Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: EefnLNc2YFOOZY1EUn3aKTrW9HFSCoZE+gP50Fn3TCk=
Subject key identifier: CA:47:9A:E6:63:31:99:DE:16:33:C9:B5:43:1B:AA:7E:F8:8C:DA:47
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 01A1DD951B815646B048BE965E5E99F0B07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 05:01:38 +0000
Manifest this update: Sun 15 Nov 2026 05:01:38 +0000
Manifest next update: Mon 16 Nov 2026 05:01:38 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: lZ4HhKJ8te9JE+79RlxB6OEkn3locT1QLUl5ZlegDUs=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:1b:81:56:46:b0:48:be:96:5e:5e:99:f0:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Nov 15 05:01:38 2026 GMT
Not After : Nov 16 05:01:38 2026 GMT
Subject: CN=ca479ae6633199de1633c9b5431baa7ef88cda47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:d8:d6:14:03:e3:b0:97:01:d3:e8:43:3d:
5e:a1:a5:5f:30:ac:84:d4:fb:66:be:be:d7:0f:b9:
ae:80:e9:75:d4:ee:3d:75:cd:6b:79:85:dc:01:73:
8c:59:8a:44:27:ee:ca:3b:eb:40:96:13:41:6f:df:
d4:33:54:cf:92:41:41:fd:30:fb:33:62:41:a2:a8:
d1:f0:c6:e5:8c:1d:5d:d0:0d:ca:0f:89:af:41:49:
59:4c:95:f8:f4:44:77:27:3c:b5:fb:48:64:89:00:
a7:98:23:73:96:41:3e:de:37:9c:74:1f:94:aa:30:
00:97:1d:97:6b:41:65:11:4d:4d:16:16:b0:ff:c1:
48:b9:ad:20:b3:cc:d3:20:f2:89:ef:f4:06:3b:b0:
0e:f8:fa:d8:ff:3e:da:c8:69:93:4c:0f:47:98:3d:
aa:12:f9:2e:b9:16:35:2c:e2:80:8e:fd:51:9a:ea:
bf:35:8c:59:23:05:3d:8e:5b:ab:f9:94:60:77:28:
cb:89:08:24:fc:32:e9:ea:a5:98:e8:9f:74:19:34:
4d:3c:af:22:86:89:b9:f6:9d:db:cf:4b:85:b9:ae:
80:2b:24:b9:b0:0f:c6:88:8f:12:bb:17:a7:97:68:
ac:e8:d5:7b:87:0c:83:4b:52:cb:49:0d:e0:9c:b4:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:9A:E6:63:31:99:DE:16:33:C9:B5:43:1B:AA:7E:F8:8C:DA:47
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:f1:0d:54:8b:dd:d7:bd:a9:6a:10:19:fa:61:a9:3d:47:
12:17:37:a2:c7:5a:57:00:a6:86:41:f7:4f:3c:64:b2:9c:f9:
c9:2e:bb:13:90:e2:81:40:95:e7:2e:44:93:51:86:69:7b:7c:
38:8c:e3:af:f1:02:ba:5d:44:12:c1:45:8c:24:d4:5b:af:66:
74:2d:72:d7:3e:06:92:16:08:63:9d:a2:e0:94:42:e3:6c:a1:
7a:de:52:46:03:88:2c:aa:fa:52:13:98:ad:42:7c:a6:8d:c7:
b5:1b:44:ee:6b:6f:b6:b3:24:07:02:4c:dc:aa:fc:46:27:09:
0c:a8:f8:da:be:43:39:b2:a4:f3:99:7d:24:3e:3a:48:5f:3c:
13:d6:b3:dc:4c:82:f5:66:d1:61:b3:89:47:0a:dd:88:29:07:
22:be:7a:89:fa:01:9a:2c:00:5f:5c:15:9b:6f:9c:62:6b:d0:
c4:06:55:6a:85:2e:ca:de:f8:17:d5:84:a6:d0:18:48:3e:26:
80:7a:22:31:5b:7f:8b:a1:7a:ee:8a:e9:79:3d:a6:7e:59:50:
3d:9a:4f:66:60:c5:bb:19:6c:96:d0:03:75:5c:d2:7c:4c:b5:
ea:94:2d:da:8a:b8:f2:f6:3d:0c:3c:35:c7:29:19:dc:76:cc:
4e:3e:87:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlRuBVkawSL6WXl6Z8LB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx
YmQyNmEwHhcNMjYxMTE1MDUwMTM4WhcNMjYxMTE2MDUwMTM4WjAzMTEwLwYDVQQD
EyhjYTQ3OWFlNjYzMzE5OWRlMTYzM2M5YjU0MzFiYWE3ZWY4OGNkYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfY1hQD47CXAdPoQz1eoaVfMKyE
1Ptmvr7XD7mugOl11O49dc1reYXcAXOMWYpEJ+7KO+tAlhNBb9/UM1TPkkFB/TD7
M2JBoqjR8MbljB1d0A3KD4mvQUlZTJX49ER3Jzy1+0hkiQCnmCNzlkE+3jecdB+U
qjAAlx2Xa0FlEU1NFhaw/8FIua0gs8zTIPKJ7/QGO7AO+PrY/z7ayGmTTA9HmD2q
EvkuuRY1LOKAjv1Rmuq/NYxZIwU9jlur+ZRgdyjLiQgk/DLp6qWY6J90GTRNPK8i
hom59p3bz0uFua6AKyS5sA/GiI8Suxenl2is6NV7hwyDS1LLSQ3gnLQYVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpHmuZjMZneFjPJtUMbqn74jNpHMB8GA1UdIwQY
MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt
NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm
LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjrxDVSL
3de9qWoQGfphqT1HEhc3osdaVwCmhkH3Tzxkspz5yS67E5DigUCV5y5Ek1GGaXt8
OIzjr/ECul1EEsFFjCTUW69mdC1y1z4GkhYIY52i4JRC42yhet5SRgOILKr6UhOY
rUJ8po3HtRtE7mtvtrMkBwJM3Kr8RicJDKj42r5DObKk85l9JD46SF88E9az3EyC
9WbRYbOJRwrdiCkHIr56ifoBmiwAX1wVm2+cYmvQxAZVaoUuyt74F9WEptAYSD4m
gHoiMVt/i6F67orpeT2mfllQPZpPZmDFuxlsltADdVzSfEy16pQt2oq48vY9DDw1
xykZ3HbMTj6HBg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:54:48 2026 by rpki-client