Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: Em8MQnuoSvEUmoUMAP1g/DJ9IbnMiIT11s8Opb+EVh0=
Subject key identifier: 49:E7:88:F7:57:BC:68:19:51:D1:F8:0A:41:FC:87:51:AA:4B:32:21
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019FAAF5CE018548C531AA20187CC7B04B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 091D
Signing time: Tue 28 Jul 2026 23:01:03 +0000
Manifest this update: Tue 28 Jul 2026 23:01:03 +0000
Manifest next update: Wed 29 Jul 2026 23:01:03 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: YbvninLczTjKEh7eeBNOM4/8YY9VW3ObNaNHPi3CJNs=)
2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ce:01:85:48:c5:31:aa:20:18:7c:c7:b0:4b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Jul 28 23:01:03 2026 GMT
Not After : Jul 29 23:01:03 2026 GMT
Subject: CN=49e788f757bc681951d1f80a41fc8751aa4b3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:2c:d0:bb:df:af:a6:1a:16:42:2b:28:6a:
17:ec:e6:4e:a8:ed:a0:0d:4d:e0:52:73:3a:ca:0c:
a7:b9:1b:fc:4b:9b:73:7c:28:ab:1c:74:6f:23:61:
ab:0e:7e:40:d4:3b:1c:c6:d4:f8:4c:ff:9f:8a:b7:
b5:bf:68:6f:2c:a0:d2:4f:80:32:64:ff:1a:ad:e9:
9c:8c:94:e4:17:22:22:67:d4:51:f2:92:93:de:08:
fb:3d:37:a5:8b:38:38:39:74:e1:7e:89:01:a1:fa:
9f:ed:f3:b6:79:ac:75:4d:c0:e4:34:ff:ef:cd:42:
c5:b2:ed:56:26:9c:c0:5d:51:3c:c4:f4:61:35:2b:
88:11:a1:b2:0f:9c:29:50:4e:95:57:55:38:c6:a4:
a5:f2:26:65:83:dc:8d:70:73:0f:0d:03:7b:dd:02:
99:33:62:71:c5:a5:bb:f3:42:71:36:74:bc:28:71:
f1:29:cf:e0:62:e5:15:6a:5c:6a:6b:9b:76:75:9c:
23:52:5d:c3:cc:f3:c4:17:86:01:27:ad:91:08:0b:
13:7f:23:db:f0:85:e0:03:af:a9:d5:ea:7b:22:3c:
ab:56:a8:c6:db:f8:98:75:20:47:d5:9a:39:43:55:
8e:7d:bb:25:9d:eb:78:b9:9e:a5:a8:79:79:d0:a4:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:88:F7:57:BC:68:19:51:D1:F8:0A:41:FC:87:51:AA:4B:32:21
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9d:d3:80:06:5a:c9:21:f6:d4:16:dc:52:a5:a3:02:4b:b2:
b6:a3:ee:53:37:87:4b:7b:3c:1f:48:57:11:78:a1:bd:1e:3a:
0f:e0:03:4c:60:b0:e0:77:c3:ef:55:44:31:8a:7c:64:12:88:
8e:fa:bb:4d:03:8a:55:87:32:e0:84:91:0c:c7:be:02:09:f2:
81:f4:21:d1:17:78:a2:50:0b:c4:ea:37:53:a3:c0:b2:4e:8b:
77:d1:9d:12:c7:5c:5c:3d:9e:b1:ca:b5:3e:50:72:d9:c5:53:
f1:3f:de:bb:2a:50:51:4f:25:e6:84:41:36:b5:99:a2:b8:53:
6c:8b:7d:5c:9f:c7:29:82:11:7b:8a:d6:4f:99:c1:a9:1f:e1:
c8:4f:24:c6:3c:0a:7c:7f:46:32:99:94:32:19:4b:86:d0:7e:
9c:fb:71:2a:21:30:02:be:9c:d7:7f:da:d0:50:f7:72:19:20:
52:03:3e:e4:5f:97:d1:b8:04:a5:60:4e:24:29:92:e0:fd:91:
4d:9e:5d:f6:91:dd:71:db:1e:67:95:1d:91:a6:14:66:cb:30:
fd:66:c2:8b:a7:10:a2:08:8f:de:82:97:20:c6:21:93:3b:86:
08:d4:81:df:37:58:46:7f:05:d5:c5:ac:d8:5d:02:ef:59:84:
f5:ef:99:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9c4BhUjFMaogGHzHsEs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzNmYzQwZDJlMDMzM2JiYzdiZGVhYjJiZDg1OTk1NDMw
MWMwZjEwHhcNMjYwNzI4MjMwMTAzWhcNMjYwNzI5MjMwMTAzWjAzMTEwLwYDVQQD
Eyg0OWU3ODhmNzU3YmM2ODE5NTFkMWY4MGE0MWZjODc1MWFhNGIzMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfAs0Lvfr6YaFkIrKGoX7OZOqO2g
DU3gUnM6ygynuRv8S5tzfCirHHRvI2GrDn5A1DscxtT4TP+fire1v2hvLKDST4Ay
ZP8aremcjJTkFyIiZ9RR8pKT3gj7PTelizg4OXThfokBofqf7fO2eax1TcDkNP/v
zULFsu1WJpzAXVE8xPRhNSuIEaGyD5wpUE6VV1U4xqSl8iZlg9yNcHMPDQN73QKZ
M2JxxaW780JxNnS8KHHxKc/gYuUValxqa5t2dZwjUl3DzPPEF4YBJ62RCAsTfyPb
8IXgA6+p1ep7IjyrVqjG2/iYdSBH1Zo5Q1WOfbslnet4uZ6lqHl50KQRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnniPdXvGgZUdH4CkH8h1GqSzIhMB8GA1UdIwQY
MBaAFH8z/EDS4DM7vHveqyvYWZVDAcDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQt
Nzk3OTBkNjZkN2QzLzEvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQtNzk3OTBkNjZkN2Qz
LzEvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ3TgAZa
ySH21BbcUqWjAkuytqPuUzeHS3s8H0hXEXihvR46D+ADTGCw4HfD71VEMYp8ZBKI
jvq7TQOKVYcy4ISRDMe+AgnygfQh0Rd4olALxOo3U6PAsk6Ld9GdEsdcXD2escq1
PlBy2cVT8T/euypQUU8l5oRBNrWZorhTbIt9XJ/HKYIRe4rWT5nBqR/hyE8kxjwK
fH9GMpmUMhlLhtB+nPtxKiEwAr6c13/a0FD3chkgUgM+5F+X0bgEpWBOJCmS4P2R
TZ5d9pHdcdseZ5UdkaYUZssw/WbCi6cQogiP3oKXIMYhkzuGCNSB3zdYRn8F1cWs
2F0C71mE9e+ZUA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:56 2026 by rpki-client