Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File: frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier: 7n/oAzUTo6BIj10DjoWXGoAB3stAbaPIkPkU/lXoc4o=
Subject key identifier: AE:9C:08:F9:C6:BE:A2:CB:BF:06:BD:2E:8C:0B:E7:75:48:81:E3:18
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer: /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial: 01A08C7ADFA1D7D3A0C5A49AD860510A7167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:57 +0000
Manifest this update: Thu 10 Sep 2026 18:00:57 +0000
Manifest next update: Fri 11 Sep 2026 18:00:57 +0000
Files and hashes: 1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: NWQw4IarlgWG8PFcrZB8HR8Vd72+UQrGGjs0EvtasKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:df:a1:d7:d3:a0:c5:a4:9a:d8:60:51:0a:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Validity
Not Before: Sep 10 18:00:57 2026 GMT
Not After : Sep 11 18:00:57 2026 GMT
Subject: CN=ae9c08f9c6bea2cbbf06bd2e8c0be7754881e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:0f:2c:4c:5e:6f:17:5b:84:0b:6c:25:2f:
85:b6:9d:29:30:c8:7d:ab:49:44:ef:4e:d3:c3:04:
0a:5e:c0:d8:19:11:ec:43:54:73:97:63:a1:c7:1a:
00:65:0e:bb:9e:24:c8:dd:67:3f:13:19:04:a1:9e:
df:4b:cd:64:fe:63:93:f4:b9:fe:8f:7a:e9:01:7f:
4d:6e:44:0c:81:8e:3a:7c:4f:4f:45:6f:d9:c2:d1:
7e:70:65:ab:44:d0:55:ba:54:38:72:1a:8e:61:2b:
39:74:1b:ee:45:58:18:22:a3:6a:12:56:d6:61:92:
38:84:b3:b0:37:83:1b:fd:46:6e:88:fc:a2:01:54:
b7:fa:3e:8d:f0:05:f3:a6:81:41:5f:f3:f2:63:47:
02:b4:84:b2:4a:d4:ff:a5:51:72:9d:3c:1d:a8:89:
7f:ff:30:67:90:34:85:9b:10:22:0c:a8:67:98:ea:
d1:94:45:7d:dd:99:bd:e6:20:d8:af:a1:b9:aa:7c:
9b:b5:e2:06:3a:ae:c9:ec:ab:f7:a2:06:79:b0:54:
38:91:81:c9:da:66:e3:18:60:59:80:d8:69:34:a4:
e6:d1:ca:76:0d:c2:ac:15:ef:6f:31:b2:97:bd:a7:
07:00:c6:de:0a:19:e9:fa:d6:b1:c6:4c:54:3a:1d:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:08:F9:C6:BE:A2:CB:BF:06:BD:2E:8C:0B:E7:75:48:81:E3:18
X509v3 Authority Key Identifier:
keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:98:8f:ff:39:29:cd:a9:ef:59:f1:35:17:3c:d4:76:40:
a3:dd:7a:1f:da:04:cd:aa:b6:9e:02:f5:92:1a:79:69:bf:7f:
e8:37:41:24:8e:b8:6e:d9:e2:ad:74:cf:93:ca:17:dd:78:1b:
2c:52:5d:65:1a:30:3f:d8:36:84:c0:43:27:1b:73:9b:7a:14:
7f:ff:8a:11:0e:5c:d4:01:4f:2e:58:05:72:6c:97:9b:2a:f6:
4a:26:4e:36:4a:71:68:9b:1b:1b:82:db:e6:d3:81:fe:c8:1a:
bc:db:3b:f7:79:bc:b7:a6:df:00:06:2f:9f:b7:19:e9:5e:19:
ff:1f:6c:04:0d:c0:63:f0:4d:c0:8a:3e:52:1c:d1:d9:88:02:
c1:01:01:db:fd:0a:e0:4b:68:67:1c:ca:f1:63:94:be:c0:ff:
a5:c7:09:91:02:0b:48:e7:ee:e2:d8:ac:3e:e9:d8:5d:b8:e6:
25:42:67:1e:1c:aa:20:72:05:93:15:59:1d:47:b2:a1:e7:41:
44:50:bf:74:ef:09:96:c1:ba:a2:41:29:1e:ae:1f:b6:6a:c3:
2e:9c:4c:7b:a8:69:a5:df:36:bf:31:80:d0:57:84:b1:b2:dd:
63:91:d2:02:a0:ce:66:14:57:33:21:41:6e:3e:68:3a:db:a0:
4b:8a:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:41 2026 by rpki-client