Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: 7HVZ35kgIpuBP5DA0bEf/oAF7el56ggSrEKXaB2rZEU=
Subject key identifier: D2:70:59:E9:98:E9:8A:A2:9A:62:32:AC:21:69:51:AB:D0:43:3A:32
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 01A001A6364A654D47D94117563DFB6E7547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 094A
Signing time: Fri 14 Aug 2026 19:01:05 +0000
Manifest this update: Fri 14 Aug 2026 19:01:05 +0000
Manifest next update: Sat 15 Aug 2026 19:01:05 +0000
Files and hashes: 1: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (hash: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=)
2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: GYQ6s1TPN/wU8rBkDqM6YQaa1qsuKWZ55ooH29O97zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:36:4a:65:4d:47:d9:41:17:56:3d:fb:6e:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Aug 14 19:01:05 2026 GMT
Not After : Aug 15 19:01:05 2026 GMT
Subject: CN=d27059e998e98aa29a6232ac216951abd0433a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:33:cc:b5:b0:b6:30:ca:81:01:17:f3:57:23:
a8:b5:11:41:36:42:ce:ee:cd:c6:97:83:bb:6f:c4:
f6:aa:81:7e:70:72:15:d9:b8:5a:7e:83:2d:d1:55:
cd:c5:22:c2:8a:a2:bf:ec:1f:3c:8a:04:2a:2f:d9:
4d:4f:38:a0:95:5f:7b:a8:55:23:b2:8d:7f:c6:0a:
2f:53:f6:54:e7:cc:70:6c:1a:85:8d:1a:ea:c3:56:
fb:84:df:45:5f:17:b4:65:6a:37:ac:68:e3:a0:26:
65:7c:d6:44:2c:56:f4:73:86:6d:0d:0c:22:70:09:
35:a3:40:43:a6:38:d2:4b:2e:bc:70:2f:8f:65:51:
07:c2:28:54:54:41:60:94:7e:59:d8:05:3a:40:a8:
1a:30:32:39:f9:06:1d:c8:b2:bf:84:62:60:62:9a:
7e:b3:69:0f:b8:f1:7d:db:51:67:c7:83:15:2a:f7:
85:13:ec:3a:7f:a0:c1:3b:7c:5c:16:6d:3a:b0:49:
2d:04:73:93:48:c2:63:5b:b2:85:de:0b:83:84:de:
3d:5a:23:79:6c:ac:c9:a6:68:71:ce:64:4c:59:ba:
00:91:87:f3:3f:15:9e:21:5b:cf:4c:58:e0:90:08:
ce:98:f8:6a:33:90:b8:59:94:ab:e2:3e:2b:83:fd:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:59:E9:98:E9:8A:A2:9A:62:32:AC:21:69:51:AB:D0:43:3A:32
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:23:31:b8:a8:b2:ff:ec:1e:19:41:39:f3:ba:d6:bd:04:54:
3f:c7:b4:b1:10:c2:79:61:13:81:22:dc:fc:12:3b:f2:f4:62:
53:65:76:67:41:23:07:77:d0:2c:36:47:21:c6:1f:97:b9:24:
cb:77:33:bb:2d:6f:f7:6a:37:c5:f9:dc:ee:83:a4:44:7d:e8:
a0:9e:5f:07:25:48:65:cb:0b:9c:6b:80:6e:4f:9d:f1:35:cc:
bf:d3:ca:d3:93:a6:96:96:ca:50:17:f5:f0:6d:d7:96:f9:07:
28:2e:24:ac:d0:2b:f6:13:12:0b:d5:e4:3a:61:33:4b:cd:fa:
3b:85:38:07:3c:80:ee:2d:54:c6:54:78:6e:85:f3:4f:e0:f1:
e1:2e:39:cb:b9:9f:66:be:16:f6:9d:b7:a8:c4:aa:1a:45:6f:
63:d7:ef:03:08:63:c5:f8:7f:7e:76:57:72:b6:fe:3a:96:c7:
b9:5d:dd:78:0d:b8:53:c3:93:1a:3d:ce:73:b2:ed:7b:d2:af:
04:15:49:ad:e0:b4:58:a9:61:f4:30:90:8a:44:31:cf:b5:cf:
45:6a:38:6f:b1:6b:30:cc:85:58:a5:24:29:d1:1c:9e:2c:e5:
a8:39:5e:50:c7:23:3a:0d:b0:36:41:73:f9:98:11:5c:be:5e:
76:47:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:21 2026 by rpki-client