Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: pRuhjdk4HaCwG+UjC0HLky9wlr+Sg7VmrKT8Trr7lyE=
Subject key identifier: 75:AE:DC:7E:CB:4C:53:CC:CB:44:6B:63:4E:12:A8:D5:20:43:BC:C3
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01A0E9D2AA0734B8A081E9D50C0AF9887170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 11DC
Signing time: Mon 28 Sep 2026 21:01:32 +0000
Manifest this update: Mon 28 Sep 2026 21:01:32 +0000
Manifest next update: Tue 29 Sep 2026 21:01:32 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: GtnZayUHTp3afEHS7Q3uBAwmQEuUkEnHNr7Z5vqrFHA=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:aa:07:34:b8:a0:81:e9:d5:0c:0a:f9:88:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Sep 28 21:01:32 2026 GMT
Not After : Sep 29 21:01:32 2026 GMT
Subject: CN=75aedc7ecb4c53cccb446b634e12a8d52043bcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:db:33:b5:78:f1:2a:f6:74:6a:dd:aa:71:
05:5c:33:bb:21:fc:d8:14:12:b2:3a:e2:77:a5:2f:
f7:06:d7:0d:f5:ca:60:a0:c1:42:ea:3c:5d:4c:aa:
85:91:3e:9e:ed:b2:80:2a:dc:04:04:fd:b6:b0:3c:
90:77:e0:77:d6:ad:77:ee:b3:83:de:92:6f:ec:19:
d3:3b:6e:58:9b:48:98:4a:9b:35:be:6c:fe:93:51:
ec:2a:3e:d8:fe:c0:b4:7d:ce:8d:49:af:81:d2:cd:
5d:70:47:f6:33:c7:4d:be:d5:54:35:34:31:56:ea:
d0:3f:ae:4e:14:78:e2:89:a4:a1:dd:c1:2b:a6:32:
2d:64:4a:5e:c0:d0:bb:bc:f5:d9:ec:94:bc:07:8c:
b1:80:60:34:7b:6b:87:cb:7f:3d:54:5c:90:cc:b4:
92:ee:48:51:bc:5c:77:06:66:d9:c9:f6:8f:19:a5:
24:14:b2:dc:48:75:44:0a:15:6b:8e:ad:17:a4:81:
11:2e:08:22:27:33:64:02:df:7b:37:3b:cd:da:35:
6b:93:6d:1d:3d:f2:e4:02:93:21:50:84:7f:38:36:
e0:a1:b2:c5:2c:7c:76:85:e4:6e:73:cd:c8:78:37:
de:2e:29:24:95:a4:c0:10:da:36:b0:a2:fe:58:d8:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:DC:7E:CB:4C:53:CC:CB:44:6B:63:4E:12:A8:D5:20:43:BC:C3
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:00:73:f0:fd:e6:e4:e4:16:05:d2:78:ad:24:8d:3b:a5:e7:
d7:32:cc:b7:8d:5a:04:3f:e9:44:6a:dd:9b:61:b5:ec:fe:e6:
b7:15:68:11:b3:b0:2d:86:72:25:fc:a2:65:f4:38:c1:49:c7:
ce:d3:76:ce:95:a2:bf:64:9e:f8:01:60:ac:85:5d:ea:75:02:
25:92:94:1e:3e:da:2f:76:42:ce:87:24:01:fc:4b:41:8e:f3:
18:e8:4d:84:6a:6f:63:29:85:54:37:0b:53:9d:2a:44:34:fe:
6b:ab:b3:ff:5e:c8:c0:db:9b:02:ac:b5:a5:85:af:bc:65:cc:
00:8c:67:0d:5f:24:79:5f:4f:3f:13:9f:9c:67:5c:10:7a:48:
0e:ea:54:b7:58:2f:3b:14:08:82:8e:e8:96:8d:17:28:08:c7:
28:3b:b6:79:f2:11:11:b6:39:f1:d5:ab:28:1f:1b:ab:d2:29:
a0:64:be:8d:d1:81:aa:01:80:6e:79:08:83:dd:6d:b5:1b:00:
85:10:70:50:39:49:2e:4c:6d:d2:1a:f0:f0:2b:91:58:f3:e9:
1b:db:ea:34:84:eb:b7:66:e2:86:c7:22:b3:dc:60:53:6f:22:
83:ed:ef:c4:6f:3c:47:d7:d0:01:31:f0:ba:b2:a0:06:91:10:
9d:02:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:19:28 2026 by rpki-client