Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: wo5o8dH+A9/Qb5R752HDUHq6b/HTiFFrhLc0FBpkyJg=
Subject key identifier: 4F:33:B2:5B:73:DC:0F:7F:8E:B6:60:E7:7C:3C:5D:E0:98:43:40:DA
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019CAB348ADFC20AF2086DE39D0E4AF3AC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 15CF
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: IBfMvbxboT7q07qmRd-Z-auoMxY.roa (hash: M2necPHfBLeWIy1vVtOPQiCkqRUXkFRpCHpeFgAr5p4=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: L0VM17zeQvW+RXYRLNk8bjIaGh337KdjCVlvs2djeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8a:df:c2:0a:f2:08:6d:e3:9d:0e:4a:f3:ac:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=4f33b25b73dc0f7f8eb660e77c3c5de0984340da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:31:08:1f:a6:40:34:11:98:3f:88:ef:7d:
de:6c:9b:1e:57:ce:ea:d3:06:a2:bb:71:f4:03:e2:
31:42:96:74:c4:21:f6:6a:e6:d4:60:ab:f0:e0:09:
e5:94:51:09:93:2d:0f:42:d3:5c:4e:89:1a:b3:a7:
0c:5a:73:65:71:14:0c:cb:60:ab:a0:c7:8b:25:67:
29:75:b5:0e:31:2a:23:ce:46:86:3a:e3:cd:20:b8:
db:8c:c6:a2:0e:28:cb:69:e0:db:04:da:aa:a2:0b:
1a:3e:cc:06:fa:fa:91:ab:70:90:40:21:43:7a:a5:
70:76:47:c2:f5:49:00:bd:e4:39:d8:22:3e:e4:30:
90:fa:7e:74:87:3b:df:56:a4:71:5a:93:c0:cc:d6:
87:36:da:b6:4b:6e:ff:c0:25:a7:d2:c2:fb:e3:c5:
12:6e:d0:d4:a5:ff:8c:3c:58:e6:75:36:8d:7a:de:
51:80:26:14:2f:c2:28:d4:44:c3:9f:f2:9e:36:80:
f4:7e:30:be:c9:b5:7b:a8:8d:77:ca:96:c7:93:3b:
4e:85:4c:ee:69:98:6e:d7:b4:9a:fe:6d:d9:a9:1f:
f4:16:69:c1:b6:e9:3f:83:0e:af:0c:92:ca:40:42:
71:ed:85:e1:ab:2e:b8:19:de:a7:80:11:10:8c:bf:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:33:B2:5B:73:DC:0F:7F:8E:B6:60:E7:7C:3C:5D:E0:98:43:40:DA
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:98:2e:88:b5:eb:68:5a:e5:18:6d:26:98:53:c8:62:c6:de:
56:81:f1:52:9d:fd:0f:2a:ed:ef:0c:37:46:1d:af:f3:bd:55:
fd:d2:95:e1:3f:d6:ff:82:70:3e:3a:42:a4:a0:31:22:10:04:
b0:d9:a3:b9:e3:37:03:b3:2e:d0:46:01:d3:4e:3d:63:f5:c2:
36:fe:b1:a5:27:b9:9d:2c:16:27:fd:09:ae:bf:09:5d:0c:bf:
16:14:91:aa:03:98:d7:75:af:13:97:2f:14:fd:c2:ca:a8:81:
10:7a:11:64:c1:fe:cf:22:14:02:97:9c:b6:04:c1:04:f4:aa:
f7:77:bd:33:e9:19:d7:ae:80:7b:ab:b2:5a:31:78:45:5f:87:
aa:8f:44:05:c0:8e:f1:c2:92:1c:ef:71:4d:82:6d:cb:af:8b:
4b:c3:eb:62:51:9b:42:eb:08:5e:8a:fb:23:da:ea:34:51:a4:
95:ac:76:bb:4b:6a:7f:eb:49:b1:2b:2b:62:34:46:c4:27:dc:
56:04:21:33:85:0b:21:fa:6a:16:da:cd:fa:29:a4:38:e3:e2:
2d:a4:7c:7a:3a:06:bb:5a:29:95:30:bb:2b:ab:d0:cd:ef:d5:
7b:e0:e5:6e:4a:f4:61:4f:23:31:2c:ff:4d:a8:1b:10:76:81:
d7:63:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:36 2026 by rpki-client