Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: 54CmtgRZyFqgiiJLLtZnadvoRDBFZzSfwRt9XBEFDX0=
Subject key identifier: 50:99:73:A6:A4:6C:9A:BB:1A:62:02:DE:DA:93:98:F2:85:79:B3:6F
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 01A123F8DE76FF2648F56A711A5E3BE57C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 13AD
Signing time: Sat 10 Oct 2026 04:01:14 +0000
Manifest this update: Sat 10 Oct 2026 04:01:14 +0000
Manifest next update: Sun 11 Oct 2026 04:01:14 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: vDioe/xhc0Ka0Fk7RVrRqRSbDAcmDBzov75P4SHZnO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:de:76:ff:26:48:f5:6a:71:1a:5e:3b:e5:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Oct 10 04:01:14 2026 GMT
Not After : Oct 11 04:01:14 2026 GMT
Subject: CN=509973a6a46c9abb1a6202deda9398f28579b36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:01:a5:34:1d:5c:f8:d9:70:76:e3:ae:3c:
f1:c3:5a:fb:2a:fd:1b:d9:62:c6:90:de:89:7c:7d:
ab:6d:f9:d6:e7:39:1d:25:40:fe:95:8c:d8:f1:13:
8d:64:24:87:a6:1b:2a:51:1c:4c:1c:14:51:29:6a:
9a:44:68:8e:1a:08:46:1a:fe:56:5c:ba:02:26:26:
62:9c:3c:cd:2c:28:41:bd:11:90:9c:3e:1a:93:07:
e6:21:da:06:6d:7f:21:2f:70:5e:f5:76:4a:51:62:
0e:d2:3b:2f:75:ac:59:b1:5b:21:90:d8:58:7b:63:
48:35:1f:99:75:21:56:72:d7:33:be:34:b8:33:bd:
ea:06:2c:93:29:ce:1e:c4:1c:67:d0:35:bd:8e:82:
ee:48:f4:b3:74:75:81:fc:bd:68:02:b1:ef:32:c7:
33:81:0f:ec:2b:39:8f:2d:5a:97:49:77:9d:ba:45:
63:94:2f:15:6b:6a:1a:1c:8a:d3:63:25:c5:b1:2a:
35:b6:72:42:93:14:88:41:ae:55:1c:05:3e:81:39:
a0:ed:4e:d3:15:27:c1:4a:f2:0c:08:1d:7b:6a:3e:
36:b5:be:5c:46:0f:15:1a:21:df:ce:e1:4d:60:f2:
f8:bb:d5:a3:34:83:3c:d4:d6:3f:b8:13:5a:4b:6d:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:73:A6:A4:6C:9A:BB:1A:62:02:DE:DA:93:98:F2:85:79:B3:6F
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:61:f1:fc:91:c9:28:df:fb:b1:93:e6:17:5c:46:94:d0:
e0:fa:2f:83:a0:3a:63:ef:42:21:50:ff:45:6f:4f:9d:f1:59:
40:58:05:73:a3:77:d4:02:e2:27:55:a6:0c:96:a9:ab:6a:38:
4a:f5:5f:6d:bf:09:ec:80:9c:ba:f2:2a:bb:84:21:38:33:59:
25:9a:35:84:88:74:3f:c9:92:3f:be:06:4e:36:0d:33:aa:56:
10:0c:2b:78:7c:b5:43:cf:1d:00:ef:cb:c4:b8:3b:61:ca:c0:
44:34:5f:22:ac:05:eb:63:1d:10:cf:a6:0e:ae:47:d5:88:aa:
f8:25:d6:a4:06:73:72:a4:14:24:6d:6a:33:c4:fa:a4:33:70:
26:f1:31:17:3b:35:9c:ee:f3:02:a1:d4:5e:9c:fa:a1:16:e0:
76:ec:35:3b:45:f1:b3:69:6a:97:da:64:0d:8b:31:cd:5d:d5:
8d:3e:b9:f0:e7:e7:3f:a1:be:93:16:3f:2e:4e:ae:91:da:af:
66:6f:51:73:e3:64:23:03:da:a8:94:78:95:20:ee:8b:f9:7e:
f3:78:bd:d6:10:6d:34:7f:eb:2c:2e:1b:fb:95:21:9b:c0:71:
be:b8:f8:db:89:5f:e5:b6:8e:f8:ea:21:8d:6e:19:f8:3f:71:
25:2c:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:48:58 2026 by rpki-client