Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: PVcK1jjPfrRGqbN+CI1PNdealAOHwPPx9mTQgc4G+Ls=
Subject key identifier: B4:7D:C1:21:2A:12:79:3C:1A:46:0C:25:AE:0D:51:5D:30:32:3B:43
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 01A1035BAE2CB48C4AADD2EBC405F92CFE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 13FB
Signing time: Sat 03 Oct 2026 20:01:42 +0000
Manifest this update: Sat 03 Oct 2026 20:01:42 +0000
Manifest next update: Sun 04 Oct 2026 20:01:42 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: 5C0vk0QMpN7ojBxhkm9rC9fW7cTxZkH0mINiPnxa+ro=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:ae:2c:b4:8c:4a:ad:d2:eb:c4:05:f9:2c:fe:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Oct 3 20:01:42 2026 GMT
Not After : Oct 4 20:01:42 2026 GMT
Subject: CN=b47dc1212a12793c1a460c25ae0d515d30323b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:36:5d:b2:83:46:5c:c1:3f:24:2d:99:8e:
3e:ec:65:aa:bc:c8:50:d2:80:95:6e:d3:79:cb:54:
7d:b4:5c:2b:fa:4c:98:ae:d7:17:71:91:67:8f:80:
d3:3f:04:47:7f:63:a1:0f:8e:a4:31:fe:09:dd:1c:
c6:4c:bd:2e:a7:0c:8d:07:23:92:a6:7d:3b:c4:ac:
db:5b:c6:b4:52:4c:86:57:90:9b:aa:d3:cf:01:32:
b0:4b:15:d2:11:f4:72:bd:07:79:6c:5b:9f:ba:44:
43:5f:70:84:16:8f:e7:85:37:ff:03:ac:ba:e6:31:
27:a0:4c:dd:f7:cf:bd:bc:ae:ac:59:b5:c9:10:44:
4d:df:da:da:7d:a4:81:c6:46:66:68:70:9b:bb:2f:
d7:12:1f:22:74:cc:02:ea:10:ef:48:d4:6d:8d:2e:
b5:ab:65:87:dc:bb:cf:84:2e:59:8c:28:74:f8:36:
ae:0a:a4:11:d4:47:32:10:59:83:15:e7:0c:3d:51:
23:e5:92:5f:5a:39:2c:97:b2:c4:c3:2b:f2:44:0e:
ff:90:0a:8b:33:6e:40:2f:21:9e:ff:a5:23:de:93:
4f:ad:70:16:16:44:91:39:b6:ef:1a:0e:b5:04:22:
76:ea:d4:ab:ab:dd:e9:f2:6a:f4:98:94:9d:f7:c8:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:C1:21:2A:12:79:3C:1A:46:0C:25:AE:0D:51:5D:30:32:3B:43
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f7:23:ef:05:79:35:2c:1c:69:f4:59:7f:6e:0a:87:e9:21:
a6:b0:73:80:76:cb:27:d0:ec:17:41:20:85:c1:0c:95:99:19:
4c:06:cd:c2:ba:79:8f:85:93:00:7b:54:fa:73:cf:96:30:80:
c8:35:8d:db:cf:01:32:f2:a2:47:43:9a:6d:d5:b4:48:7b:ea:
d1:6e:ed:00:bd:3a:2b:7e:df:3e:38:e1:b1:84:e3:fb:e1:06:
52:f5:1a:fb:ee:75:fa:2b:46:73:b6:6a:5e:5e:68:70:7d:b1:
90:1e:dd:0a:4c:95:3a:14:17:da:04:7b:cc:3f:1d:83:93:e8:
57:7f:7d:52:90:3b:e1:ec:da:cb:cf:23:dd:44:81:02:04:be:
a5:54:70:0a:1c:f7:86:a3:1f:d4:0d:f4:6c:01:0d:ee:ca:dd:
a8:f3:60:1f:69:70:cb:82:58:d9:07:58:a1:1c:3a:7d:a4:d6:
9b:a4:f2:44:d1:ce:ca:a7:07:66:cc:8a:d9:82:48:ab:6a:8b:
76:c2:5a:14:b3:c8:79:79:c9:97:39:a6:02:4e:8f:cf:23:e8:
22:7b:05:85:fe:eb:25:ef:a4:02:61:0a:e0:70:58:22:b8:81:
8b:b9:10:92:f0:e8:e6:a2:ed:02:27:76:b1:47:3c:af:0b:87:
e3:d5:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:52 2026 by rpki-client