Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier: /zUi7TOIwo4DxgfFn168GQuPGSq+nsQlZSu9cy8e4Ds=
Subject key identifier: 84:53:61:35:70:39:06:EF:8A:B2:04:63:43:61:F7:68:42:6C:F0:BC
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 01A0D8721DC58A9B6981E0B1AEBAAAA44574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number: 1067
Signing time: Fri 25 Sep 2026 12:02:32 +0000
Manifest this update: Fri 25 Sep 2026 12:02:32 +0000
Manifest next update: Sat 26 Sep 2026 12:02:32 +0000
Files and hashes: 1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: kacHqRJ7+oACJueJX1/JUt5AushQzMdxI+onbCX7YBg=)
2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:1d:c5:8a:9b:69:81:e0:b1:ae:ba:aa:a4:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Sep 25 12:02:32 2026 GMT
Not After : Sep 26 12:02:32 2026 GMT
Subject: CN=84536135703906ef8ab204634361f768426cf0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:28:a8:2e:b3:00:df:70:a7:fb:ae:52:f3:
85:7a:f0:df:ff:c0:26:bf:71:27:d4:e6:d1:c6:71:
90:b7:de:2a:9f:7c:d1:54:ae:66:9e:8d:d5:a3:24:
f3:fd:3d:e9:16:ac:fa:2b:fd:e4:cd:ba:81:1d:e3:
11:c8:3c:51:a8:d3:be:f1:17:91:d3:8f:9c:84:8e:
6c:32:3f:3e:19:19:34:9f:af:bb:20:cc:ce:23:d1:
aa:75:41:12:0f:96:6f:64:f6:2d:d6:3b:ee:8d:8e:
4d:24:3c:90:0e:0a:cc:c5:74:0d:de:5c:2c:68:c0:
a9:ee:8b:56:be:18:57:27:ed:b5:3e:c1:28:fb:ae:
1c:ba:f9:b3:d8:23:d8:ce:0e:dc:22:5f:ef:0a:a0:
b1:13:d8:ab:4a:a9:36:8b:ec:c8:02:bd:71:a3:03:
90:6b:1c:ed:90:6d:25:8d:a2:48:7e:ec:e8:0d:69:
49:34:96:be:d8:6a:0a:29:04:9a:35:68:3e:77:d1:
9f:f1:04:8b:63:48:dd:69:a1:36:83:58:40:42:83:
17:8f:9d:bb:f8:b3:a5:b9:ed:2f:4a:2a:89:ba:03:
2d:64:e9:6e:e9:2a:36:90:5a:e5:69:f5:50:5e:07:
82:77:87:eb:6c:4f:bf:a3:d0:6b:2c:7a:05:11:57:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:61:35:70:39:06:EF:8A:B2:04:63:43:61:F7:68:42:6C:F0:BC
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:20:e5:0d:9f:77:aa:5f:fc:9e:63:62:4e:e7:06:a2:d6:
ee:e3:67:31:aa:92:e6:b5:65:cb:ad:7b:d0:6c:ba:11:d8:6c:
ee:ff:98:df:c0:a4:2f:e3:e3:2d:ab:0f:13:c7:15:02:48:ac:
dd:30:a2:03:f0:61:9d:62:50:a7:70:2c:37:9d:b9:9f:f6:eb:
7c:c1:6e:1a:ab:a1:28:5e:c3:08:45:6d:a8:01:05:b9:1e:98:
a7:8a:46:0f:d9:ec:60:55:b4:c7:38:b5:e8:ff:a7:55:26:cb:
06:e8:c9:28:1d:eb:4f:e1:43:e1:2d:d8:14:4c:4d:a0:08:ac:
fe:4f:62:63:c3:98:b2:b4:22:d4:46:74:7a:6a:dd:1c:4c:f6:
31:28:7b:b2:ce:1e:44:f2:d0:63:35:f1:9f:55:59:bb:31:d7:
96:ee:cb:59:d3:1d:9d:8b:f6:0b:f2:96:61:fc:f7:61:6b:1a:
18:72:bd:cd:34:d6:a8:17:51:0f:5c:4c:91:4b:70:4f:95:d5:
bf:0c:ef:7f:c0:e9:5f:3c:58:c0:fe:5e:6c:ce:53:68:d1:88:
43:f4:69:1e:dd:73:bf:05:35:4e:75:cb:cb:22:86:3a:9c:ca:
84:7c:ac:71:2a:a8:9a:13:d1:55:60:e2:60:4b:7c:a7:92:b8:
70:ab:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:51 2026 by rpki-client