Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
File: fzErCdH2kPJXAL1dzwfJGAxelmM.mft (raw, json)
Hash identifier: nLuhzm+NKvtzrtdoLuNsiRjgkl6f8V8iqRCzWGnrH/A=
Subject key identifier: DF:77:AB:D7:DE:24:CE:D7:78:DA:62:52:A7:10:1F:9F:90:19:3C:A6
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 019F85D61CF05CD6C4F964869F573C9755EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
Manifest number: 02E9
Signing time: Tue 21 Jul 2026 18:00:29 +0000
Manifest this update: Tue 21 Jul 2026 18:00:29 +0000
Manifest next update: Wed 22 Jul 2026 18:00:29 +0000
Files and hashes: 1: BCFG1E3vkLJzX3xYHBAXCR2M-Dk.roa (hash: kLXCiyzJI0lL3gfuo31f6jHCm4NoCsgw/6nrJV+kat0=)
2: fzErCdH2kPJXAL1dzwfJGAxelmM.crl (hash: 5Fg4Gp9uVGOTQ3cjpcUfYXBG4Ay1uWNF33JNrQy1oYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:1c:f0:5c:d6:c4:f9:64:86:9f:57:3c:97:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Jul 21 18:00:29 2026 GMT
Not After : Jul 22 18:00:29 2026 GMT
Subject: CN=df77abd7de24ced778da6252a7101f9f90193ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:84:c4:f3:d7:f9:25:f9:a3:e7:4b:77:77:
f0:a4:45:02:c2:d8:6d:52:28:32:b2:63:58:bc:3d:
55:7e:d5:23:0a:09:87:73:09:b4:27:e4:f4:9d:dd:
69:af:05:b4:95:de:aa:a8:72:4a:a9:b9:a7:fa:8f:
fd:8f:38:fe:14:0e:5b:61:07:29:02:0f:3e:54:81:
25:1b:7e:2c:2f:24:29:17:f6:3a:a2:5c:af:f3:44:
1e:a8:9c:40:bd:14:92:b1:18:69:be:10:c7:f4:02:
8a:67:a2:c5:4d:91:10:24:e9:4a:9c:1c:c4:ad:70:
b1:b8:a5:36:c4:b0:87:41:b3:d1:08:76:4a:36:4c:
57:a4:e0:c2:3e:79:5c:49:af:a7:31:12:be:e3:88:
7f:dd:94:6c:72:f2:6d:de:4e:30:60:cc:13:1e:48:
91:24:70:58:ab:84:5f:f1:40:36:55:47:cb:68:c4:
28:e4:1d:f8:b5:6c:38:80:5a:88:f3:7a:9f:25:dd:
f1:2c:a9:b2:32:8c:be:4b:5c:3c:7d:15:e5:fe:e0:
8b:bd:c9:0d:1f:4d:a3:1b:e3:22:4a:61:31:1d:ce:
96:c6:d5:eb:b5:7b:77:98:09:98:f4:b3:85:68:84:
77:44:56:37:21:6c:37:d4:c1:11:78:ef:24:3e:9c:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:AB:D7:DE:24:CE:D7:78:DA:62:52:A7:10:1F:9F:90:19:3C:A6
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:01:b2:83:c6:2f:69:6e:f1:1e:b5:1c:3e:e5:57:06:4c:
58:cc:bf:a2:e2:3f:43:56:ea:63:61:8e:59:18:52:c5:ac:16:
f6:df:50:7c:5a:95:d6:f8:b3:07:52:13:44:bb:cd:e1:f3:a4:
a9:76:b2:9e:3c:79:ed:34:8c:92:95:b5:21:11:1e:fb:f3:71:
f4:54:18:bb:27:09:8e:62:ca:ba:fb:db:d8:af:5e:7d:07:01:
51:7a:fb:65:02:60:36:a7:53:7b:a5:4d:0c:e6:66:f0:81:79:
e0:6b:20:4f:7d:05:1c:36:13:99:3e:7a:c8:19:50:aa:b5:2b:
85:ef:49:1f:a4:74:da:bf:c9:32:a9:7d:9c:d9:be:b9:bc:ad:
db:0f:cb:79:47:ac:84:91:cb:50:01:92:a1:32:23:34:01:19:
c5:97:a9:db:ce:00:21:fd:8c:0f:5e:4d:d9:65:44:2b:5c:ee:
92:9a:b7:50:90:48:c6:88:96:13:e2:60:65:ed:96:ef:4e:6c:
be:34:a3:40:27:4e:af:c2:fb:1c:e8:c7:ce:1b:ce:f1:6d:81:
32:e4:74:e1:cf:08:92:30:39:c5:ea:cd:2e:9b:bb:78:6e:f4:
e6:eb:6a:85:ef:8b:a5:e6:8e:c4:b2:38:cb:a5:5e:63:ec:02:
b8:1f:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:12 2026 by rpki-client