
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: oh60YH7t5WI/EWMkkoJL8kh+CAiFJAVGPMMwV7jNJ+w=
Subject key identifier: 5D:C6:8F:EB:A4:0F:A2:BD:F2:CF:C7:D7:AF:DE:AA:C8:D1:0F:78:0C
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 01A1423A911D3CD0D107F0CFC129FB98ADE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 09F0
Signing time: Fri 16 Oct 2026 01:01:36 +0000
Manifest this update: Fri 16 Oct 2026 01:01:36 +0000
Manifest next update: Sat 17 Oct 2026 01:01:36 +0000
Files and hashes: 1: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (hash: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=)
2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: 3kdhpDKYiH94MTo1vKL7B9ObkaDbhmXgkVRR4/iN1Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:91:1d:3c:d0:d1:07:f0:cf:c1:29:fb:98:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Oct 16 01:01:36 2026 GMT
Not After : Oct 17 01:01:36 2026 GMT
Subject: CN=5dc68feba40fa2bdf2cfc7d7afdeaac8d10f780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:e3:25:bd:09:c8:d5:18:a6:1b:b9:0e:b0:
c6:d8:53:a0:3b:13:8f:a0:41:a6:aa:6d:2a:06:fc:
32:8f:e3:89:95:96:11:49:ca:4d:67:7f:42:b1:a3:
71:c9:6d:6c:46:8a:94:23:05:cf:a0:5b:3f:9f:3c:
9e:d6:e1:0d:ab:62:f7:1c:da:04:f5:4e:7c:71:70:
ef:00:32:a1:e7:0e:4d:b2:17:58:b6:85:3e:ab:d8:
6c:a0:f7:40:73:01:8a:46:43:f9:09:07:df:56:62:
5f:8d:6d:ff:db:fc:8e:ee:90:9a:27:42:cc:6e:6a:
cc:53:5d:b5:2f:9d:68:5e:55:2e:5c:12:77:08:e1:
b0:db:c6:38:6c:26:d8:ad:8c:96:2f:5d:6e:21:55:
64:94:0f:9f:1f:b0:a8:f4:70:30:f8:be:22:d3:8e:
0e:b8:22:fb:0d:d5:38:51:76:fb:02:f4:23:d5:49:
61:fa:01:be:c9:a4:85:38:e2:16:8c:3a:ee:bc:9d:
4d:a5:fb:99:20:dc:7e:3c:ad:14:4a:f3:27:fb:85:
a9:e4:fd:72:68:22:a7:3f:9c:7d:cb:25:df:f0:2d:
14:27:83:e5:30:54:fe:8e:d8:da:f1:d7:39:34:05:
7c:1e:af:82:6a:60:d5:26:1a:ba:ca:50:0f:3f:db:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:8F:EB:A4:0F:A2:BD:F2:CF:C7:D7:AF:DE:AA:C8:D1:0F:78:0C
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:e1:fb:6a:9f:16:e4:4e:2a:f3:37:85:0f:72:90:4e:b1:
32:74:05:5b:2a:60:6f:98:04:31:58:a4:73:f5:03:d5:8b:25:
28:e1:3a:64:f9:05:42:f9:4a:67:59:24:18:53:db:10:63:00:
bd:29:e6:0e:47:c5:1b:ba:5e:69:6c:be:2b:df:20:cc:4a:42:
f7:88:4b:15:48:65:ea:90:61:52:1f:95:34:32:6b:32:7d:0a:
a3:b7:e8:b9:d6:7e:e7:aa:7d:41:75:a8:c1:35:42:48:49:11:
79:57:b8:91:27:ab:c1:1e:22:15:fe:df:b5:99:4b:7a:6a:85:
21:ad:69:fc:40:6e:7c:69:44:57:af:46:74:4a:bd:33:61:a7:
49:b4:bc:dc:61:a0:dc:46:dd:e1:57:d1:75:6b:a1:95:59:9e:
40:36:d9:65:8b:9a:ac:a8:fb:e7:b9:e1:b9:5b:81:58:00:63:
f3:41:94:96:05:d8:02:51:db:d7:b4:e3:fb:a8:bb:27:5a:36:
b1:db:64:a8:48:8c:22:18:5b:74:a4:a7:db:d0:58:61:34:03:
39:af:4b:5d:93:84:ea:d4:b5:5d:80:44:04:1d:cd:51:66:de:
ec:5b:4f:1c:0f:59:5b:d3:af:0e:f4:77:99:78:50:bc:3b:72:
49:ee:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:23:03 2026 by rpki-client