
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: ZlBomeJKWazPhohm8D+YZd9JlKxiNWkIDlrH3DiHQQc=
Subject key identifier: 3F:5B:B9:E5:36:0B:DF:3E:4E:1C:18:42:12:23:C7:92:AE:6C:3C:AE
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 01A14428C2E13681C467C606D92AF5506F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 09F1
Signing time: Fri 16 Oct 2026 10:01:24 +0000
Manifest this update: Fri 16 Oct 2026 10:01:24 +0000
Manifest next update: Sat 17 Oct 2026 10:01:24 +0000
Files and hashes: 1: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (hash: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=)
2: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: GYqh9SWZhkIU7UT8RF9JShXls8i5NIEwBKxsquTRD0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:28:c2:e1:36:81:c4:67:c6:06:d9:2a:f5:50:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Oct 16 10:01:24 2026 GMT
Not After : Oct 17 10:01:24 2026 GMT
Subject: CN=3f5bb9e5360bdf3e4e1c18421223c792ae6c3cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:25:88:af:ca:50:44:31:a3:05:92:1d:a4:
50:51:e6:e7:22:63:bb:26:2d:13:61:8f:59:03:da:
ab:c2:ba:4a:f2:b5:b0:73:d0:9f:b4:66:af:9f:b2:
b7:29:84:a7:92:4c:4d:71:2d:e4:67:da:b7:97:f7:
aa:15:46:0b:cd:38:6e:a7:e8:05:0f:de:3c:fd:23:
3f:b8:d4:d0:f8:da:26:48:54:cc:32:8b:05:eb:1f:
9c:5f:de:c0:17:25:c2:a4:75:bf:8c:eb:ea:8e:62:
5a:ad:bf:4b:70:17:dc:68:1a:2f:73:ae:fd:30:9b:
c5:2f:20:2c:33:a4:ae:a8:d7:df:d0:e9:17:b3:97:
cd:cf:2d:6e:82:0c:bf:82:5b:43:00:e6:a1:a7:5e:
bb:6d:03:e0:b8:0d:6f:4d:81:85:b6:29:27:a6:dd:
c0:53:23:9d:d5:1f:f9:8d:f6:17:07:fe:5a:23:58:
eb:6f:a0:5a:bb:f3:4d:dc:3d:79:8f:76:3f:84:e8:
df:4a:24:0d:b3:be:94:dd:d0:1a:7f:a1:2e:bb:4b:
44:a5:d1:98:91:cb:86:f4:ec:b5:ee:30:11:a3:78:
60:ff:3b:5b:ec:79:76:f2:25:9a:2a:b6:45:0c:83:
2f:b0:80:36:50:06:ce:95:44:d2:5b:b4:a4:88:73:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:B9:E5:36:0B:DF:3E:4E:1C:18:42:12:23:C7:92:AE:6C:3C:AE
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d7:d1:24:fe:73:93:91:0c:bb:d2:59:2a:58:33:a5:df:6f:
cc:be:70:d1:d5:8d:c2:7d:df:c6:59:78:62:56:65:d5:97:92:
e0:12:de:da:33:fb:62:e0:d0:e3:f1:9e:ba:0a:14:8e:52:9c:
48:86:d8:1f:92:9a:6a:20:95:af:61:31:06:48:7c:2f:64:2e:
0a:6a:a0:01:01:94:73:f1:68:ff:d8:7a:7d:68:12:93:ea:bd:
c2:ec:79:9f:8d:c5:77:e4:c6:ef:b1:09:55:bc:ce:90:ad:2f:
01:4a:3f:64:bc:7c:ad:01:ad:c4:8c:39:26:d2:99:62:22:55:
78:fd:31:50:53:a6:e0:7a:b7:ea:ba:ba:dc:27:71:71:32:86:
ff:e5:7b:42:e2:32:ed:ba:10:7f:b7:38:37:16:b8:38:a2:08:
11:fc:9a:2e:71:53:c2:c3:98:c6:0e:c4:92:16:04:9e:8a:67:
23:ae:70:82:87:0b:0b:02:ec:e2:42:19:56:62:4a:98:7c:59:
37:df:dc:ae:99:bf:3f:e6:9f:25:c7:be:45:f6:86:71:c4:2a:
99:69:5c:52:6d:73:bf:ad:b7:ff:fe:c1:46:71:cf:af:a0:88:
e8:57:ef:b9:f4:9f:69:8b:29:3b:03:56:05:b8:bf:b1:ec:a5:
0d:a6:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:42:45 2026 by rpki-client