Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: CfbP4L4+64kgfl2JbEd3rRD3f/PNroDsQhLUYVQF6Xo=
Subject key identifier: 9F:DE:74:27:5D:8E:9C:8A:BE:EB:24:54:AF:4D:39:D7:15:CE:EF:A0
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 019F89B2D6AE29AF36A1C4BDC9F3BD576278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: 3C
Signing time: Wed 22 Jul 2026 12:00:26 +0000
Manifest this update: Wed 22 Jul 2026 12:00:26 +0000
Manifest next update: Thu 23 Jul 2026 12:00:26 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: 4Mg6p5axBMn90WYFw/YeNLTjDuRnpzaqkVihrzmihRw=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b2:d6:ae:29:af:36:a1:c4:bd:c9:f3:bd:57:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Jul 22 12:00:26 2026 GMT
Not After : Jul 23 12:00:26 2026 GMT
Subject: CN=9fde74275d8e9c8abeeb2454af4d39d715ceefa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:51:55:83:66:a3:01:7f:19:08:ec:fd:be:
c2:70:71:c6:df:f3:4c:cc:dd:fd:4c:42:0b:dc:22:
48:d4:c1:4a:4c:8c:de:5a:30:8b:5f:20:d9:a9:66:
b2:5d:ff:25:8a:00:4c:51:90:1e:88:5e:e2:3e:89:
b9:f4:c7:ea:14:51:b2:90:51:56:bd:3a:e9:57:6e:
21:e1:53:28:96:f9:bb:9f:f8:94:4b:86:2b:fb:21:
86:af:95:4f:52:2f:42:e5:1c:0a:cd:d7:a4:86:8f:
29:cc:83:bd:09:71:c5:b1:d4:d7:05:29:a9:b7:f0:
58:9e:37:a6:38:9e:02:18:dc:cf:38:f9:3e:de:3a:
6d:ef:80:98:2a:fc:f5:a0:9a:3b:9f:6b:ac:7a:ef:
f6:25:71:5c:7e:b6:86:8a:0e:db:4e:f7:cb:b0:29:
7b:2c:c0:d6:6a:5c:d1:63:be:68:26:0d:db:bd:63:
a4:11:14:e4:f0:21:dc:3b:fe:30:67:78:cb:0a:8e:
d7:30:dc:23:51:91:15:7f:ab:72:1f:87:7e:76:b2:
63:13:72:52:aa:4e:d8:6f:64:1a:55:80:df:93:dd:
8f:69:4e:61:32:12:2b:87:40:3e:80:b8:66:0f:53:
ce:8e:f3:28:d6:2b:cd:4a:96:61:e5:ab:f9:f4:8c:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:74:27:5D:8E:9C:8A:BE:EB:24:54:AF:4D:39:D7:15:CE:EF:A0
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:f7:a1:0c:62:64:fb:60:b0:b8:70:8e:9d:0e:0e:87:00:
c0:d0:91:4c:7c:9d:75:47:e6:76:74:6b:44:d1:bd:ac:6c:03:
74:7d:cc:ff:f9:fe:5f:97:5c:26:46:59:e0:6b:ad:ea:74:8e:
d4:72:f6:75:b6:a6:c7:36:e4:ac:99:9b:fd:94:36:9b:42:a5:
0f:ea:92:13:55:d7:1e:67:0a:ce:21:f1:5c:95:5a:7d:28:42:
4c:51:80:b3:58:b3:e0:55:db:08:b1:ee:13:bb:9c:ec:3d:b8:
fb:d3:48:e7:41:b9:eb:fc:e6:c1:cd:27:25:29:48:9a:8f:bf:
64:84:f6:8d:38:91:75:21:85:2d:56:c1:3f:5f:c4:fd:62:2c:
ef:7f:0f:fe:99:1c:b2:1b:61:11:0e:bd:fc:37:2a:c0:07:bf:
f4:04:99:8d:9e:bb:92:65:6f:e3:81:b3:35:e9:67:8e:fc:43:
58:c3:7f:c8:af:24:39:90:c2:e8:6f:bc:b3:43:d1:30:b0:33:
4d:f5:22:f4:e6:bd:9d:8d:2d:06:f7:45:32:7f:4f:66:25:17:
51:2d:b5:5b:42:04:6d:96:3c:a5:02:ae:6f:7a:e3:fe:84:16:
1e:96:4b:25:41:7b:f6:e9:35:02:2a:01:dc:d4:af:46:b6:07:
de:17:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 14:59:57 2026 by rpki-client