
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: QIzw/qL2fTUfWnOpGOTMpNVyNnUlyWeEgeWEEySqDDY=
Subject key identifier: B4:1A:8E:C8:CE:DE:7B:07:EB:8B:A4:02:96:76:43:9E:12:37:62:ED
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 019D27A89ED52D1F1F869E834B50B84CE254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0F3C
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: hxOmqP9VF2CLHFKRopqFeoU4Ve3qg7nyuJSj+13agKw=)
2: TF6uvKJoThoeL-6VAxiiIrXGTDE.roa (hash: Z1iMOswxtKc687KzUW15WbR0/w7lrYl+AKo5ErE1KtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9e:d5:2d:1f:1f:86:9e:83:4b:50:b8:4c:e2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=b41a8ec8cede7b07eb8ba4029676439e123762ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:64:17:3a:4c:59:b2:3f:5c:a4:2a:ad:c4:
67:79:85:4f:a1:2c:1a:4b:36:d4:12:4b:9e:fd:50:
95:ef:26:7c:94:0f:2a:e8:37:d0:2d:21:be:4c:57:
f5:23:ac:65:56:9c:af:3c:1b:75:02:0a:49:03:c3:
9e:be:b2:53:16:51:39:08:52:5c:87:cb:25:09:a1:
2a:c1:c0:09:89:c7:4d:1b:73:1c:39:92:32:99:45:
c9:04:42:4b:84:9c:54:19:c8:3a:7b:b7:9b:02:c4:
d1:e7:8b:14:2d:6c:86:5e:ca:ab:a4:cd:4b:81:e2:
91:63:ee:94:a1:cd:94:5c:8c:8e:93:75:80:c4:91:
4b:3e:de:49:62:f5:50:87:13:0e:2a:41:9c:61:3d:
a3:04:a9:68:97:89:34:65:aa:3d:c8:0b:55:c5:75:
67:74:90:e9:8c:7c:f7:63:45:d4:29:94:4d:01:0f:
71:35:c6:13:c4:72:63:ea:d9:b2:db:4f:ec:79:93:
1e:be:88:7f:bc:cf:a7:a5:e7:c5:2a:1b:71:73:b7:
f7:90:66:d9:35:d9:95:88:c0:05:da:dc:19:4b:c5:
f3:ff:06:9c:01:36:f9:16:03:da:f8:a6:d3:78:6c:
4d:37:a9:41:07:79:3b:be:c8:38:43:7d:6f:7b:c3:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:8E:C8:CE:DE:7B:07:EB:8B:A4:02:96:76:43:9E:12:37:62:ED
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:8e:6e:e6:04:b9:54:5e:c0:ec:6b:a6:7d:1c:d6:a6:2e:
7d:ac:e6:75:39:27:aa:4a:dc:cb:5b:ed:1d:5d:a7:7d:a1:c5:
27:0f:7b:37:7e:3d:91:2a:1b:1f:ef:97:02:4e:a7:43:3c:43:
40:0d:32:8e:4c:50:50:85:14:48:0d:5f:d9:f3:90:d3:26:9e:
e1:9a:db:00:46:d5:b1:dd:92:51:28:5a:a8:0f:3e:34:f7:d3:
31:b9:35:51:8f:1c:d8:78:bb:4b:db:7c:8f:77:20:0c:69:18:
e4:f5:83:0f:4c:af:44:d3:3b:23:b2:b7:37:0f:4a:29:f3:ec:
e6:80:40:c7:f6:eb:46:a3:e6:e6:85:55:59:27:f0:c9:ef:b9:
2c:a8:2b:76:c0:6f:5c:65:9a:86:00:c3:11:18:10:51:0b:12:
7f:d5:3f:42:a3:2d:58:11:ce:63:f3:4a:fa:51:0e:84:c0:ae:
5b:dc:bf:df:d0:ae:fb:53:17:7a:cc:f4:f1:04:30:c4:12:3b:
a3:57:e3:ea:b3:c5:c9:a5:5e:b9:1d:e8:14:0d:ab:51:9a:3f:
31:0d:8c:c3:0e:f5:1f:c0:69:98:25:f7:69:5a:23:1a:6d:9e:
67:fc:e4:5b:49:36:dd:de:dc:d0:58:4f:5b:42:19:68:ae:6a:
8c:e1:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:05 2026 by rpki-client