Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: H6l2xjbvnUpmXkuogFNXmwBWjXB5MasL5eM/sOQW92I=
Subject key identifier: 2B:EC:C6:A9:01:7B:25:3D:62:9C:95:BC:96:77:EA:E0:C1:3B:2A:25
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019D2884D2EF403CB8BF8AD18F473E876F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: ont9L1UBEZnUPM2wguZC45MwtFFz8+EoKbMxyRhs88Q=)
2: JmBNmBKIgqKO_ZhjRd9uDlu62G4.roa (hash: BFiumCe31FgvogRmYhZXe4XUH4NFOPl+f+uzimA8KGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d2:ef:40:3c:b8:bf:8a:d1:8f:47:3e:87:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=2becc6a9017b253d629c95bc9677eae0c13b2a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:71:d0:bb:c4:96:ff:ec:44:b8:9f:5e:a7:
51:91:33:41:b5:c3:cd:fe:bd:bb:84:ba:70:83:0b:
ac:12:13:20:94:83:f7:db:e4:2a:85:fc:2f:97:a2:
f0:38:35:7a:65:70:02:e4:6f:8e:fb:ef:27:5a:db:
85:ee:3f:a5:2c:8a:22:83:7b:91:6d:66:79:52:94:
4c:1e:e0:15:ab:51:d6:a6:bf:d2:c3:be:eb:b0:a0:
24:37:3a:41:69:6d:fa:40:0e:61:6a:9c:de:bb:a3:
dc:5f:31:54:6c:c5:39:c1:b3:a6:ed:29:14:53:fe:
c4:16:eb:55:c0:8e:c6:88:69:c1:07:17:c2:05:f4:
04:c3:5c:56:c3:d0:8b:13:7d:83:b3:2e:ac:eb:f0:
70:f0:56:44:59:e5:4f:bc:51:c7:e4:4f:1f:40:d4:
4d:49:97:6c:23:99:27:b1:ff:e6:d3:4e:3a:ee:22:
63:03:1d:88:ae:29:e4:d7:34:e1:e3:fa:b4:78:d8:
1e:c9:ed:12:e9:b0:41:f6:d3:6d:93:e3:1f:d4:68:
e6:34:28:a9:63:d2:d3:86:41:b7:53:68:c1:d9:0d:
0b:4d:5c:cd:ab:3d:db:04:7c:09:c8:93:d7:95:52:
e9:66:91:2a:60:c2:8d:a8:5a:cd:45:44:4f:af:8a:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EC:C6:A9:01:7B:25:3D:62:9C:95:BC:96:77:EA:E0:C1:3B:2A:25
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:24:df:9c:e4:d3:d9:1e:6b:f8:c6:aa:e6:1f:09:d1:07:
49:f7:94:1b:ac:23:b7:20:08:63:b2:3d:5d:ad:1e:e0:1f:e8:
06:55:7e:e3:e9:a6:ed:89:a7:37:91:9e:e3:16:9d:05:11:54:
82:5b:e0:b8:ab:89:b1:ef:54:72:9c:fb:83:ef:3b:f1:f8:c1:
16:63:51:e9:b3:3c:8e:1a:92:83:b6:7f:eb:de:95:5c:88:b9:
e4:6d:24:1a:38:4a:78:c2:76:2d:27:8e:72:0b:d4:2b:d7:b3:
1d:85:53:2d:67:16:56:a4:fa:2f:1e:ce:8f:12:ad:7f:14:d5:
20:a8:3d:9d:cf:95:72:a7:ea:48:60:41:b7:7d:a4:ad:e7:7a:
16:f6:63:38:5d:a1:c8:f8:f1:d8:49:5b:23:7f:44:83:76:d2:
64:e9:83:5e:48:44:4e:cf:d7:e1:9f:d0:b8:f2:1f:1e:84:72:
0f:8e:23:a4:8c:98:8f:b6:59:a4:f5:4b:cf:45:c5:55:11:c0:
ae:f6:41:15:51:0b:94:5a:35:83:77:5a:a4:25:6a:0a:48:26:
4c:7e:74:a9:77:a5:bb:a9:33:4a:19:2d:d9:b2:b2:94:70:42:
91:98:72:da:7e:16:27:67:d8:de:ce:7e:1c:a2:31:94:ec:7d:
a2:84:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:48 2026 by rpki-client