Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: Zi/osWNoJGcx7/rY3vtv0ZQ5igTNOt7WpG+KGHXMY+o=
Subject key identifier: 8E:BC:FA:69:80:9E:1A:90:CE:84:34:50:88:37:EB:A7:4D:55:C8:52
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019D382DDC9A7455D62E5B2EDF4877A801AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 1618
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: IBfMvbxboT7q07qmRd-Z-auoMxY.roa (hash: M2necPHfBLeWIy1vVtOPQiCkqRUXkFRpCHpeFgAr5p4=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: BgqABxyh3LjaAj9PXNyFoMq/UiQnHK/YqUVkOt7uAEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:9a:74:55:d6:2e:5b:2e:df:48:77:a8:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=8ebcfa69809e1a90ce8434508837eba74d55c852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:84:eb:ae:74:7a:8b:ea:36:56:ab:d5:c6:
3b:38:50:3e:b0:d4:14:92:2f:78:ac:7f:32:a4:8c:
6f:d5:82:e0:0c:e9:49:38:27:13:13:32:37:5d:3e:
25:81:17:9c:78:e7:ed:41:09:e9:00:f4:06:0b:ad:
e8:1a:4e:d4:56:43:ea:9f:46:65:a6:62:8c:07:96:
04:3c:13:c4:83:bc:47:bf:88:a9:82:c5:c3:a4:86:
70:c3:bc:3d:11:75:c1:fd:7b:cb:de:71:51:d2:8d:
d7:de:f0:8b:5b:1f:4d:20:48:70:aa:a0:8d:90:e4:
28:c8:51:21:f1:b3:44:59:59:33:44:e4:8e:b8:a3:
d1:c4:11:f6:7a:64:f3:07:57:04:a1:7a:e5:fa:f0:
d1:da:35:37:cd:7e:25:52:75:b4:80:5d:28:cb:99:
3e:98:0d:e0:8c:ef:c7:88:cc:c8:ee:6d:16:e0:a6:
1f:f0:40:31:26:4a:eb:20:87:24:c5:e7:93:59:f1:
d2:28:b1:f1:7f:ab:23:88:03:e3:81:65:c5:43:b2:
6f:d3:e3:37:53:86:94:76:f3:17:44:36:0c:52:f9:
e0:4c:b1:fe:34:63:fa:36:80:7e:2d:2b:0a:9b:34:
e8:6e:1a:25:72:c1:ff:78:49:7b:51:fc:6f:0e:1a:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:FA:69:80:9E:1A:90:CE:84:34:50:88:37:EB:A7:4D:55:C8:52
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:28:e2:65:15:77:d9:ac:ed:77:b1:e3:a8:cc:48:17:8d:
52:c7:6f:4e:dc:f0:30:56:5b:91:23:00:27:1c:e9:cc:bb:b2:
bf:ed:1a:bf:cf:ab:56:72:c6:66:cf:85:66:8e:c7:54:3e:c4:
e6:a8:89:0f:e4:9a:29:32:c4:20:93:10:bf:b4:47:f7:cc:f3:
68:7a:cb:e6:78:07:c8:99:c7:ec:35:22:c7:b9:7e:af:0c:5f:
83:ae:10:b4:d0:3c:34:9b:cf:9f:88:f8:80:35:74:57:17:10:
f9:b2:14:31:13:73:e1:0e:67:5b:7b:f6:0a:dc:24:71:e5:07:
bf:44:92:aa:ac:e6:b4:62:30:6b:ed:8c:94:92:73:43:96:66:
83:2f:5c:ff:c5:2c:04:48:06:55:de:0b:8a:18:ea:69:9c:f3:
32:98:f6:61:85:95:24:16:ca:4a:66:54:7c:d6:91:ad:11:57:
09:76:e4:a9:86:2d:9f:cc:6f:bd:35:ec:7f:8b:23:72:c4:b8:
c7:1b:c7:bf:c2:35:93:04:d1:9e:10:f7:fb:e7:d8:61:be:18:
85:12:a5:31:62:02:b0:51:7e:5d:e5:28:08:b5:a5:cc:41:09:
2d:66:78:f5:d1:e5:0a:d2:32:2e:d9:07:a3:05:48:ba:a1:8c:
f6:42:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client