Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: WfgbOSigAyp+3ycsL4kuw5EWzQi+MSeeo3JbpNVpUUU=
Subject key identifier: 01:87:48:8E:C6:BD:81:42:1B:AC:E7:B7:D6:75:CC:33:F3:D9:5B:A8
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019D273AA96F8AB3B09E87DDB8398B64FFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0E8D
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: ifCxHAMVoVJT1K0V2jJG+X663PUCC1om9kISuDishQw=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a9:6f:8a:b3:b0:9e:87:dd:b8:39:8b:64:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=0187488ec6bd81421bace7b7d675cc33f3d95ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:c7:e2:20:d0:79:b2:78:6f:af:45:34:71:
7b:9c:93:5b:af:ac:09:fe:72:28:f4:23:c7:f7:84:
72:98:f3:9b:44:0e:48:82:92:09:c7:0a:7f:ab:fc:
1c:b4:7b:c0:fe:b8:e3:f3:88:0f:a6:b3:eb:36:b3:
0f:3e:84:9b:c7:53:82:f3:32:a8:5b:31:09:0c:6c:
3b:1e:19:d4:8a:7b:2f:01:b7:b5:4c:14:e5:ae:8f:
08:c7:48:37:9b:4f:28:b9:93:3b:ac:55:47:79:7c:
e5:0d:d5:93:da:36:0b:db:d1:af:3a:ce:c3:11:ff:
d6:fa:73:0b:79:8b:62:d1:0a:72:c0:ad:30:b8:76:
b7:40:b3:89:30:a3:3c:23:6c:80:36:cb:19:af:dc:
06:83:ca:9e:f9:f1:59:2f:8e:1b:4f:1d:52:9a:60:
45:0c:f6:99:f9:09:c6:94:85:b4:37:57:a4:74:b4:
5f:40:f5:c8:d3:e7:71:c6:98:d1:85:52:f1:92:66:
3d:55:49:75:0c:e6:72:ce:49:c0:bc:c1:3a:a1:cc:
6c:10:7d:6a:f5:3f:b3:23:92:f8:7a:02:42:dc:e7:
7b:1f:00:80:6e:74:b7:14:b2:be:af:8e:f3:7f:df:
81:0c:61:4e:7a:c4:d1:bd:cb:b4:5e:9d:30:de:7e:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:48:8E:C6:BD:81:42:1B:AC:E7:B7:D6:75:CC:33:F3:D9:5B:A8
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c7:87:36:2a:bc:49:39:d6:a6:69:c7:0b:bf:84:f9:8e:d2:
d5:8f:83:86:20:05:e5:fd:8b:70:ab:a9:9f:cc:dd:36:da:99:
ac:35:85:71:70:26:92:fe:31:72:3f:5d:cb:df:c6:a5:0c:32:
33:46:44:9a:c4:8e:92:94:22:a2:be:6e:56:1c:39:e3:eb:e5:
fe:d3:7a:13:b4:51:dc:38:f6:b6:a2:9d:75:cf:f1:5e:c1:10:
dd:ac:21:01:db:42:d2:d1:3d:c6:e0:05:83:8d:08:3a:fd:13:
46:44:ab:1d:ca:ca:8d:aa:ab:12:33:31:d8:19:b4:93:bc:a4:
14:f7:d6:73:b6:f8:50:04:45:16:56:b1:11:4f:ee:e3:94:15:
e3:10:86:4b:20:50:e6:3a:7a:81:ce:fb:29:06:98:42:18:19:
b1:a0:74:66:0b:98:3e:a0:4c:37:10:35:2d:6a:63:9a:12:fd:
ec:52:4f:8b:fd:e5:37:a7:a3:e1:e9:90:0d:84:5f:04:2f:8b:
bd:5a:2c:9a:60:c0:62:d1:b3:8b:13:07:81:73:68:c3:44:64:
45:cc:bf:36:32:a6:0a:b5:ec:34:ee:69:fb:ae:c7:7c:ba:79:
50:7e:37:73:81:2f:22:18:52:c7:75:ed:0f:b8:da:4a:8f:1c:
c8:7d:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:50 2026 by rpki-client