Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
File: FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft (raw, json)
Hash identifier: xxtBmqBg2JYdziAAEH5L0sFOEg5VvSsEm+gYrtrCiBU=
Subject key identifier: 7E:46:5C:D3:F0:1D:3C:86:42:57:B6:95:37:28:80:53:3D:70:5B:69
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 01A10436D72707E1C5C796E95CEB33C4C701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:05 +0000
Manifest this update: Sun 04 Oct 2026 00:01:05 +0000
Manifest next update: Mon 05 Oct 2026 00:01:05 +0000
Files and hashes: 1: FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl (hash: HtgOzIpVJT/8te264MQLIYtq62lMqcdKhtntsIJoghg=)
2: GDHkLZC4ICOFk1gF37ViWc8G4K8.asa (hash: ShNEg2a4VzZQK89j/BS8Dv4tTFffxAezQPXk3PULYec=)
3: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (hash: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:d7:27:07:e1:c5:c7:96:e9:5c:eb:33:c4:c7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Oct 4 00:01:05 2026 GMT
Not After : Oct 5 00:01:05 2026 GMT
Subject: CN=7e465cd3f01d3c864257b695372880533d705b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:d8:fc:82:a4:65:fc:a6:4d:21:27:62:51:
22:b9:93:1a:ff:28:ae:c3:c8:d5:a5:8c:87:85:b8:
53:c5:30:3f:8a:98:b5:ed:d6:97:7b:3e:2f:49:4b:
3b:0e:7d:09:ae:93:08:77:f1:8e:80:83:86:ab:1b:
7d:51:0d:af:9c:23:73:b6:12:73:d2:4d:c6:53:c7:
03:9f:ec:0d:52:ef:c5:17:2e:8e:9b:2b:7d:d0:04:
7d:6d:07:48:9d:5c:a9:ae:f4:c3:66:78:ea:bb:26:
17:3f:3b:76:d2:fd:0d:0e:3c:0a:cf:67:11:19:79:
5e:49:63:b9:76:1b:76:5d:17:0e:95:c5:75:be:a2:
c0:c6:5a:74:34:e0:82:3c:6c:d8:79:ad:ff:b1:bd:
46:0f:bc:dd:21:8b:47:f9:ab:24:bd:26:2a:be:6a:
da:20:9d:44:a9:4c:36:48:b5:f4:af:68:3c:a5:72:
b4:f6:e6:c7:92:66:11:e0:ab:41:02:cc:90:bc:f2:
07:a1:08:bb:f3:67:62:34:7b:73:fc:b2:d4:fa:4c:
d4:e9:b8:be:3f:cd:76:11:73:d9:f7:76:54:35:0a:
b5:93:73:41:ff:8f:50:3b:e3:a4:12:84:1e:56:47:
79:ba:36:04:22:b5:2a:99:72:43:31:4f:58:7e:93:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:5C:D3:F0:1D:3C:86:42:57:B6:95:37:28:80:53:3D:70:5B:69
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:d1:d6:1e:5e:da:11:a6:19:74:a5:85:e8:5a:9c:eb:d9:
34:8e:47:29:d9:5b:b1:96:b9:55:01:f3:c8:13:32:57:05:d6:
a0:64:4e:50:9f:2f:25:13:99:ff:1c:89:be:48:62:ad:29:20:
2e:dc:4b:40:44:73:21:0a:0e:33:67:48:95:79:25:e9:34:04:
88:66:2e:ea:be:54:99:89:32:6f:99:2f:4d:34:2c:0d:73:a5:
d8:a2:cd:9b:d2:99:05:e1:4e:61:f5:d4:86:5e:9e:4b:1f:2a:
32:27:ef:3d:2c:6b:9d:3a:6f:9e:31:2d:3b:f3:e3:19:62:9a:
5a:48:1b:24:fe:0f:c3:c4:78:38:4f:82:ee:80:f8:b6:0a:d4:
ce:a2:06:91:4d:1e:16:0f:09:d2:65:be:dd:f2:d7:8f:a6:12:
d6:dd:c4:b6:43:7d:50:81:0d:a4:71:9f:df:42:35:56:0c:86:
06:27:75:9c:31:24:60:ed:de:22:41:5b:9d:e2:f8:4e:b4:1b:
80:b6:e8:ea:9d:86:4a:63:c4:ec:ce:01:86:ed:fb:52:90:6a:
9d:01:ac:df:b0:e9:a8:04:f5:0e:a5:05:fc:6c:ee:05:b9:2e:
c1:9d:e6:98:75:54:45:e4:4b:48:8d:12:c2:bc:99:b5:b2:e8:
2f:3b:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:26:22 2026 by rpki-client