Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: +k6NxAJU7+VLfFmGsbh+dJtcwua/+ZqDSwf6eUqlWRw=
Subject key identifier: 41:A3:80:81:B4:5B:BA:70:BF:B5:FC:0F:1B:F3:73:70:07:73:1C:E7
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 01A160E9BED843310452B10BDF08712477F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: 0130
Signing time: Thu 22 Oct 2026 00:01:33 +0000
Manifest this update: Thu 22 Oct 2026 00:01:33 +0000
Manifest next update: Fri 23 Oct 2026 00:01:33 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: R+7bKPQT54UHZUTyUa/QOj/19uM/gBd6W3l8POKEv9Y=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:be:d8:43:31:04:52:b1:0b:df:08:71:24:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Oct 22 00:01:33 2026 GMT
Not After : Oct 23 00:01:33 2026 GMT
Subject: CN=41a38081b45bba70bfb5fc0f1bf3737007731ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:a1:11:f8:e9:6e:35:63:6f:c6:e7:1e:2c:
5c:3b:df:61:f2:af:77:0b:b3:59:a7:74:95:95:e1:
e0:f0:6e:84:87:c7:4f:da:09:a8:0a:34:d2:23:2b:
99:f5:39:fb:37:34:e4:03:b5:2c:dd:72:24:a1:08:
b4:7c:8a:e9:4c:f3:e9:9c:df:eb:74:2c:d7:3f:22:
8c:e3:bc:f5:01:63:97:70:0b:d6:35:af:cb:4d:5e:
ab:26:65:90:89:28:16:27:e2:0a:b2:6d:dc:a9:de:
bf:a0:96:60:4f:f4:bd:e2:7b:f6:41:18:a5:86:a2:
25:b0:06:d1:f5:d6:4f:32:a0:22:b0:77:21:bf:69:
27:5f:75:45:2e:66:30:57:bf:2d:84:69:54:21:ea:
d0:03:19:d3:08:f1:f2:7d:5b:2d:a5:95:a4:bc:b6:
f5:0f:5f:80:3b:7e:3c:94:87:48:bd:57:05:4f:32:
0e:57:6e:2b:93:ca:13:ec:09:f2:2a:e9:ac:36:81:
7c:f0:8c:28:e7:de:f1:16:f9:c4:83:d8:fc:46:91:
59:ca:7d:8b:76:eb:30:2e:f1:66:db:52:e6:0b:8c:
41:d2:4a:54:8b:27:a0:27:8a:b8:ec:6d:84:f3:8d:
b9:b3:26:68:08:17:ec:f8:a6:e3:11:80:0f:fb:94:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:80:81:B4:5B:BA:70:BF:B5:FC:0F:1B:F3:73:70:07:73:1C:E7
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:90:b9:18:55:d3:fd:85:cd:16:2e:36:cc:cd:63:98:cf:61:
76:05:7e:f5:1f:2a:d4:b0:ff:be:eb:ad:34:ef:a3:bc:30:99:
2c:12:05:51:7b:43:0e:47:b4:fc:d6:16:05:50:8b:49:b3:ca:
2a:7f:43:eb:0f:7f:c8:a7:d5:3b:ce:b4:96:38:ec:84:82:ec:
48:6f:2b:65:12:6f:35:20:33:e8:20:56:e5:f6:57:1e:6d:a4:
1a:7f:91:d5:48:27:2e:32:44:9a:a7:84:94:6e:b8:70:11:ee:
8a:a0:ef:13:87:eb:86:c2:cd:50:4e:30:39:f1:67:31:5c:ca:
29:e1:30:4c:b0:19:aa:7d:46:48:b9:e9:14:7b:67:f9:04:85:
ef:4c:57:88:37:cd:12:0f:d1:da:84:2d:04:44:24:73:f3:07:
a8:7c:b1:b6:b0:58:0f:14:00:8f:82:4a:3f:af:73:0c:0e:05:
c8:0a:61:2e:c6:98:44:ca:36:29:a1:cb:64:6e:f8:29:06:ba:
19:12:ef:79:1c:c9:64:de:5b:51:13:ff:bd:4f:54:5b:de:bc:
d7:65:5d:30:ca:8c:10:64:97:62:76:0d:42:59:ed:85:ce:2a:
b6:49:13:3f:7e:b0:fa:47:5c:f9:09:ef:8d:38:2e:ce:e4:4a:
71:5b:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:39:01 2026 by rpki-client