Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier: 7JSad6rqVVZSmYUfT4IzcFsvuzVQVSa/0oaXlAE8ias=
Subject key identifier: A3:E4:D9:8C:53:FD:DB:90:D1:0E:F4:E9:B6:F2:00:13:15:23:DF:D8
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 019CAAFD2AB4E113955D2697846B92D894AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number: 1120
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa (hash: Fsw63Ry87JP1NMdSW0Lo12MCLQq4XEdntr9zF454Dbk=)
2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: gEsdriq5XMm5tmoGkk9V/WvA5DioMS4GeEvmRS06UEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2a:b4:e1:13:95:5d:26:97:84:6b:92:d8:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=a3e4d98c53fddb90d10ef4e9b6f200131523dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:db:1e:a5:a2:82:d3:68:45:c6:eb:b1:b8:
6e:43:df:40:73:7f:15:0f:f9:27:43:b1:dc:fe:de:
9c:5c:46:26:65:61:ac:75:b5:b1:a6:0f:7b:20:2d:
c2:ad:98:bf:3e:31:3e:0a:3a:59:26:25:fe:fd:5a:
d5:9c:ba:94:c0:e7:d5:37:c2:5f:8c:b1:82:5f:58:
34:71:4e:46:68:58:95:51:78:1b:9e:97:c0:fa:cc:
cf:7d:f8:d7:af:36:48:03:09:3c:93:ea:8b:fe:ee:
76:29:e1:10:3d:0e:5d:2d:b3:c0:f4:7e:0f:53:7e:
36:cd:b3:e3:eb:88:5c:48:8b:5e:73:8b:83:ff:10:
2f:9c:23:28:c4:b0:8b:28:7c:b8:0f:06:87:19:6d:
b7:aa:9a:a3:b2:61:cc:1c:5a:ee:f1:32:ac:72:97:
ea:9b:17:32:a3:73:4d:20:ff:68:9b:88:29:25:df:
cd:ad:6a:1c:01:fb:86:7b:ae:76:b9:f2:16:fe:88:
d6:76:b3:bf:4b:be:18:49:9e:e8:cc:c4:07:a5:6a:
4a:a5:8d:2d:49:04:e9:01:c3:07:3c:62:c8:f5:d6:
dd:7c:8e:55:7d:31:98:72:0d:17:8c:2f:10:45:32:
b5:37:30:d6:25:99:13:8e:2d:9b:fc:cb:7d:59:9d:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E4:D9:8C:53:FD:DB:90:D1:0E:F4:E9:B6:F2:00:13:15:23:DF:D8
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:78:26:69:74:c1:06:09:d1:72:75:49:e8:f9:66:75:07:
dd:33:65:b2:37:68:c4:a9:d0:21:6b:89:90:de:5f:5f:8b:44:
96:20:79:c4:51:b4:bf:66:a7:37:91:b5:98:2a:46:d0:8c:88:
19:9a:d0:07:50:36:ae:12:fe:2d:78:67:f1:1c:aa:7f:22:cb:
6d:5a:52:13:a5:ae:37:0f:62:de:fc:fb:49:ca:6c:2b:ec:ab:
5e:00:fc:6e:0f:17:5a:54:c7:fe:d9:07:6e:3a:eb:a2:0b:f1:
56:19:aa:07:56:9d:cf:14:2a:1d:78:33:62:57:1d:0b:71:3e:
e1:0e:aa:e0:bc:d6:3a:ac:97:8f:69:e0:27:e4:b2:19:96:c1:
d2:e9:9f:62:43:0b:6b:78:de:2f:6c:59:c8:99:a2:0d:78:0b:
3d:f3:0a:99:b7:8f:9f:06:54:91:09:b9:1d:70:96:87:93:ef:
67:3b:53:82:13:86:87:cc:f5:7f:b6:17:05:41:da:82:4f:9c:
07:4e:89:fc:96:3c:96:35:be:2f:67:83:96:df:a8:72:eb:c1:
b4:89:9e:82:57:51:e5:9c:48:b8:80:32:71:b9:7d:cf:71:b1:
71:54:48:65:38:ed:37:a3:fd:00:fe:c0:51:de:28:24:05:ba:
42:7e:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:08 2026 by rpki-client