Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: Ic53KvvRi1SENziTan+Iw8j+pwtVlJ+RdHNNZ22v9t4=
Subject key identifier: D6:CE:34:8A:2B:B2:E5:82:DA:6E:B4:8D:0A:21:19:B1:B0:11:CB:84
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 01A0D5A7289C58CA4F2B9F899A785D8BCCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1A03
Signing time: Thu 24 Sep 2026 23:01:36 +0000
Manifest this update: Thu 24 Sep 2026 23:01:36 +0000
Manifest next update: Fri 25 Sep 2026 23:01:36 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 6QtM4l+okeuD7jKREF2UkPDQEQfA7Ou02BWpog32+ZI=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:28:9c:58:ca:4f:2b:9f:89:9a:78:5d:8b:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Sep 24 23:01:36 2026 GMT
Not After : Sep 25 23:01:36 2026 GMT
Subject: CN=d6ce348a2bb2e582da6eb48d0a2119b1b011cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:7a:06:d0:49:86:4e:1c:0b:a7:da:0c:07:
ac:3b:b2:0d:cb:d4:7c:a7:58:d7:41:f1:fd:3d:fb:
70:55:b5:00:66:39:bc:05:4a:44:76:a6:85:e6:51:
cb:4e:42:da:11:ee:71:47:61:50:1f:43:82:17:32:
d2:43:fb:7b:a5:d8:97:cf:08:3e:c2:56:71:38:80:
2c:16:a6:84:4f:99:84:0c:31:c2:bc:3a:6f:1f:b0:
15:85:23:db:68:58:6a:a0:fd:7f:90:d1:64:c8:4d:
e1:74:31:8e:48:1a:50:5e:81:c7:d7:97:f1:b5:95:
f8:00:31:9c:80:4b:0f:c5:e1:3f:2a:9d:ef:b2:a3:
a4:04:1c:bf:a5:f6:72:e5:cf:4c:00:a8:69:dc:ee:
69:70:b6:67:44:f6:b0:30:29:d8:ea:f7:54:59:38:
44:0b:03:a1:98:c4:1a:a2:99:96:21:17:fc:a0:5b:
9a:65:0a:ad:5d:35:77:7e:8c:4c:40:35:72:0f:77:
f2:d1:10:68:23:74:cf:51:7f:6d:04:97:08:4b:cd:
bf:ea:51:2a:a8:6f:54:86:4a:bc:03:b9:14:5f:1b:
cb:5c:94:3c:82:ea:2f:16:7f:ea:20:5d:9a:63:21:
9b:2d:c6:48:ad:eb:15:b8:91:4f:41:f1:8c:65:8e:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:34:8A:2B:B2:E5:82:DA:6E:B4:8D:0A:21:19:B1:B0:11:CB:84
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:1b:97:47:46:d1:95:4a:a9:81:82:3e:de:61:23:96:70:
2b:19:9f:a1:25:30:03:2d:d4:cc:7a:8b:ee:d1:35:94:fe:04:
c5:b1:8c:f5:64:96:f3:1c:d9:59:ca:8c:a1:99:a9:de:ff:a9:
a1:20:91:dd:0b:f5:62:fa:4a:16:61:86:38:fd:e4:ea:9e:c9:
69:78:b4:74:da:a6:ab:eb:53:47:9f:0f:81:aa:11:0b:a5:b2:
be:30:8a:05:9d:f6:af:3d:12:6a:b9:90:ea:48:16:a5:0c:95:
73:77:e1:c4:84:b7:65:ff:91:f9:a2:f1:3c:3b:9f:71:33:02:
12:7a:df:ed:c9:84:1e:65:7a:76:03:d8:5e:71:9d:10:e2:fe:
1b:b6:3a:46:ee:51:55:4d:ab:e0:7e:b4:da:bf:de:d8:05:b6:
61:ae:80:24:81:56:60:57:2f:12:e9:e7:6e:b8:dd:bf:6d:1b:
15:ae:5d:3a:3d:23:ac:d2:c2:24:19:54:39:05:6c:ee:e1:a6:
5c:38:fe:29:10:c1:c6:fb:c3:6b:e5:a9:67:04:ca:fe:23:74:
57:40:ee:c0:ca:50:a4:60:cf:84:5a:9c:85:93:63:02:56:f1:
69:c6:3c:23:83:c7:56:8d:b0:8e:b7:5f:be:93:f3:45:67:12:
fa:e4:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:55:23 2026 by rpki-client