Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: PpCHv6Prcwj8lb2tnLqMgiAiNymjEVMSO9ay+1QXHgs=
Subject key identifier: 2F:14:7E:67:EE:1C:64:9F:F0:86:43:87:F4:39:6F:6A:B6:BA:AD:C7
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 019D2703AEC7DFBBCAEC5304674D49B0D7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 0D28
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: +TwFJlEMM6CNJjQqjx5lADZsanfotQZ0xvIwLX2KbGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ae:c7:df:bb:ca:ec:53:04:67:4d:49:b0:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=2f147e67ee1c649ff0864387f4396f6ab6baadc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:45:44:69:cd:7e:b0:1d:d5:bc:3c:48:b9:
68:ed:e5:c4:e9:58:bc:3a:c8:16:68:b9:72:47:eb:
4e:0d:18:2a:69:e8:3a:a3:1f:71:73:ff:bf:b8:6b:
7c:d9:ba:eb:67:c3:d2:72:c8:64:f2:f9:fd:24:62:
6f:2f:5d:21:36:13:87:99:78:c1:df:5c:3f:af:1b:
37:52:42:b9:cc:19:eb:13:06:75:14:5f:84:58:75:
fa:c6:89:d5:e0:6f:27:f5:00:25:0b:96:43:f5:b5:
3b:fa:2b:0e:35:0c:64:8a:9b:d6:df:28:6b:d4:3e:
b7:f2:dc:88:c0:d8:a7:a9:09:e9:d9:dd:6b:b3:da:
57:25:8f:6b:d5:b5:34:13:4e:39:74:07:60:2e:23:
2c:cc:ee:1e:66:98:e2:ba:e1:60:0c:ff:e0:fc:e1:
b5:80:e9:4d:51:0c:dd:a4:95:07:be:3c:77:63:f6:
56:ad:3b:c6:5d:35:b4:0e:37:7d:43:64:03:53:c7:
06:89:f1:ca:bb:db:1a:5f:0b:99:aa:7f:e2:16:b8:
4a:a7:56:74:9d:5b:35:7a:6b:73:5f:e4:e8:33:b8:
21:4d:0e:d4:92:85:5d:e5:17:c0:d7:52:ea:6e:33:
d0:f4:86:61:5e:a9:fa:ab:9e:4f:a5:c1:72:92:59:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:7E:67:EE:1C:64:9F:F0:86:43:87:F4:39:6F:6A:B6:BA:AD:C7
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0f:c5:3a:2d:e1:b0:06:c5:ab:40:48:9b:5c:a7:b1:c5:30:
20:b5:6c:88:24:b1:dd:05:69:28:1b:c4:76:0c:89:f5:d3:8b:
80:6a:4c:bf:90:9b:8f:40:19:48:95:70:bf:1d:9c:02:b2:6f:
28:3a:ef:01:16:f1:ba:db:83:5c:75:1b:47:20:85:78:79:c8:
47:ea:68:74:21:7a:a8:e3:bc:a0:68:59:96:02:80:70:ba:df:
e0:19:a3:9c:f1:f1:f4:07:98:1e:03:58:c9:9c:1d:e7:a8:32:
ec:5a:ae:3f:b0:be:29:aa:fe:51:47:19:07:17:0e:2c:35:45:
05:74:95:aa:7a:c7:65:ab:6b:3a:59:bf:f8:4c:15:f6:7d:30:
74:ac:37:40:79:f7:4a:13:7e:59:7a:b0:e6:b9:be:ca:1b:90:
98:64:95:f7:46:6a:83:0a:ce:93:5c:17:81:b9:b1:47:bf:55:
43:9d:58:46:5e:4c:2f:ca:c8:51:1a:98:10:59:29:68:79:a9:
65:ba:6e:18:6e:ae:42:cf:1a:4a:1d:52:9b:f6:3a:71:4a:7d:
24:d0:82:a1:5d:d2:d8:17:13:63:fa:67:68:b8:1f:4c:98:5c:
db:e0:7e:1e:40:ac:77:12:62:85:53:22:62:60:ee:85:be:92:
35:01:43:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA67H37vK7FMEZ01JsNekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzJlYWI2YTI5NjA1MDYwNDZhMWRhNDMxMjc3M2Q5OGU5
N2NkNWEwHhcNMjYwMzI1MjIwMDQ1WhcNMjYwMzI2MjIwMDQ1WjAzMTEwLwYDVQQD
EygyZjE0N2U2N2VlMWM2NDlmZjA4NjQzODdmNDM5NmY2YWI2YmFhZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPBFRGnNfrAd1bw8SLlo7eXE6Vi8
OsgWaLlyR+tODRgqaeg6ox9xc/+/uGt82brrZ8PScshk8vn9JGJvL10hNhOHmXjB
31w/rxs3UkK5zBnrEwZ1FF+EWHX6xonV4G8n9QAlC5ZD9bU7+isONQxkipvW3yhr
1D638tyIwNinqQnp2d1rs9pXJY9r1bU0E045dAdgLiMszO4eZpjiuuFgDP/g/OG1
gOlNUQzdpJUHvjx3Y/ZWrTvGXTW0Djd9Q2QDU8cGifHKu9saXwuZqn/iFrhKp1Z0
nVs1emtzX+ToM7ghTQ7UkoVd5RfA11LqbjPQ9IZhXqn6q55PpcFyklnA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8UfmfuHGSf8IZDh/Q5b2q2uq3HMB8GA1UdIwQY
MBaAFBTC6railgUGBGodpDEnc9mOl81aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80YjRkN2EtY2U0OC00N2E0LWEzYzQt
NjExZTU3ZGE5NWMwLzEvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80YjRkN2EtY2U0OC00N2E0LWEzYzQtNjExZTU3ZGE5NWMw
LzEvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg/FOi3h
sAbFq0BIm1ynscUwILVsiCSx3QVpKBvEdgyJ9dOLgGpMv5Cbj0AZSJVwvx2cArJv
KDrvARbxutuDXHUbRyCFeHnIR+podCF6qOO8oGhZlgKAcLrf4BmjnPHx9AeYHgNY
yZwd56gy7FquP7C+Kar+UUcZBxcOLDVFBXSVqnrHZatrOlm/+EwV9n0wdKw3QHn3
ShN+WXqw5rm+yhuQmGSV90ZqgwrOk1wXgbmxR79VQ51YRl5ML8rIURqYEFkpaHmp
ZbpuGG6uQs8aSh1Sm/Y6cUp9JNCCoV3S2BcTY/pnaLgfTJhc2+B+HkCsdxJihVMi
YmDuhb6SNQFDng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:21 2026 by rpki-client