Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File: frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier: kPWn4DjZF+Y9wZTlsassHiT6Kg+ZSkaeSnkkudkrJlw=
Subject key identifier: B4:A6:82:00:71:67:8C:79:4C:0E:1A:C1:DF:ED:7D:2B:EA:FF:03:02
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer: /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial: 019FA899DF01503B67F373DFBFE5FAA894CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:24 +0000
Manifest this update: Tue 28 Jul 2026 12:01:24 +0000
Manifest next update: Wed 29 Jul 2026 12:01:24 +0000
Files and hashes: 1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: qYfaTj34BAfSHOOlnpsudXDQTJkRHIOjgTMkd/Ceb/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:df:01:50:3b:67:f3:73:df:bf:e5:fa:a8:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Validity
Not Before: Jul 28 12:01:24 2026 GMT
Not After : Jul 29 12:01:24 2026 GMT
Subject: CN=b4a6820071678c794c0e1ac1dfed7d2beaff0302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:28:ea:62:de:a3:69:b9:4f:ae:bc:cb:30:
cc:54:37:5e:81:1f:e0:91:76:49:c9:10:5c:2c:bc:
93:e0:c1:3d:fa:51:e6:36:d2:94:1c:54:6c:bb:d2:
93:bf:ff:ee:8f:8a:9b:83:18:70:de:a6:13:f6:34:
c8:b6:c8:82:d1:c5:f4:bb:d5:05:2f:3e:3e:6d:dc:
11:e0:17:c5:c8:9c:db:93:99:a2:1c:9a:bb:1a:54:
58:d2:af:0e:ad:a1:21:fd:f2:e6:8f:93:93:df:74:
2f:40:1c:88:78:73:3d:c5:d4:0f:98:26:96:d3:a7:
64:02:22:70:f9:c5:8d:9c:71:95:ed:f9:c8:61:c3:
f8:e3:fa:da:ca:2c:9b:a2:1b:01:ee:63:85:fd:84:
2e:4f:f2:d7:cb:66:56:81:47:ec:e7:04:b4:ae:d5:
76:43:a0:99:7c:ea:27:8f:97:b2:20:fe:74:21:ed:
eb:7b:9f:54:b6:9c:06:2b:7e:f0:2f:0b:0a:64:a0:
6b:f7:94:7a:b9:7e:24:85:cb:8d:5c:3d:af:d7:22:
d3:de:8e:24:a2:32:f1:87:b5:76:b1:5a:04:2c:5f:
4b:28:69:74:af:67:40:4b:22:bc:4f:3c:b5:41:c0:
fd:50:ff:d7:43:d6:b3:d3:e0:23:a7:17:0c:a5:e9:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:82:00:71:67:8C:79:4C:0E:1A:C1:DF:ED:7D:2B:EA:FF:03:02
X509v3 Authority Key Identifier:
keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:94:e5:05:67:ad:e3:4c:58:32:78:ad:97:5d:fe:1b:e6:25:
23:1d:96:9c:67:d5:3e:2c:39:25:fb:28:97:83:7d:58:33:b0:
a0:00:56:e7:96:e1:aa:19:26:82:c2:67:8b:9f:5a:f0:94:b7:
ad:75:66:33:53:79:a6:0e:41:28:30:11:52:ec:1d:46:5d:f4:
5c:d5:cf:f9:2d:84:3b:83:e9:ba:5c:bd:3f:85:64:d0:93:60:
f0:dc:01:bd:1f:40:11:5f:27:6a:d8:8e:f4:9f:93:e7:90:a1:
da:ef:6f:df:f8:1a:52:ae:c8:85:b3:f6:1c:1f:e8:6b:71:7d:
e3:cc:3e:ba:26:17:8b:80:6a:a4:0c:65:b2:54:b1:fd:53:58:
c6:a0:99:b6:72:21:ab:11:76:09:3b:3b:a8:c9:27:1f:4b:e7:
3f:fa:6e:02:51:2d:71:77:ec:06:77:13:56:da:0f:bf:41:fd:
2a:2c:49:24:d6:04:fb:89:a7:b3:86:fb:b4:63:a1:78:04:0f:
2a:08:6e:52:94:f9:4b:b2:88:96:11:74:bd:f1:38:af:89:11:
d7:a0:a7:37:14:81:14:b9:5e:aa:f5:b3:b2:9e:0d:8f:83:21:
3d:1d:85:0f:e4:d4:b2:14:e4:e1:5a:3c:6e:2b:67:61:59:89:
0f:c8:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:05 2026 by rpki-client