Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: JrjUbusnngStc72zkpM4a1mWA9i0Y0nfRmJB/qDfqZI=
Subject key identifier: 38:4A:0D:09:97:EF:11:AE:32:EA:14:78:A2:A3:E3:24:0F:52:3C:BC
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019F93243348C18CB17C70266F047AA4410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0FCE
Signing time: Fri 24 Jul 2026 08:00:50 +0000
Manifest this update: Fri 24 Jul 2026 08:00:50 +0000
Manifest next update: Sat 25 Jul 2026 08:00:50 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: ZEgyM4Wn9Dw4w9EC4ss/oCDL77L4ElD6FmuM85TUUGs=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:33:48:c1:8c:b1:7c:70:26:6f:04:7a:a4:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jul 24 08:00:50 2026 GMT
Not After : Jul 25 08:00:50 2026 GMT
Subject: CN=384a0d0997ef11ae32ea1478a2a3e3240f523cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:f8:00:47:29:a9:1b:5f:87:46:8a:2c:87:
9d:ff:e7:14:82:80:8f:bc:b2:58:6c:3a:3a:be:a1:
42:fe:07:69:20:7b:af:2e:f5:33:74:b9:53:b5:5b:
59:0c:e0:74:84:72:37:40:e7:40:8b:36:b5:66:f9:
22:be:9a:40:c0:1d:ad:95:65:07:af:2b:f1:b9:4e:
0d:fb:67:8d:ee:ad:e1:01:b3:43:74:60:97:81:f0:
4d:32:77:30:f5:e7:5a:03:1b:fa:4b:89:88:48:7d:
ed:84:aa:74:26:fd:82:54:2f:68:b2:17:45:cf:5f:
36:01:4c:a8:6c:94:11:e5:12:fc:ce:9d:5c:6a:06:
d4:34:3e:ee:64:5a:6d:d1:3a:48:fa:e7:a4:1e:49:
b3:7a:51:91:4c:a9:02:b3:13:60:e2:9f:9e:55:4f:
a5:e1:d4:e5:3d:fe:6f:d6:19:a0:9f:c5:40:b5:c3:
a3:a6:eb:ec:a4:49:6b:1b:15:23:bd:90:5e:2e:73:
2e:92:3c:ac:6f:a8:f4:92:c0:47:af:9b:f8:8d:8c:
3e:05:c1:a3:50:f0:8f:18:61:d1:59:6c:d5:92:5a:
a5:c9:c8:1e:71:3e:99:a4:21:bb:af:92:73:b3:60:
64:f6:25:f9:81:75:99:55:a4:bc:2c:de:82:b4:11:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:0D:09:97:EF:11:AE:32:EA:14:78:A2:A3:E3:24:0F:52:3C:BC
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:50:29:b8:87:64:6f:70:a3:22:7b:e4:31:19:cf:c8:76:14:
bc:8e:87:87:44:68:c5:40:03:54:3b:43:6b:5a:5f:c2:e2:30:
6b:3f:15:46:37:ba:3b:65:b7:de:b5:5c:b3:9d:70:15:ca:31:
f8:50:91:e7:d3:0b:06:c9:32:08:12:73:5e:c8:25:02:49:bc:
e6:f8:7d:5f:a1:48:24:2c:25:66:35:56:56:24:88:37:f9:65:
4e:89:42:98:2c:31:d9:4e:ac:2e:8b:73:5a:23:56:ca:42:1c:
da:7c:51:58:c3:d0:b0:54:af:3f:ff:1c:9a:96:ce:77:c4:cc:
69:b3:bd:cc:39:29:72:d8:dd:a6:ec:83:40:b0:fa:ce:93:b0:
d2:59:ca:6f:52:ad:47:a4:d7:22:a1:b8:e5:14:db:d0:7f:1b:
dc:c8:20:7c:40:07:a8:2b:1c:77:7c:6d:00:a4:f2:69:d3:ad:
59:eb:61:4e:82:dd:7d:c2:8e:5e:2f:be:14:d5:67:53:6f:a7:
a9:d5:9c:03:7b:aa:0b:7c:db:20:4c:e8:5a:19:cc:57:b9:72:
a8:21:3b:19:ee:78:75:52:cc:ad:ec:0f:df:db:68:52:50:34:
4e:bc:1e:4e:49:70:bf:38:b5:d0:26:58:6d:66:6e:fe:b3:d6:
94:ca:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:09 2026 by rpki-client