Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: 6HzOmHly53ItKVxK/wQqoWkyhWcrl0TKYGV+Et91wCk=
Subject key identifier: 27:E1:1C:CF:73:59:5D:8A:73:B0:9C:94:15:E4:4D:42:5E:BD:16:55
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019CAA58EF7E6533A9E6ED83397CDC900312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 078F
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: /YEx7FaPpTOuOgvJz1Z9xok5GNkFNfTLvrmZn5F2/es=)
2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ef:7e:65:33:a9:e6:ed:83:39:7c:dc:90:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=27e11ccf73595d8a73b09c9415e44d425ebd1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:e2:1b:e3:db:b0:35:68:43:3a:16:9f:34:
68:4e:9f:95:c8:ec:5b:40:7f:23:c4:86:ee:00:0b:
66:03:e7:0c:fa:77:e7:6e:6b:98:2b:21:86:09:77:
b8:e8:ef:7a:13:7c:11:4d:0a:80:1f:e3:63:98:6c:
c4:0a:8a:15:a5:f1:6e:db:ce:c4:5c:35:18:18:45:
0a:fc:80:65:30:bf:04:bb:00:ec:a6:d8:b2:89:9e:
e6:b4:ba:21:7c:99:b8:ec:9d:5e:b6:61:71:89:42:
c1:48:3e:1b:30:52:7d:ef:f4:8f:66:f6:ba:a9:04:
95:96:8d:fe:63:14:1e:a6:0e:e1:b3:3c:0e:f4:8c:
a3:12:2e:d5:c8:f7:4d:93:95:a5:f1:c8:ea:3a:11:
53:8b:35:7b:15:d7:6f:66:71:94:5a:7c:21:6a:5d:
11:77:3f:ba:05:91:39:9a:80:62:d2:1f:20:37:af:
51:8b:57:30:46:e0:d3:11:47:7d:20:f3:e8:f9:c4:
85:d1:a6:ec:52:4f:50:4e:cc:8c:32:e7:c0:ca:2b:
0c:7f:bc:fe:f1:d7:0d:06:5c:f3:8d:67:9b:96:a6:
fb:93:b8:c1:10:b2:93:75:ab:f5:34:c9:e7:95:9d:
bd:77:e2:56:1d:a4:c4:a5:8d:4d:99:e1:d9:03:29:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:1C:CF:73:59:5D:8A:73:B0:9C:94:15:E4:4D:42:5E:BD:16:55
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:09:db:28:df:7e:f8:8c:26:56:21:4d:08:f3:35:19:47:a3:
90:b4:f5:5a:4b:a8:79:cc:db:fe:23:26:6e:99:35:e5:db:b5:
09:52:f5:89:24:7c:57:1e:95:79:9b:a6:17:91:5d:f0:40:bf:
1d:ad:9b:e3:4f:10:f4:51:5a:13:90:de:0e:33:40:1d:f7:60:
58:77:f4:f7:73:e3:d1:0a:e3:97:ee:4e:77:64:4c:d1:e6:bd:
d0:95:bc:d4:85:5a:fe:69:92:9e:04:e3:58:e9:a0:14:7f:37:
27:c6:b8:5f:28:f8:bb:a2:bf:33:9d:00:27:1f:d6:11:f2:02:
a6:f8:e8:e0:f7:60:6a:7f:bc:e0:8f:0a:91:cd:f4:6d:2b:c3:
90:fb:5f:ad:85:41:d7:52:ee:0a:8f:5c:47:b5:0c:a2:51:66:
a9:99:4f:65:a8:5d:12:c8:d1:19:20:90:b4:93:59:cc:35:39:
10:6f:9f:fa:b9:fd:34:6e:db:db:20:e1:dd:06:89:8a:4c:a5:
76:8a:94:c3:9c:88:7b:68:7b:84:5c:34:fc:92:82:e4:3e:ab:
7a:80:3f:58:df:ef:3e:5d:bc:62:53:f9:6a:13:5a:25:b1:c2:
4b:67:f2:cb:6b:53:81:7b:00:85:dd:3c:01:ea:ba:bc:71:85:
6c:dd:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client