Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: YhN+W3n7OMZHfFtBSVlNEoRSjN1JLe/IHuU1St2ad1w=
Subject key identifier: 16:FC:A0:C3:7C:77:A1:F1:0F:07:26:A1:CA:B2:9D:FE:F4:B2:80:37
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 01A17F9865E317793D472F499F708966797B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0DEC
Signing time: Tue 27 Oct 2026 23:00:56 +0000
Manifest this update: Tue 27 Oct 2026 23:00:56 +0000
Manifest next update: Wed 28 Oct 2026 23:00:56 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: mFQRlJWG45hopt5zUosX2Tsjv/Y0t2PtmQGSvUZO88E=)
2: MGtxVWyhVK0lWfP7HIuyo6Z779c.roa (hash: 8WjcCYYvvx1tso1uS8oBUcI7fs9A/6vnMSY/6bY059M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:65:e3:17:79:3d:47:2f:49:9f:70:89:66:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Oct 27 23:00:56 2026 GMT
Not After : Oct 28 23:00:56 2026 GMT
Subject: CN=16fca0c37c77a1f10f0726a1cab29dfef4b28037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:96:b5:3f:2c:b9:4f:24:80:bc:08:19:41:e4:
57:6a:fe:c5:64:80:31:10:e2:e9:ae:9e:89:22:de:
80:d7:a8:0f:db:ea:89:c1:fc:cd:dc:b9:d4:0a:21:
4b:b3:4c:c4:8e:3e:62:ba:d6:64:ba:0d:94:36:84:
dc:ce:a8:c6:87:44:9e:8e:ca:75:84:d3:1e:75:7c:
e6:7b:4f:79:20:99:5e:87:00:58:68:d5:a8:71:4f:
b0:63:ce:ce:6f:e0:43:d3:c7:8c:09:f6:21:e2:76:
26:cd:52:fd:d5:09:fd:05:99:d4:cf:f0:65:29:7b:
00:22:51:ff:dc:f5:0e:3b:1f:1e:77:34:1e:d9:18:
ab:e5:b9:46:57:06:75:96:91:e0:e1:38:a1:3c:e7:
bd:4f:b0:52:c6:09:a9:d1:d7:76:08:73:f9:f6:a9:
ef:5a:d9:ae:0d:d6:bc:16:fb:1b:28:94:53:e9:91:
b2:2c:6b:cf:7c:14:d3:54:af:dc:9a:da:a4:99:28:
c5:a3:ca:dc:91:96:b7:a8:47:48:e4:65:db:4d:22:
22:ce:ad:c0:b3:c0:38:5f:60:74:cd:ee:b0:da:1d:
ce:f2:6c:77:21:8a:48:2b:fc:52:f3:d6:0a:6c:8c:
4a:b0:e7:29:39:b9:b6:8a:8f:a6:40:3f:34:c6:39:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:A0:C3:7C:77:A1:F1:0F:07:26:A1:CA:B2:9D:FE:F4:B2:80:37
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:26:22:fc:50:7e:9e:93:f5:f4:2e:4a:68:71:61:47:0c:
6d:54:39:92:fb:61:c0:71:43:d0:f8:0d:ea:3e:d0:aa:da:94:
fc:42:52:ca:33:28:3a:a4:2b:35:56:b5:24:79:e3:6d:e4:80:
2c:e4:38:6d:6c:44:86:77:a9:8c:ec:fd:18:d5:d8:59:f2:41:
55:65:a6:f6:82:5e:91:1d:bc:c5:0d:9a:36:60:9d:70:8a:0b:
5f:6d:6c:b9:c5:85:50:28:c1:0e:84:08:16:d5:dd:72:40:a3:
eb:82:d7:cc:d6:bb:30:d2:f6:7d:75:5a:e3:c6:51:bb:6a:03:
0c:57:94:a1:46:c2:d2:cb:08:93:e3:0f:9e:97:50:8c:66:cd:
ec:45:80:b1:e0:bf:ea:7f:b8:5f:34:cd:da:9b:29:30:51:b2:
96:36:f9:09:02:ff:af:bf:ae:48:05:df:d2:22:5b:1f:7f:8f:
5b:50:3d:cc:ab:90:5e:0c:1d:85:82:e2:73:4d:34:ec:c5:51:
78:a6:d4:a6:31:33:c3:78:6c:82:e4:74:d4:c0:45:9b:26:f9:
4b:9d:06:eb:40:10:d8:e7:f2:93:da:4f:b2:e8:7a:c9:df:89:
c3:7b:3c:09:07:3b:bb:60:9e:5f:c9:ab:52:4f:f8:72:5d:a5:
6c:89:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:15:27 2026 by rpki-client