Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
File: fzErCdH2kPJXAL1dzwfJGAxelmM.mft (raw, json)
Hash identifier: oPGUfawvBPL9EomecxepWpmQIZkN5WlzivG4tI7Ot64=
Subject key identifier: A7:51:A5:AD:C0:BE:8A:B2:40:B1:4D:4A:03:7B:29:70:80:31:DA:EF
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 01A06F8402A40145B721A8CAA3A1A4C78D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
Manifest number: 0362
Signing time: Sat 05 Sep 2026 03:01:57 +0000
Manifest this update: Sat 05 Sep 2026 03:01:57 +0000
Manifest next update: Sun 06 Sep 2026 03:01:57 +0000
Files and hashes: 1: BCFG1E3vkLJzX3xYHBAXCR2M-Dk.roa (hash: kLXCiyzJI0lL3gfuo31f6jHCm4NoCsgw/6nrJV+kat0=)
2: fzErCdH2kPJXAL1dzwfJGAxelmM.crl (hash: NeGpNgLKmtVTCWUf/PlagPKyxwEaaBROWT1NeBLtVCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:02:a4:01:45:b7:21:a8:ca:a3:a1:a4:c7:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Sep 5 03:01:57 2026 GMT
Not After : Sep 6 03:01:57 2026 GMT
Subject: CN=a751a5adc0be8ab240b14d4a037b29708031daef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:e6:28:ed:21:4a:50:27:3f:ff:dc:ea:0b:
4a:fb:7c:1f:93:e4:29:7b:33:c3:26:38:fd:7c:d0:
c2:46:29:d6:54:97:f9:96:fd:0e:34:5c:3a:89:cd:
d9:fd:6f:d2:fc:57:1a:9f:f7:89:36:e0:93:ac:86:
d2:83:11:4c:0f:e2:de:ad:af:47:51:93:0f:95:16:
66:59:eb:ab:a3:47:8e:0f:52:53:15:01:43:00:39:
32:07:3d:42:3e:ee:fd:27:84:22:4c:ee:ce:99:bc:
99:53:9b:bb:8a:a0:59:65:f6:5b:bb:eb:3e:f1:b9:
5b:82:4f:7d:70:66:7f:63:6f:17:ba:91:5f:c7:20:
7f:db:d5:d3:34:10:81:0a:8f:35:65:05:b6:2e:62:
62:3e:a4:27:e7:19:c6:35:a4:92:06:47:0b:ba:bb:
df:2f:52:be:fa:bd:0a:c4:19:30:25:89:43:cf:0d:
b6:fb:a3:c4:c8:60:99:2f:67:0f:5a:ca:37:93:54:
9d:17:d1:50:24:d2:86:00:8f:fa:9d:1b:d2:c5:ba:
04:af:2b:47:da:70:40:a8:c9:03:2a:24:a5:b0:3e:
0a:e9:fe:bd:99:87:e1:6e:f3:fb:1d:a4:32:e5:d0:
ab:51:90:55:fe:c7:a9:ef:f3:5b:33:4d:cf:01:12:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:A5:AD:C0:BE:8A:B2:40:B1:4D:4A:03:7B:29:70:80:31:DA:EF
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:84:d0:ff:4a:5b:58:6f:5b:15:b4:ce:50:d8:41:61:a1:c6:
86:a1:3d:38:b8:f5:f1:68:d8:71:b1:ad:98:bf:0e:6a:da:1e:
e7:5e:2d:3e:57:86:79:f4:86:d7:b2:b2:80:bf:03:29:b8:2e:
fc:3c:a6:61:84:33:c2:4d:29:da:1b:ce:25:de:9a:5e:74:9f:
09:d8:0e:c3:80:66:8e:f3:32:42:18:4e:75:50:75:56:37:cb:
7f:1e:08:7c:ce:be:7e:02:76:6e:57:ee:c3:e3:d6:16:9f:cc:
17:12:4b:62:36:da:a7:0f:d7:f0:2d:37:1f:5f:e7:85:15:2b:
04:13:dd:94:3e:f6:e9:6a:0f:2a:51:ec:cc:7c:de:45:ad:f7:
ef:ff:b7:5a:39:59:b2:77:6d:23:ad:da:1d:3f:74:68:e8:47:
18:22:00:65:d2:9e:fe:cf:fa:95:91:b1:20:0a:d1:d4:19:d0:
fe:ac:bd:68:68:95:0a:82:8f:c1:b1:6e:17:ba:ab:76:de:90:
39:81:1a:0b:e7:a4:91:b7:45:f6:c2:6b:99:6e:04:e6:20:be:
39:2a:7c:76:2d:d9:a8:1f:aa:fc:cd:b4:9f:5b:b5:fa:14:60:
76:1b:a8:0c:05:84:2e:d5:fb:9c:e1:bd:07:a0:f3:a1:cc:ca:
24:c9:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:08 2026 by rpki-client