Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
File: fzErCdH2kPJXAL1dzwfJGAxelmM.mft (raw, json)
Hash identifier: pZth9YHMbmOWuk3lwaTr8MT6RvBMHPnzTJ43GRGGtYY=
Subject key identifier: 06:91:F9:1E:B6:55:1D:D7:81:C8:B4:EB:97:F6:5E:A2:BA:5C:20:CA
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 01A18788233BB6C9025710CEE9F8F2450498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
Manifest number: 03F3
Signing time: Thu 29 Oct 2026 12:00:08 +0000
Manifest this update: Thu 29 Oct 2026 12:00:08 +0000
Manifest next update: Fri 30 Oct 2026 12:00:08 +0000
Files and hashes: 1: BCFG1E3vkLJzX3xYHBAXCR2M-Dk.roa (hash: kLXCiyzJI0lL3gfuo31f6jHCm4NoCsgw/6nrJV+kat0=)
2: fzErCdH2kPJXAL1dzwfJGAxelmM.crl (hash: F4jLt+rFIY/R/dBMG3p/nBigxh+MKrIdrprztKNA3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:23:3b:b6:c9:02:57:10:ce:e9:f8:f2:45:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Oct 29 12:00:08 2026 GMT
Not After : Oct 30 12:00:08 2026 GMT
Subject: CN=0691f91eb6551dd781c8b4eb97f65ea2ba5c20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:d4:47:19:84:4d:2a:e0:f1:bd:74:49:6b:
28:e6:9f:68:c7:37:80:14:c7:db:a2:6e:e5:2a:4e:
2b:d1:93:d3:41:29:50:a0:b2:70:bf:6c:84:12:a4:
41:6e:ed:96:27:ff:60:33:38:f5:49:05:67:78:03:
02:2a:84:a1:39:64:dc:31:c4:8d:54:b4:c7:da:9d:
97:1b:fe:fb:49:cc:d7:aa:65:70:82:40:2e:8c:a7:
2a:cc:cc:20:e7:f5:db:0a:f3:41:66:1f:81:09:25:
3b:9b:03:97:2e:43:81:56:0c:17:86:02:c7:f8:c4:
68:e9:df:c0:4d:15:fd:e4:0c:2a:c0:b4:64:77:c0:
ea:44:46:01:32:4b:36:ef:27:9b:ee:5a:79:ce:8f:
a0:73:15:36:18:47:e0:0f:38:4f:a3:a9:39:31:a2:
bd:4b:7d:55:ff:37:e9:e0:45:01:83:8b:77:f9:c2:
ab:89:f2:ba:7b:cc:4c:84:1d:ce:36:26:d0:65:6e:
75:52:73:c7:de:ee:8d:7a:04:4c:1b:23:20:10:fa:
0e:f5:59:fd:e0:d4:97:51:d2:1c:62:18:e6:2a:48:
03:26:58:17:2a:18:8e:65:6a:53:37:6a:0b:ed:53:
1d:b4:b6:89:87:9b:46:de:01:55:43:09:72:60:3d:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:F9:1E:B6:55:1D:D7:81:C8:B4:EB:97:F6:5E:A2:BA:5C:20:CA
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:73:5c:8f:50:a1:63:9c:70:eb:6c:38:8f:08:30:7d:54:ea:
a2:aa:ca:3a:ef:d6:3d:55:fd:1b:25:5f:f0:75:8a:c4:5c:5a:
5c:f4:20:45:76:6b:43:2c:1d:b7:c0:b7:38:7f:2b:07:97:ad:
f5:8c:32:56:42:96:cf:94:cb:39:35:8c:cb:10:de:47:3f:5b:
8d:67:ce:be:b1:56:f9:96:a3:83:86:6e:b6:b6:97:7d:21:33:
e0:8d:b5:f4:4d:31:be:cd:2c:a5:b8:82:f2:22:ba:71:79:6c:
05:1f:b5:84:7f:f2:e2:63:b9:dc:22:1f:58:99:c9:c7:71:a5:
39:4a:0b:2a:6b:f5:77:01:ee:91:92:2f:ad:e9:f2:70:c1:71:
49:c5:2a:99:62:8c:44:b2:b6:c1:92:0c:ff:34:51:08:fa:d7:
8b:9f:33:7a:73:10:35:92:0a:57:8a:3e:07:f4:80:72:f3:56:
89:3d:f8:fd:a5:d7:45:2a:a2:90:fc:af:17:33:5b:18:ca:1c:
74:d9:6d:cc:61:ad:af:b5:27:fd:43:b1:81:41:b6:4d:4d:9d:
a5:c9:24:ac:de:0d:ba:8c:29:69:78:fc:64:37:80:a9:61:60:
79:74:22:3a:38:ec:a6:8d:20:0c:90:52:a8:bc:22:91:a9:bf:
91:2a:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:52 2026 by rpki-client