Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: C8rlCw0tPMLA/WHvE4A35VsnyUOgdaU+Vu8pz3CVjXg=
Subject key identifier: 17:26:20:F8:F3:B7:14:99:66:48:9F:44:97:A3:5C:4C:A4:37:B6:B9
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 01A0C66B05FA7A733449ED47E82AF9C12D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:37 +0000
Manifest this update: Tue 22 Sep 2026 00:01:37 +0000
Manifest next update: Wed 23 Sep 2026 00:01:37 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: Yl/t9MxlvwZlbyv8GPEnH7Aq+Tmn3tsomfKgLLkJQ0U=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:05:fa:7a:73:34:49:ed:47:e8:2a:f9:c1:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Sep 22 00:01:37 2026 GMT
Not After : Sep 23 00:01:37 2026 GMT
Subject: CN=172620f8f3b7149966489f4497a35c4ca437b6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:b8:3e:6a:35:85:42:39:65:36:f7:7b:e8:
84:48:72:f9:a8:53:60:3a:f5:d8:f4:93:d4:9b:8e:
a7:85:25:af:f1:31:2e:9f:dc:69:38:dd:31:94:33:
ef:71:5d:7f:e2:3e:b4:95:83:91:a1:aa:1c:f2:92:
01:0d:2c:3d:8b:ad:89:07:63:5f:bb:16:a5:5d:03:
72:5e:93:4c:b6:cb:b8:36:fa:90:98:6f:86:30:43:
d5:f2:13:47:5d:73:fc:c0:ea:61:a3:73:03:26:dc:
f7:02:de:4f:6a:a6:35:9e:c4:0f:bf:b2:79:e4:ba:
e1:d6:40:43:1a:ce:03:db:52:b3:71:c0:67:60:41:
6f:55:6a:27:9c:79:30:5e:c7:cc:95:c0:71:37:d1:
a6:5d:a8:5d:fe:36:a0:f3:5b:c1:88:cf:64:5b:af:
96:93:eb:0b:4e:3b:0c:95:1c:cb:5a:44:49:67:20:
c5:13:dc:1e:a0:62:f5:05:c6:bd:47:c5:6f:a2:85:
1a:ec:25:67:65:6f:20:82:a6:cf:af:c5:1e:fb:f5:
5b:7c:0d:f0:dc:56:e6:58:56:3d:02:25:f0:d8:de:
76:94:8e:9f:7a:7c:d6:2e:9f:a9:fd:48:95:13:27:
99:05:6a:82:b6:7d:31:e8:7c:7e:c8:6b:8e:ba:11:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:20:F8:F3:B7:14:99:66:48:9F:44:97:A3:5C:4C:A4:37:B6:B9
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ed:16:e2:e5:63:af:77:5f:b8:ba:1b:6e:68:b5:29:34:db:
19:37:2e:34:36:82:1d:7d:7b:af:af:e1:4d:cb:0a:7b:32:76:
66:00:79:f7:62:19:ba:1a:fa:3f:8d:6b:ba:b0:4a:fd:a9:6c:
31:40:f9:e0:aa:9b:f8:af:40:94:55:e9:98:aa:00:63:26:9d:
4a:18:73:ec:e4:27:d1:34:98:ef:0e:19:8b:b6:07:03:54:44:
5d:6a:b9:1c:18:e6:3c:7a:e6:53:b0:41:1e:fd:f5:a1:9c:f2:
70:6d:9c:72:55:87:43:6e:d0:36:66:86:3a:b2:35:ed:bc:df:
7d:56:28:af:6d:7a:6c:2e:86:cb:0b:b6:93:25:fa:99:aa:7f:
7c:8d:5d:06:bc:d0:82:61:07:f3:52:84:95:83:c9:1b:71:83:
52:d4:77:21:10:b2:87:96:1d:cb:ca:47:79:94:23:b9:d2:66:
aa:69:5d:79:cb:a5:a7:d9:5d:6b:c8:b2:9b:40:75:ab:c3:d5:
fe:1a:66:72:81:b0:64:4c:5a:d1:b7:18:f7:ab:6f:3b:6f:fa:
12:a0:03:66:15:7c:b0:89:ce:15:26:7e:36:f9:6d:9c:94:7b:
df:6e:be:2b:1b:f6:c0:d4:3b:0c:95:89:08:bd:a7:c4:cd:cf:
c5:98:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:45 2026 by rpki-client