Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier: yEmMTonD4DvDgqvQj5nBtPFICFB4TxR378T7d7U2vsE=
Subject key identifier: A2:48:3B:D3:AD:B1:EB:06:EA:9F:6C:C7:5A:99:F0:C0:AC:5B:C4:95
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 019D265FE6CDD37D0A7C93F4FBA2966B755F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number: 0E7D
Signing time: Wed 25 Mar 2026 19:01:52 +0000
Manifest this update: Wed 25 Mar 2026 19:01:52 +0000
Manifest next update: Thu 26 Mar 2026 19:01:52 +0000
Files and hashes: 1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: 8b40vq2nd9n1IgqG1KxP+nIy8FaVu/khfJCQhauGk50=)
3: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
4: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e6:cd:d3:7d:0a:7c:93:f4:fb:a2:96:6b:75:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Mar 25 19:01:52 2026 GMT
Not After : Mar 26 19:01:52 2026 GMT
Subject: CN=a2483bd3adb1eb06ea9f6cc75a99f0c0ac5bc495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:5e:f2:29:39:f6:f6:96:32:72:4b:6e:21:
e6:38:1b:2a:89:01:9b:0d:11:66:6a:23:e2:ad:27:
a1:9e:f0:d4:0c:d0:41:ca:be:e3:b1:5a:38:46:8b:
6a:04:cf:39:3f:a7:e7:06:70:d8:c5:a6:b4:76:19:
3f:fb:43:82:b5:68:73:38:27:e9:89:db:85:b8:e6:
79:4b:71:21:69:41:16:f6:57:ea:db:ba:88:7b:12:
67:9e:ff:f8:a0:49:e2:d8:03:29:97:ad:63:9a:25:
25:6e:15:e5:5e:89:ac:33:c4:ce:8d:b6:a9:ed:f5:
4e:c5:32:a0:bf:34:32:71:f6:a8:d1:91:a2:ec:3c:
73:d6:e9:5e:69:b9:90:0c:0b:d3:c7:c0:99:a5:60:
fc:b8:8d:4b:0d:22:77:3b:18:b8:a0:bd:a8:c4:f5:
d8:43:ba:cc:31:ce:5b:71:62:37:4e:c6:06:4c:64:
c1:27:6d:09:53:2c:92:bd:4b:e7:3b:b4:02:d6:28:
62:9c:76:29:19:a2:46:64:ef:bc:dc:68:0d:c6:8f:
ba:1d:2c:56:b1:6f:e5:10:f4:77:b2:50:d8:b0:13:
04:28:75:f4:9b:3f:75:4a:0e:84:68:e1:82:15:21:
10:d6:e7:f8:e3:68:8e:57:aa:56:22:02:b4:95:31:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:3B:D3:AD:B1:EB:06:EA:9F:6C:C7:5A:99:F0:C0:AC:5B:C4:95
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:85:31:2a:53:55:a3:09:42:a2:cb:91:c0:fa:d9:76:fc:4f:
78:85:49:64:57:90:95:bb:bb:14:08:63:37:da:01:51:ba:42:
ef:eb:04:d2:de:47:69:c7:1f:cf:c1:9c:96:cf:a2:cb:26:50:
88:b5:3f:64:1f:79:46:c5:0d:02:b6:31:e9:97:d4:99:a9:ac:
5a:3e:48:4b:49:be:3f:17:ec:db:c8:c4:f4:a0:f6:e9:be:00:
5a:7d:1f:4d:45:d7:47:c7:5a:f2:17:81:09:15:18:39:11:13:
47:60:79:70:0a:17:c4:ab:6f:a7:eb:5b:4d:6a:70:99:dd:2e:
70:f4:ac:f3:b8:74:8b:10:f8:5a:14:80:06:b2:1c:29:b4:d9:
7e:eb:49:8f:19:08:2a:dc:9c:c0:bf:23:9e:b6:93:82:ae:70:
4e:3f:81:10:38:eb:d5:db:0c:fe:e9:66:eb:a9:81:69:9b:2b:
e3:9f:dc:c0:d3:b6:e4:9b:11:4f:c2:4d:e6:34:6d:c2:24:fb:
74:44:20:84:7a:48:6a:10:7a:b2:6d:e8:3f:32:ad:e5:20:a0:
05:f7:1d:3b:16:9e:c9:36:16:64:ed:36:2e:56:82:0f:d7:ad:
ae:48:aa:5e:54:0e:c5:e9:4d:69:c4:de:3a:33:1d:fb:46:da:
72:14:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:19 2026 by rpki-client