Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: Zx1GFWqnam+BFebTGODhUbUOXfDds3sBuMittBJZ2BI=
Subject key identifier: 90:3A:6F:E6:24:28:67:B6:41:4A:21:D6:E6:12:B8:0D:28:FB:DE:5B
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 019FAC75EB9FEA1282472448CAA14ECFFE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:36 +0000
Manifest this update: Wed 29 Jul 2026 06:00:36 +0000
Manifest next update: Thu 30 Jul 2026 06:00:36 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: 5fMgtuaYd4ZzjH1qybKgfdKvcZkh0NXaC2NvYd2zAro=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:eb:9f:ea:12:82:47:24:48:ca:a1:4e:cf:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Jul 29 06:00:36 2026 GMT
Not After : Jul 30 06:00:36 2026 GMT
Subject: CN=903a6fe6242867b6414a21d6e612b80d28fbde5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:f2:11:91:6d:d6:c7:f0:6b:79:51:ba:6a:
66:17:2a:3b:e5:48:72:d3:fc:04:74:95:2e:5f:a4:
54:10:87:e0:84:cf:ab:53:c7:90:3c:f5:43:0c:73:
ec:f7:5d:69:43:50:51:4e:2e:8f:5e:b3:5b:bb:01:
81:c7:ba:ab:16:77:0b:9f:c1:a5:01:67:bf:fb:94:
ab:c5:2f:4c:a3:9f:24:7e:db:ca:4b:9f:fc:22:f3:
6b:9b:0d:a7:6b:50:b1:7a:07:2c:78:a6:a8:21:3d:
79:9c:f8:d0:bd:d3:f9:59:0e:b6:43:21:7f:71:da:
d0:30:e6:bf:15:a0:1a:95:93:42:a3:a6:cf:c7:46:
79:f1:77:b0:b0:57:70:13:60:17:f1:2d:4c:96:4c:
c4:18:7c:9f:db:3d:8d:40:cc:f4:d4:35:3a:54:ab:
62:5d:a6:91:73:77:86:aa:22:1d:89:06:94:44:49:
c1:40:b8:06:98:31:dd:64:b3:34:a9:b6:ba:d8:c9:
c0:b5:70:02:7f:8b:57:95:02:87:54:47:ca:2c:03:
12:16:47:f5:e7:4d:e2:33:37:97:02:9e:7c:f2:b6:
fc:cb:2a:e9:cd:ec:e7:a7:c7:80:44:40:59:98:49:
91:35:65:a1:c8:03:db:0e:eb:98:00:46:d5:d7:ca:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:6F:E6:24:28:67:B6:41:4A:21:D6:E6:12:B8:0D:28:FB:DE:5B
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:46:7b:7a:df:13:2f:e6:ea:8c:40:c4:59:b5:05:4d:67:c2:
48:b9:91:2a:22:3c:30:5f:c5:de:53:5e:65:62:a0:8a:13:d9:
7a:e8:55:c9:e6:d8:b6:32:69:d3:29:d8:7a:e5:3a:80:a6:4a:
ea:7d:ac:0a:54:62:40:b2:aa:6e:e7:53:ae:79:e0:23:52:db:
13:87:9f:0b:8c:80:64:f8:67:61:ef:d9:f2:2d:cd:8f:0e:18:
4f:c2:11:e5:2d:99:ec:e6:b0:be:54:59:dc:2d:a7:6e:b8:fa:
81:c3:79:bf:3e:ac:d4:a8:06:c7:47:c5:f4:56:a5:f4:12:d6:
bf:b2:57:01:15:96:b4:6e:d3:26:fd:b8:e5:6c:d8:af:e4:50:
44:49:c0:b8:92:1d:8a:c4:64:c4:f3:72:bb:de:66:19:23:cd:
26:8d:cb:bb:c9:bb:49:33:97:cc:d4:76:df:e1:1b:93:c4:4d:
25:92:17:c7:75:16:22:39:47:9f:90:d7:ae:39:57:97:87:2f:
33:17:b6:d5:16:dc:2c:62:96:7d:cb:7b:db:98:9d:20:aa:c5:
39:29:79:f3:e9:96:1a:1d:ae:86:92:66:94:50:b5:ac:10:d8:
6a:a4:08:e2:c1:bf:6c:e5:7c:71:0f:59:1e:1a:2b:28:bf:98:
60:0a:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:42 2026 by rpki-client