Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier: PoF/AQeip4wCVG6bObnsCkN3ULMOQ/EgyjCH8nTuQK4=
Subject key identifier: 9E:78:DF:B8:78:C5:48:69:CC:D2:8D:83:DA:36:10:1D:52:79:05:07
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 019FAAF607055BA1F908CEB1CFFF2AF137EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number: 12B3
Signing time: Tue 28 Jul 2026 23:01:17 +0000
Manifest this update: Tue 28 Jul 2026 23:01:17 +0000
Manifest next update: Wed 29 Jul 2026 23:01:17 +0000
Files and hashes: 1: GGZjVcrh7o5QnLA3XYwWxwIPlsw.roa (hash: RM/Nw8R0IKgYPKDSKvz2CTTdZeBN9XNA59dgKmXAkeU=)
2: U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa (hash: Fsw63Ry87JP1NMdSW0Lo12MCLQq4XEdntr9zF454Dbk=)
3: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: 20jPi/YPRaKNNbEiIFbE+B21LbaT7PCC47ZKSm+xE7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:07:05:5b:a1:f9:08:ce:b1:cf:ff:2a:f1:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jul 28 23:01:17 2026 GMT
Not After : Jul 29 23:01:17 2026 GMT
Subject: CN=9e78dfb878c54869ccd28d83da36101d52790507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:37:cb:85:29:de:69:9e:7a:1a:09:1b:d4:
86:1a:1f:30:6a:03:f2:98:10:46:bd:45:d0:21:3e:
73:43:e3:d2:17:a0:7a:f9:8d:6c:cc:2e:62:a6:0f:
09:a4:fb:34:8c:8f:19:26:91:de:2e:cb:c6:9c:7b:
3a:54:ce:97:47:3a:a9:da:1e:c8:e4:5d:b7:4d:f2:
3f:fa:43:0a:01:ae:88:dc:c8:8b:f9:a1:60:00:23:
2d:87:eb:26:5c:64:eb:95:cc:34:8a:ee:5b:95:1b:
91:88:4e:8b:f9:3f:e0:04:75:4f:6a:9b:81:cf:0c:
03:76:1c:7b:7a:bb:78:63:ee:61:a5:c5:0d:d6:73:
df:11:23:3a:f5:c3:3e:ed:bc:72:62:d8:2c:40:dd:
83:e1:26:ab:44:55:28:8a:e7:f8:e9:92:9a:59:30:
90:bf:bd:7b:00:72:14:61:c2:b0:c9:27:de:1e:34:
0e:87:9c:73:fb:b7:de:65:43:1e:53:4c:c0:b8:fc:
da:cd:f6:17:95:0d:cb:04:15:57:0b:d8:ed:83:bc:
31:36:34:55:6e:dc:55:9b:a1:02:55:7b:53:48:e2:
d7:19:d5:70:e6:50:a7:de:56:3f:35:83:fb:23:ed:
94:2a:ae:c8:62:b3:f8:1a:20:18:9c:07:ec:ad:e2:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:DF:B8:78:C5:48:69:CC:D2:8D:83:DA:36:10:1D:52:79:05:07
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:94:f0:04:4d:f9:25:53:bf:97:e9:1b:0b:fe:2c:f6:92:
85:2e:4a:be:bd:0d:c9:bc:b6:40:d1:dd:8c:ac:00:39:0b:a4:
42:3b:61:fe:75:66:70:49:13:57:93:ec:6e:63:6b:17:b9:3f:
4e:ab:2a:f1:ba:52:02:5f:fb:dc:b8:e4:3f:fe:b0:2d:f3:38:
12:95:49:e6:b0:ac:8c:15:ec:9d:20:a7:27:b4:dd:3b:20:7c:
fa:58:c2:8c:a3:5d:4d:56:63:9c:18:21:a6:5a:9e:4f:fc:68:
49:79:bb:06:5d:30:d8:d1:51:85:eb:f7:0f:23:86:69:1c:f3:
7b:59:84:6e:ae:33:50:66:bc:37:5c:ab:d2:db:ae:57:3f:42:
59:6b:cc:6d:61:a8:70:74:65:84:5f:7f:e8:23:5e:af:e4:50:
40:37:0c:da:92:c7:12:c9:d3:d8:50:4b:5f:a4:f4:15:45:4b:
00:c7:79:e2:00:2e:2d:6a:b1:35:8d:b9:1c:74:19:9a:32:c7:
bd:ac:4f:e0:d4:e0:a7:56:cb:d0:4a:3e:43:5e:86:e1:72:a0:
a1:d1:af:8c:80:dc:e0:b3:6c:4b:c6:d8:ad:c1:a7:b7:ce:ed:
d6:78:3b:20:92:58:9c:26:99:94:f3:88:17:59:4e:25:93:3d:
04:38:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:36 2026 by rpki-client