Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: 34w53KZmU6qC3fdiU458IQkxoyx7EXWsbCGC9T0FK1g=
Subject key identifier: 6E:9A:7F:CE:0B:3A:62:93:23:EE:77:DF:54:5A:19:F4:77:48:42:8C
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019D28170E0EB398624714FC81CF0EB2DBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0FEA
Signing time: Thu 26 Mar 2026 03:01:32 +0000
Manifest this update: Thu 26 Mar 2026 03:01:32 +0000
Manifest next update: Fri 27 Mar 2026 03:01:32 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: LPqXf4VV/Z00UNGWdyv786FdeiazL55VXgFhsYZNlcE=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0e:0e:b3:98:62:47:14:fc:81:cf:0e:b2:db:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Mar 26 03:01:32 2026 GMT
Not After : Mar 27 03:01:32 2026 GMT
Subject: CN=6e9a7fce0b3a629323ee77df545a19f47748428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:bd:28:77:9d:e7:8e:22:01:54:45:6d:77:
73:d8:fe:22:93:0b:70:b7:a0:ae:a1:87:cc:d7:2c:
2f:ba:e0:29:08:b2:85:e9:8c:2f:49:0c:a0:34:7d:
92:6c:95:cd:f1:10:0e:b5:3e:30:52:59:da:33:71:
2d:b4:43:9a:bc:bd:9f:de:a4:38:7a:5e:62:9f:3d:
5b:b6:a2:09:3b:3a:db:06:54:c9:11:4a:ce:e2:a8:
91:55:33:bf:ed:99:81:4d:bf:29:7b:46:ad:2e:af:
d2:38:5e:19:7b:9e:c7:35:1a:86:5e:9b:35:d1:46:
5b:35:17:3f:7c:8b:bd:4a:d4:01:36:43:50:e2:8a:
87:3c:fc:61:af:e2:aa:b0:71:ec:fe:62:52:ae:41:
fd:b2:77:56:3b:21:9a:f1:d6:b7:66:12:45:6e:1e:
55:9c:58:c2:c3:99:09:7e:97:0c:3a:a7:9c:fb:0d:
35:da:47:bd:bf:1e:6f:31:4a:b5:b0:76:97:f8:98:
49:88:a0:89:e2:1e:34:10:90:6d:54:c7:8a:1b:fd:
4f:7a:e7:bb:69:be:4f:96:7d:9c:2c:58:e6:c1:ab:
70:8e:db:08:3c:d5:79:da:a2:18:de:d2:2d:dc:5d:
9b:ec:9f:a0:20:0a:b4:e8:88:b5:d6:96:17:d5:62:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:7F:CE:0B:3A:62:93:23:EE:77:DF:54:5A:19:F4:77:48:42:8C
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:c0:a8:b7:e7:41:26:be:1d:c6:d2:6c:f4:9c:11:0c:c1:
c8:10:b7:a8:94:cb:00:f1:fe:95:ec:71:69:4e:4f:62:69:4f:
85:66:69:33:47:91:b8:d7:46:d3:22:75:16:ae:7d:7b:65:e9:
fd:a3:f1:b8:55:37:61:ab:22:0b:17:86:40:7c:06:6f:4b:5d:
08:f6:ae:bb:b0:fa:94:df:15:12:c7:7f:16:2a:99:11:6e:df:
d7:f4:b1:08:1e:31:27:37:47:bc:d5:9e:dc:64:2a:b2:7b:d3:
ca:55:fb:8b:65:fb:b9:67:77:a2:c0:50:68:f8:99:71:dd:98:
19:b7:05:e3:b9:93:c9:6c:63:56:ae:8e:8c:b8:93:13:b0:13:
49:98:e0:b9:a0:64:9d:c2:5e:7e:b9:03:42:9e:f5:f6:d8:7a:
de:2c:07:3b:d2:b6:dc:59:2c:65:9b:75:b9:97:8b:8a:12:62:
53:d6:5c:bf:84:35:22:90:ea:da:d8:d8:17:be:f4:bc:9e:de:
8a:07:90:5a:fb:83:27:7a:31:13:31:05:32:28:7a:ea:c2:18:
b7:98:ab:e9:18:76:74:24:0d:04:fd:85:c7:2f:d7:b7:10:ec:
a6:30:a4:f6:18:69:8a:ec:9e:7f:0e:07:cc:67:86:45:a8:18:
0c:99:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:14 2026 by rpki-client