:5c:7c:6c:2e:dc:30:09:f9:49:59:
ed:3d:be:f0:80:7d:2c:cd:a1:08:ae:19:a8:69:d7:4e:ac:c7:
82:c7:11:0e:69:22:b9:9f:b1:f0:ea:55:cf:3e:4a:a1:6f:4b:
f7:74:23:28:ed:96:47:f6:08:92:82:cb:ff:dc:24:38:75:0e:
e0:34:5b:e2:ce:a1:2d:79:3f:c6:90:f7:cf:55:89:4b:be:fa:
4f:30:e8:9c:e3:91:32:72:4c:9a:d0:87:ed:38:e1:ae:5b:f1:
3b:b4:5a:af:51:82:0a:3e:eb:5c:c6:46:21:67:48:d4:b6:9f:
34:3e:6a:b8:29:5e:7e:ee:82:3f:d6:c5:ad:44:44:a4:b2:cf:
80:0a:90:d5:24:5f:a8:c4:d2:a9:70:16:02:7a:5f:69:21:08:
34:af:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:42:28 2026 by rpki-client