Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: yZmhRw22JCnFr9q34mn0YmPO32Qqtsoqh8baXterdgs=
Subject key identifier: 2A:47:0C:34:47:65:E9:25:26:1B:C9:EC:2D:C7:C0:0D:FD:A3:51:AE
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019F93FFFD5273E8710D9EA042E5808AE1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 112B
Signing time: Fri 24 Jul 2026 12:00:54 +0000
Manifest this update: Fri 24 Jul 2026 12:00:54 +0000
Manifest next update: Sat 25 Jul 2026 12:00:54 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: Ns8qWBcRcoaBp3FyXHscFPT69BUGW8qffp3RpX12fzM=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:fd:52:73:e8:71:0d:9e:a0:42:e5:80:8a:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jul 24 12:00:54 2026 GMT
Not After : Jul 25 12:00:54 2026 GMT
Subject: CN=2a470c344765e925261bc9ec2dc7c00dfda351ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:b8:a7:23:9c:af:1e:4f:c4:24:90:c9:8d:
3e:6c:8a:39:7d:62:21:1f:ab:fd:63:13:b4:f5:fd:
c2:88:fc:f5:57:fd:a7:87:5e:03:66:0d:33:9c:1f:
6a:5c:45:be:67:8d:df:e8:b9:d8:93:3d:74:dc:7b:
4f:57:b6:73:2d:6c:55:e3:1b:ac:1f:e8:67:25:e2:
f3:43:3b:e6:cc:1f:07:b8:ba:0b:7f:a3:2f:49:72:
18:a2:dd:6a:40:aa:74:3f:f7:b0:d5:28:f3:47:48:
d1:07:5e:2f:eb:7a:a0:b6:66:83:8b:f9:31:54:48:
89:40:33:2b:66:5a:1d:35:63:72:13:c3:e5:4a:08:
45:08:cc:24:81:07:12:ab:14:42:c2:fb:c3:57:99:
62:44:c2:95:5e:82:1c:8d:1a:e5:ef:58:ad:98:ee:
37:9d:c7:28:c9:a9:33:d4:10:04:cd:09:1d:e1:e4:
cd:f6:fc:69:2f:34:a2:d4:2d:bf:b2:d1:a2:d6:76:
6f:25:bc:df:60:4c:e2:45:47:7f:29:1e:fc:06:50:
f6:63:87:aa:f3:65:bf:53:f1:92:d4:11:50:ca:96:
e0:38:c7:62:b1:29:c1:f6:35:b9:8f:5f:a4:0a:d1:
c9:7b:b7:05:09:27:20:53:c6:53:5f:ba:bd:df:1d:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:0C:34:47:65:E9:25:26:1B:C9:EC:2D:C7:C0:0D:FD:A3:51:AE
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1b:cd:3d:31:1f:80:3c:84:ed:2b:c3:58:0d:8d:a6:80:40:
4a:15:08:e7:a8:96:51:3f:08:d9:20:fa:cf:88:22:9a:d0:d0:
91:91:97:f0:d0:7e:f7:ef:8c:87:b0:5a:a9:83:8a:4d:c3:58:
9e:5b:35:0b:b5:a3:b2:61:ab:fc:4b:ad:92:8a:8f:cc:11:e9:
30:26:fa:42:71:41:e3:b9:44:d5:6f:84:7d:ce:f2:2c:ee:54:
c0:35:db:c5:7e:cd:dc:8b:21:41:fc:2d:ff:a8:79:63:92:fa:
58:21:7c:e7:5f:d5:37:51:4a:17:bb:f3:53:54:ae:8a:59:f5:
5a:4d:8c:26:7b:65:3b:aa:94:e7:d5:7d:11:bb:3c:25:7c:4b:
c1:5f:02:1d:80:a9:c1:0b:62:0b:b8:9b:fe:4d:b7:dc:d0:2f:
50:fd:dc:07:27:01:5b:f1:80:e8:0c:bf:02:98:a4:6e:2e:17:
ed:c6:81:9d:4c:7c:f6:a5:fb:ca:c1:39:40:72:25:02:34:8a:
c7:58:6a:49:be:41:0a:14:50:5a:32:f6:aa:7b:e8:26:03:59:
f1:cd:ba:c4:cf:55:bd:f7:20:b1:ba:96:9f:b9:4b:ae:72:8c:
52:13:ec:f8:80:5d:9c:af:b1:7a:9c:6e:fe:7e:4b:d0:0e:3b:
58:f2:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:26 2026 by rpki-client