Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: I0KbEQiqsixuP3Dh3aZprdP8TuJ9/UolZA/bWP6jdew=
Subject key identifier: 2C:B2:69:A0:A5:18:55:EE:ED:7E:EB:69:5A:9E:A6:0E:F8:D8:85:8B
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 01A0E32BF61C931D249AFFB7FB6B5B05DBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0D9B
Signing time: Sun 27 Sep 2026 14:01:44 +0000
Manifest this update: Sun 27 Sep 2026 14:01:44 +0000
Manifest next update: Mon 28 Sep 2026 14:01:44 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: LaCX7jT+E0s7iakkfCQ5M1E0ZqF7Ifq38MdFDNltvWU=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:f6:1c:93:1d:24:9a:ff:b7:fb:6b:5b:05:db:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Sep 27 14:01:44 2026 GMT
Not After : Sep 28 14:01:44 2026 GMT
Subject: CN=2cb269a0a51855eeed7eeb695a9ea60ef8d8858b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:58:ac:2e:c6:53:75:1c:5a:bb:36:0f:e6:
1b:d0:05:00:26:72:64:c6:ac:45:29:c9:ca:58:4d:
7f:2b:a5:a0:40:f5:94:25:66:3d:b7:bc:fe:23:24:
2f:aa:0d:7d:0a:e0:ff:51:fd:13:c6:7d:db:5a:e9:
67:4a:3b:0d:fc:4a:d2:e3:7d:56:8c:f6:96:36:53:
2b:f1:7b:f5:77:b4:11:2e:a0:27:6f:15:08:23:c0:
43:d5:31:4c:7d:af:76:4e:6c:79:6d:e4:e2:df:e9:
21:78:58:e6:4f:69:f0:c8:e2:c1:e6:8d:db:77:01:
ac:f5:0a:b7:c7:e8:72:16:b4:b4:2a:79:42:12:51:
55:64:ff:6a:89:93:50:b0:b5:6b:e2:bc:fc:d8:82:
c5:3b:4d:c1:e4:04:c5:4b:2d:3e:23:ca:96:6c:ca:
78:1a:52:52:e9:74:6a:41:60:e0:94:df:d1:eb:ab:
4b:f8:c4:4d:17:ca:2f:74:bb:2d:71:39:51:1c:8c:
83:70:7f:7e:80:32:dc:eb:36:c3:30:d0:9f:23:15:
13:46:41:d5:80:65:b1:56:5c:94:b0:df:fe:80:20:
95:1a:0b:85:f8:71:1c:41:65:f7:cf:b6:d0:9e:73:
11:86:c0:34:8c:48:46:e9:0c:69:05:4b:f1:2b:8a:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:69:A0:A5:18:55:EE:ED:7E:EB:69:5A:9E:A6:0E:F8:D8:85:8B
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:06:9b:38:70:99:3b:7d:61:ce:3d:5f:cb:7c:b3:8c:5d:0d:
18:96:11:0a:f7:53:fe:1d:bb:09:68:a0:d8:5e:99:0b:9e:fd:
a9:78:fc:41:5e:04:f5:23:e6:94:f9:83:f4:80:39:4a:46:86:
7a:1b:57:1c:72:01:45:55:7d:55:f6:34:3f:b4:5e:f9:a4:cc:
f5:cc:8c:7c:37:51:94:b5:c8:a4:4b:b3:f9:a6:a4:f6:af:0a:
8c:b3:7a:d8:58:9a:7a:5b:85:0d:48:04:20:25:79:f2:e9:4a:
05:66:9c:02:4d:6d:0e:c3:00:88:e5:ff:21:3f:b8:1e:a7:65:
43:05:5a:6f:92:cf:16:ea:69:12:32:4d:a3:18:bd:41:76:b4:
49:a2:34:8f:41:eb:c0:7d:ec:3f:a2:9e:55:6d:13:c8:92:fe:
1b:43:29:e2:bf:0a:1d:ec:ae:92:4e:ae:38:d5:4e:3b:38:79:
f6:4e:86:8a:2e:a2:09:4c:23:a8:a1:b3:30:dc:49:c9:41:81:
d9:6a:d5:82:84:12:c4:d7:97:12:9a:08:3c:d8:08:a3:26:13:
3f:f6:11:36:c4:32:f4:3a:ea:a7:c3:d1:26:4e:fb:65:00:ec:
c3:fe:de:3d:eb:56:33:23:d9:6f:9f:14:52:bc:59:a4:47:40:
0c:f8:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:50:41 2026 by rpki-client