Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
File: FzRcaeFU7lOIKDvz5snbVfKxMsI.mft (raw, json)
Hash identifier: SRc24BtNX40JKYT7WTkajfRkTqi8QRHa5YYex2/1Z+c=
Subject key identifier: 7D:60:D3:3B:7D:D2:77:91:88:72:5E:66:0A:75:83:FE:65:2F:7E:EA
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 01A1743965BB47D0E9FD41CBE566DFAD464D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:20 +0000
Manifest this update: Sun 25 Oct 2026 18:01:20 +0000
Manifest next update: Mon 26 Oct 2026 18:01:20 +0000
Files and hashes: 1: FzRcaeFU7lOIKDvz5snbVfKxMsI.crl (hash: Pa1Du4fQjW9peVKlV2ahg74vAdxKHnf2f5UuGrK+BbQ=)
2: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (hash: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=)
3: NjPNLbddg7jy4Dd07bs-t0WERwU.roa (hash: +4Mpa3m1RFVURrfR0J5ARKu8E9FOLTOL6abGB7S0sUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:65:bb:47:d0:e9:fd:41:cb:e5:66:df:ad:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Oct 25 18:01:20 2026 GMT
Not After : Oct 26 18:01:20 2026 GMT
Subject: CN=7d60d33b7dd2779188725e660a7583fe652f7eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:2b:7e:3e:28:11:67:24:b0:46:be:37:fb:
86:6b:78:0a:67:52:32:66:f8:fd:99:34:e1:f9:39:
1e:15:73:be:a9:ff:c5:ec:51:8b:20:33:e4:1f:e2:
2b:97:25:a2:6d:c5:9f:80:eb:df:1f:9a:c7:85:ae:
7d:ed:88:bd:cd:9b:94:1d:1d:4e:25:2c:b4:f3:56:
8e:39:25:af:52:45:03:6c:2f:1c:9d:9b:da:fc:57:
f9:bc:f9:c0:fb:c3:a3:4c:5f:0c:2f:74:7f:17:51:
8d:98:98:60:e2:c2:68:32:9c:17:20:79:3d:e1:66:
fa:9e:25:c5:b7:e0:b6:43:68:7c:1f:3b:c7:77:d0:
34:ce:fc:8c:c7:9e:1d:90:d0:d2:09:34:ec:84:9b:
8b:f5:90:6c:d0:3f:fd:53:ee:f3:6f:02:5d:45:5c:
ae:75:33:f2:e2:25:53:8f:e6:18:cb:b1:0e:1e:7d:
dd:2c:93:d2:1a:09:71:c0:e5:48:c3:62:86:b4:95:
33:fc:02:08:cd:dc:be:48:b7:2d:f9:55:54:f6:54:
fb:74:6b:f4:2f:3c:20:df:cf:f9:b5:e3:d8:42:d0:
53:91:d3:4d:ab:84:e0:48:ee:27:b2:30:78:1b:45:
f5:2d:f6:f4:17:df:46:d9:a8:a9:12:4e:d2:c6:94:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:60:D3:3B:7D:D2:77:91:88:72:5E:66:0A:75:83:FE:65:2F:7E:EA
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:bd:16:36:7d:c7:e0:6f:3a:22:7f:50:9e:c3:33:e2:6d:
fa:c6:d8:01:25:9d:63:17:af:54:72:fa:0c:50:3b:99:24:17:
d7:d3:11:67:89:4e:bb:17:c1:09:cb:af:c2:df:5b:9d:55:6b:
69:fb:29:b7:69:c3:b0:89:da:d1:66:3f:51:7f:d3:ed:d8:79:
23:eb:24:40:c6:78:95:66:34:3e:0c:9c:4d:cc:ee:52:53:55:
3b:41:bf:60:16:cd:4e:fb:98:49:3d:fe:72:a0:95:80:90:8c:
2f:b8:e4:5c:eb:81:f5:4c:39:df:ae:0a:3e:9d:9d:38:ff:18:
c4:28:ad:d7:7c:68:22:f1:14:5a:3a:e8:aa:ce:00:b6:75:52:
20:7b:0a:22:78:49:d4:5d:98:d9:4a:64:1a:dc:91:2b:4f:51:
74:0e:73:a2:89:af:c4:ed:60:68:25:8e:88:94:b4:d5:e7:d6:
f2:22:8e:6f:33:2b:98:c0:5d:68:c4:fd:a3:c8:01:b0:14:29:
f1:93:df:a8:f3:00:4c:1a:7d:63:29:b0:b0:21:4d:13:be:ed:
a2:b8:5d:9b:a1:36:6e:53:f8:f8:1a:0d:79:50:d7:6b:cf:9a:
3b:23:7b:86:4e:ce:6c:90:81:2e:aa:59:31:7a:b9:4b:e6:b7:
6d:f3:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:46:39 2026 by rpki-client