Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File: FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier: b29D17BBElITSu57c7drO2BWwY/9Yp5mEeRReuD0fFY=
Subject key identifier: FF:67:4C:48:8B:50:DD:E6:23:5C:05:0D:A9:74:D9:D3:2F:CC:48:9B
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer: /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial: 01A0E888D2E1A523FC9A4AEF3B107CD5F564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number: 0132
Signing time: Mon 28 Sep 2026 15:01:15 +0000
Manifest this update: Mon 28 Sep 2026 15:01:15 +0000
Manifest next update: Tue 29 Sep 2026 15:01:15 +0000
Files and hashes: 1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: d/QVFUOi8C43luwcL8tFYRGNZ00VJLWPDoe9MUDxrzg=)
2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:d2:e1:a5:23:fc:9a:4a:ef:3b:10:7c:d5:f5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Validity
Not Before: Sep 28 15:01:15 2026 GMT
Not After : Sep 29 15:01:15 2026 GMT
Subject: CN=ff674c488b50dde6235c050da974d9d32fcc489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:83:1f:a3:34:d2:99:c8:3b:d1:52:18:cb:
23:d2:6c:d0:df:78:5f:b2:fb:d4:33:f3:d7:52:c7:
e4:d0:d4:87:16:4a:f6:c9:56:f5:d2:b3:a4:c5:81:
29:35:f2:64:8b:02:10:09:da:f1:8d:15:e7:75:81:
de:e4:6c:1a:8b:57:7a:be:86:4e:4e:28:07:5b:a1:
2a:c4:df:5b:ab:f2:3d:99:1a:27:37:bd:fb:8e:7f:
67:75:66:23:5e:48:2b:e4:cd:e1:e6:71:05:2b:c2:
0e:98:14:f7:03:93:22:11:20:e7:6d:b0:cc:a0:84:
36:67:ff:55:b1:19:6d:9a:b3:1c:1d:3b:6c:53:cc:
c6:f5:97:9b:66:11:f4:9a:a5:94:4a:f6:4c:2f:5f:
7f:1e:8f:86:5b:e7:de:e0:c4:44:b0:6c:1e:c2:5f:
1b:e6:34:65:02:c3:a1:94:2d:ed:88:b2:1a:8f:08:
e3:3a:3c:f3:87:89:bd:07:af:f8:97:58:45:ca:b4:
db:58:f3:02:a1:84:72:b6:14:15:db:ed:d0:b6:c6:
59:3a:1b:94:77:61:ae:a3:2d:75:d5:55:3a:81:56:
41:2f:20:65:1e:ca:76:62:04:f4:9f:fe:fa:6e:3c:
af:3a:f8:67:18:95:08:3b:0a:23:af:ee:58:2b:a3:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:4C:48:8B:50:DD:E6:23:5C:05:0D:A9:74:D9:D3:2F:CC:48:9B
X509v3 Authority Key Identifier:
keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e6:f8:7d:a3:5a:c9:86:c7:74:22:46:eb:05:21:71:1a:0d:
9a:78:ec:f4:1d:83:93:85:46:2a:d4:ed:8d:67:4b:a8:0b:71:
1c:ce:a4:e2:e7:eb:c1:87:a3:68:86:6e:68:7b:0b:b3:ef:92:
fb:01:12:7d:5e:76:95:af:69:1a:e7:7e:de:1c:53:3f:52:d1:
74:42:a7:4d:f0:03:32:1c:58:7a:e9:d2:48:d1:11:bb:20:63:
41:e7:05:f6:08:b2:ca:df:8f:17:d2:32:56:65:f3:62:1e:4b:
1e:b1:62:c6:6a:c5:25:c7:a6:64:0e:b2:22:7d:57:e4:f4:65:
f3:7f:8f:0a:40:c3:76:50:60:8e:75:a1:07:dd:b7:73:a6:ab:
5a:b8:f0:8f:c6:e3:02:39:82:86:2d:0c:6c:3c:57:e0:6b:92:
14:93:3f:c6:4b:5c:db:9c:81:89:e1:7d:ee:56:df:a7:36:3c:
f9:0f:c9:f1:2e:5c:3c:40:d0:31:c8:05:96:a3:1d:84:00:05:
67:23:84:f0:98:30:b0:55:92:3b:d0:1a:e7:f4:79:38:18:f4:
49:48:03:90:39:1d:b9:0d:3e:a3:33:04:5e:c8:d8:db:c8:7f:
f5:fb:fa:27:16:8d:91:02:bf:9b:11:98:86:eb:32:77:33:1c:
ef:77:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:49:19 2026 by rpki-client