Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: kmZcaRMtdzznXwDqUzTcpZZOuLdXldKxgU+BP7sIqrw=
Subject key identifier: A8:51:4A:4F:5D:1C:3A:09:C4:A8:0F:12:28:16:0D:21:6C:49:23:3B
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019D97E1C5EAA9206218BED56C95B9DD2A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 080A
Signing time: Thu 16 Apr 2026 20:00:48 +0000
Manifest this update: Thu 16 Apr 2026 20:00:48 +0000
Manifest next update: Fri 17 Apr 2026 20:00:48 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: P1800RZlWk6jSpG/scyCCH798CMU00FhfKk2QPVGUM4=)
2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c5:ea:a9:20:62:18:be:d5:6c:95:b9:dd:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Apr 16 20:00:48 2026 GMT
Not After : Apr 17 20:00:48 2026 GMT
Subject: CN=a8514a4f5d1c3a09c4a80f1228160d216c49233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:a6:b8:10:5a:64:b1:de:2f:36:72:ee:5b:
2b:9a:79:34:6c:30:f9:c3:01:61:2d:87:71:7b:07:
33:4a:5c:5a:b2:3f:4a:5f:0d:d6:87:2d:ee:17:cb:
0b:27:3f:a4:80:bd:9b:55:6a:46:10:f6:cc:74:04:
00:1f:82:52:33:00:fc:2a:45:b5:2a:2f:43:f3:5e:
1b:e1:b2:69:29:72:d4:90:2b:cc:ff:1c:bc:5e:95:
ef:9a:1c:dc:fd:da:76:ce:ce:7d:12:30:fd:73:04:
3a:76:83:45:2c:13:a8:11:be:dd:7f:96:23:81:14:
d9:a9:c5:f4:6b:a1:43:06:96:34:4b:a7:d0:8b:81:
d7:64:f8:75:11:36:b8:78:32:73:0b:17:93:cc:02:
86:0e:d8:13:ca:f0:ef:b1:aa:ec:d6:84:47:51:fb:
ec:80:03:22:c3:e7:a8:7e:27:af:67:d3:e5:9e:54:
12:98:a3:86:56:73:5a:6d:05:ea:7b:a5:fb:a2:04:
67:7b:45:ae:86:44:27:b1:09:c7:3e:c3:68:7c:81:
bc:8a:fd:e0:e1:78:74:99:9a:50:d3:36:9b:68:16:
e3:74:a5:21:3e:4a:48:ff:47:91:c1:ac:8b:75:aa:
8e:8a:c9:89:ea:14:bd:3b:8b:84:f8:fb:c3:2a:17:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:4A:4F:5D:1C:3A:09:C4:A8:0F:12:28:16:0D:21:6C:49:23:3B
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:4d:21:b9:85:4b:47:8b:2d:81:1a:9c:12:f9:71:9f:a2:
20:0c:d3:fe:61:d7:14:b3:db:03:dc:2d:62:ed:be:5b:a3:7e:
73:08:dc:64:d0:6d:2e:69:83:21:60:e1:ad:1f:ba:59:bc:d5:
98:c4:65:78:89:91:6f:3b:cc:12:3e:f4:84:8d:ea:c9:34:e6:
f1:3d:f2:82:81:b3:92:92:89:a4:ad:04:8b:bd:fc:67:e8:d5:
67:3f:35:c6:a6:ba:6b:fb:e8:91:3f:ff:18:82:74:0c:1e:c2:
0e:74:0d:0f:f8:20:0b:b1:fd:a2:1b:7d:e1:e6:6d:59:e1:4a:
57:fd:8b:2d:e0:da:26:fa:98:0a:80:4f:9c:14:eb:e2:78:52:
d2:6d:4c:9e:4a:73:52:35:03:5d:fa:06:2e:28:1d:61:4a:cd:
24:12:9f:e3:cf:0a:80:4b:3a:5f:8c:a5:91:46:49:c7:a4:89:
b9:ec:6d:d8:bf:76:8f:4e:9b:d5:56:76:ec:f2:e1:97:7e:cd:
5f:c6:32:6e:19:55:99:ef:64:b6:aa:2e:c3:54:63:0d:c9:cc:
a5:d1:f2:84:43:ec:73:eb:79:5f:4b:5c:4a:46:41:74:84:bf:
24:ee:68:f0:3d:29:be:57:d1:67:df:af:ef:ec:a7:66:73:3f:
9f:67:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:26 2026 by rpki-client