Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: gLIzoAInTVcMnYHkBA5FGs+AlQk3cr37rdM9QgEFGbs=
Subject key identifier: 74:D2:32:32:88:54:D9:2F:2E:BA:14:4F:1C:FA:D8:88:75:D4:BF:A1
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 01A0D872569D98AA51670D7DF544327F6F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 0212
Signing time: Fri 25 Sep 2026 12:02:46 +0000
Manifest this update: Fri 25 Sep 2026 12:02:46 +0000
Manifest next update: Sat 26 Sep 2026 12:02:46 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: jj8GLhvQiLpoKtPfUtTJjsbvhVxUJ+yn3x191ANhH/M=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:56:9d:98:aa:51:67:0d:7d:f5:44:32:7f:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Sep 25 12:02:46 2026 GMT
Not After : Sep 26 12:02:46 2026 GMT
Subject: CN=74d232328854d92f2eba144f1cfad88875d4bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:36:0c:ab:fd:db:da:a3:66:78:b9:64:01:
14:a4:10:8e:98:92:d9:d9:08:6c:9d:ce:ea:e0:ff:
e6:93:04:e9:ce:3b:a7:3b:6d:4c:c4:fa:91:fe:11:
ab:c3:88:97:f2:9b:b6:a4:dc:e4:5b:c5:5a:14:b6:
0e:6d:6a:fa:d9:36:a4:87:3e:80:06:c8:c1:b2:09:
cc:58:67:31:80:3e:fe:29:d6:72:8b:11:fd:23:89:
56:df:0f:a7:c3:4c:df:98:f5:38:00:94:9d:e7:fa:
54:8c:0d:43:6c:aa:15:aa:b3:c1:73:47:e3:74:29:
c6:da:59:1b:be:6d:77:53:42:2a:59:e5:43:cb:ac:
37:77:e2:6a:b6:d5:25:ec:e4:de:b8:ff:cf:a4:b4:
14:94:ea:3e:aa:68:08:cf:6d:1e:90:7e:3b:ea:73:
bf:63:10:d2:76:96:76:2c:b5:df:9a:d7:cb:f8:a7:
30:55:04:d7:87:e1:39:85:ea:61:e8:ed:e8:91:e6:
d7:20:2e:55:af:88:1a:43:4a:e3:c6:db:47:af:a0:
5f:83:9a:9a:6e:39:c3:18:c0:4e:0a:b5:15:bc:c9:
06:6b:c5:65:dd:98:a8:18:d0:75:2d:eb:8a:ad:c7:
db:7d:e6:5c:dd:18:c0:59:f7:4d:fd:43:36:a9:2d:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:32:32:88:54:D9:2F:2E:BA:14:4F:1C:FA:D8:88:75:D4:BF:A1
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:c7:4c:6a:2f:6d:77:a0:d3:15:c5:8d:d2:54:70:75:03:
d2:e3:e6:53:df:3f:b5:21:45:07:38:ea:10:6d:f6:8f:e1:36:
bc:b6:98:e2:0d:9b:aa:dc:12:b5:8d:00:07:dc:ed:a3:d1:c4:
af:a9:28:2d:0c:e4:58:3d:40:13:1c:0a:af:d6:1f:60:cb:51:
36:56:3f:47:16:cd:65:be:0a:f3:c5:0c:0c:2d:b5:6d:24:6b:
c3:c6:90:01:50:32:d9:4c:0e:eb:fb:c3:d2:1f:33:81:98:5a:
4f:f0:d5:b1:63:98:f9:5e:78:a8:9e:16:ab:56:ea:ef:21:8a:
38:4c:c3:58:4c:33:9a:41:5f:2d:4e:57:2f:84:62:33:a7:a9:
7f:91:ac:da:42:82:ec:63:11:76:a3:c6:f4:c0:04:81:86:c8:
29:c1:cf:f9:44:dc:71:79:40:05:e2:54:90:e9:f8:4d:db:6f:
5e:e9:e5:92:fa:d1:ce:95:49:df:c8:30:d9:7a:49:c2:54:b4:
fb:be:de:b0:e0:63:00:b3:3c:db:7f:07:c2:17:cc:be:ae:94:
b2:ca:58:4f:c7:31:a9:ab:51:4f:b6:19:cf:48:e2:92:2b:2d:
f5:41:72:74:8d:4e:30:ab:db:3d:a0:58:bb:d0:ee:53:4f:a7:
4c:13:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:57 2026 by rpki-client