Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: PQTxvgmoDWKZmCAKhMyPOcgaOCChcCiKd97C5xfpsu4=
Subject key identifier: D7:18:FB:98:8C:F9:A2:37:34:BE:97:12:3A:F9:35:F6:F1:80:5F:00
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019D2695FF19C3787DB2B46C1F3FF86113F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: VA2Prxcrtq1JYR5FLxxIOwLZvxzLybGGN9ZBsiGDymw=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ff:19:c3:78:7d:b2:b4:6c:1f:3f:f8:61:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=d718fb988cf9a23734be97123af935f6f1805f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:62:ea:7f:d6:c3:45:a2:2d:60:06:18:28:
a6:33:0e:16:a6:e7:ab:bc:11:ea:68:ca:de:74:7a:
d3:75:1c:fb:1e:fb:a1:6e:dc:a6:23:56:d1:37:ab:
16:37:3f:2f:5d:20:d6:53:87:4c:3f:85:10:a2:2e:
11:48:89:29:4d:da:6c:ec:49:9b:f6:71:43:ff:b6:
59:94:0f:dc:f4:ac:af:c6:fb:8c:e2:ea:49:f0:c7:
d1:a6:13:64:29:be:d5:a3:bc:02:b8:d9:6a:26:8b:
75:0e:38:e8:b1:72:07:b6:16:dd:b8:34:13:8f:8b:
02:c1:94:8f:07:e7:f9:75:41:81:aa:53:61:c8:76:
14:81:68:24:db:0c:f0:ca:03:30:38:86:15:17:cb:
c3:9f:28:31:bc:ba:a5:5e:7e:4d:b1:61:79:59:1a:
52:1e:7c:de:fe:7e:65:38:66:a9:a2:10:9e:d8:ee:
b8:35:4a:ea:bb:6d:80:3f:86:f0:a2:dd:8a:98:9f:
88:cd:f4:4f:4f:5f:a4:da:8f:04:cb:81:36:96:b8:
d0:b5:fb:4e:01:48:76:b3:a2:db:25:42:7d:61:f3:
e2:30:85:5b:0e:ef:ec:c7:75:19:ee:42:30:b6:02:
a5:60:03:e4:95:6f:79:ae:e6:9f:73:ba:c7:1a:f0:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:FB:98:8C:F9:A2:37:34:BE:97:12:3A:F9:35:F6:F1:80:5F:00
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b0:54:e5:b6:9b:8c:3c:1d:a6:6f:f8:9e:49:84:3c:b9:42:
13:6c:11:64:73:3d:f9:06:ca:61:04:9e:87:42:9d:82:f6:f8:
7d:a8:0a:3e:54:6b:dd:85:77:91:16:c4:5f:e7:f9:af:0c:05:
0d:6c:8c:b5:e1:1a:dd:9b:d4:a5:0d:66:6d:f2:a7:7e:48:d2:
97:4d:e4:dc:78:09:ac:71:0c:4e:6c:bd:26:4d:b2:7f:99:b5:
17:af:38:f3:e9:76:10:e8:7d:bb:2b:c3:bf:9b:dc:4a:df:ff:
2e:f4:5c:26:b7:3b:b6:76:39:64:37:91:11:bf:e7:5b:08:2e:
e4:94:de:92:bd:87:bc:a7:da:3f:25:df:e1:de:d7:3b:9d:e4:
28:61:8e:a6:d8:68:22:c6:eb:cb:dc:02:55:50:1d:86:87:ca:
0f:de:cd:9a:84:02:dc:0a:4d:05:dc:fb:1d:46:4d:e5:1a:f0:
20:78:f6:20:70:c0:f6:2a:ac:fc:67:da:9b:9f:f3:89:64:40:
e7:8b:f4:49:c1:91:49:46:18:95:5c:80:97:8c:34:e4:1c:6f:
f4:1c:a5:18:4a:5f:29:6b:64:46:af:b5:50:5a:80:8c:47:47:
f8:35:2a:8b:ba:3f:b9:02:12:4a:92:df:b8:60:74:b4:0e:a0:
dd:6d:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:33 2026 by rpki-client