Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: xXKmvqj/NQRnXn+ZSgJaordiy/VPl3CPZ3QZ0r639oA=
Subject key identifier: 10:7B:52:D9:67:E9:B7:BE:ED:64:97:7F:D8:32:9C:BF:77:50:A7:63
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 01A0D5029137471A947E44E0B3E79B2DA3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 20:01:50 +0000
Manifest this update: Thu 24 Sep 2026 20:01:50 +0000
Manifest next update: Fri 25 Sep 2026 20:01:50 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: Zw4g3Ni9gus2mlcBqSLFDY3XCSgFet2aGEAZxYO6WCk=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:91:37:47:1a:94:7e:44:e0:b3:e7:9b:2d:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Sep 24 20:01:50 2026 GMT
Not After : Sep 25 20:01:50 2026 GMT
Subject: CN=107b52d967e9b7beed64977fd8329cbf7750a763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:20:f3:ac:14:99:53:c7:68:76:f8:d4:af:
8e:72:df:63:ef:e8:66:cb:85:db:01:6e:55:5d:a8:
a9:76:16:00:55:1e:02:38:06:96:50:7a:d0:17:1f:
14:ea:18:45:54:c7:65:9c:db:e7:f3:92:79:36:c3:
f7:25:55:4b:0f:67:f3:3b:21:55:84:a6:09:6c:ac:
7a:f7:e5:07:6e:f9:cb:48:11:9d:89:72:1b:5b:34:
26:15:60:de:f0:8d:09:9b:5d:4c:bf:27:6f:d3:13:
62:2f:77:4f:d2:ad:a9:37:38:d7:96:00:18:00:f4:
4d:ea:51:75:d3:09:dd:1b:d4:50:67:d5:a3:07:c0:
b2:17:d6:4e:ad:fe:1e:11:78:b9:87:89:59:a4:5f:
ad:eb:8b:41:ae:33:bb:b7:5b:e3:44:89:61:dc:bd:
6e:11:c4:93:ba:f1:41:2f:da:dd:ec:16:cf:c9:a2:
26:54:52:c2:0f:54:a2:1f:8e:2e:c4:e7:7b:40:ba:
61:ba:e2:33:a0:d8:54:00:2e:f4:91:7c:23:da:0e:
f1:8f:76:70:65:41:d5:3e:85:42:1c:64:ba:72:41:
a5:ec:b0:a3:5b:69:e7:17:74:97:02:a1:69:d9:0e:
17:75:d3:2e:de:9c:bc:01:a0:0f:1f:b3:63:1e:9e:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:52:D9:67:E9:B7:BE:ED:64:97:7F:D8:32:9C:BF:77:50:A7:63
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:6b:dd:cf:d7:ce:fd:30:df:e1:83:de:a2:2c:35:a9:66:
45:1d:fe:30:f9:36:fb:8b:ed:0c:f6:6c:f2:c5:61:5c:3c:61:
ea:a5:30:fc:95:07:ab:cc:c1:15:3f:c1:10:79:ae:d9:53:70:
e0:cf:b6:97:d3:10:a3:62:df:ad:8a:06:95:5c:9a:0f:d1:94:
25:b8:bb:e5:02:cd:2b:c5:aa:9f:3a:f3:e9:0b:33:eb:5c:37:
c6:93:ac:66:d7:97:a1:c2:b0:fe:10:6f:29:7f:75:be:57:c0:
41:35:c5:b4:a9:6b:26:38:23:2e:35:cf:3d:50:8f:9a:ac:e5:
cb:77:a6:77:b5:8a:4f:8e:7c:60:13:08:34:62:86:6e:f3:14:
b1:19:7a:d4:8c:09:84:06:e4:ee:e9:47:0d:d9:6f:80:87:c8:
ac:e2:0e:6d:d7:ac:7f:06:05:a0:21:07:f2:97:39:21:dd:6d:
34:8f:ac:89:a0:38:66:3e:43:ea:ee:e9:b6:66:d2:ac:dd:44:
a1:f3:98:3b:ae:6f:df:df:5b:45:d7:6a:e2:f2:b3:17:37:54:
ef:99:38:8d:d5:15:b9:d1:48:ba:e8:50:c6:de:f8:e3:38:32:
dd:2a:7f:89:d8:7a:79:51:ac:f3:99:9b:a8:d4:37:13:88:f5:
e9:9d:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:28 2026 by rpki-client