
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: xvpm00FUPNU6hVYfa99PzSFQvnff9UM2jL6Ig3EH7Bs=
Subject key identifier: D6:30:E1:11:70:D4:37:F1:78:0B:86:10:63:6C:F3:D3:CA:78:29:E9
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 01A0D8A8D8692A2FFEC8485196EA3E6C1A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 13:02:19 +0000
Manifest this update: Fri 25 Sep 2026 13:02:19 +0000
Manifest next update: Sat 26 Sep 2026 13:02:19 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: /lSlm+uvRq0hf4TEMYvj/z0xpJ4Ef9hV5sE2hH+dfcY=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:d8:69:2a:2f:fe:c8:48:51:96:ea:3e:6c:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Sep 25 13:02:19 2026 GMT
Not After : Sep 26 13:02:19 2026 GMT
Subject: CN=d630e11170d437f1780b8610636cf3d3ca7829e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:18:88:6b:eb:11:5a:10:e3:54:29:fc:77:
b1:99:f5:18:1f:55:c2:3f:5d:6e:81:ba:09:f8:f2:
69:51:ff:ea:8d:ce:cd:85:16:0e:4f:e1:56:ff:eb:
b8:54:85:ea:6c:85:5b:a6:3f:6a:92:88:cf:45:ff:
47:20:71:83:51:70:34:d3:07:4e:b4:20:c0:5b:b2:
2b:00:1f:af:70:ce:09:7d:7e:cc:41:cc:2a:f3:e2:
09:2d:31:92:1c:34:cf:a6:f7:e6:08:2d:88:b5:d6:
19:61:91:7f:7d:a3:f7:4d:f0:41:cc:ed:5f:13:c5:
7f:3f:dd:c8:d8:73:41:92:8e:f7:b3:6d:ef:d8:e2:
3d:0c:a2:b3:32:37:0c:26:ac:f6:70:4d:94:29:93:
a7:5f:a9:62:ff:3d:75:e9:f4:48:04:ac:a6:af:30:
09:5f:6e:1c:09:83:bd:6a:21:cd:32:3b:70:e4:2c:
cb:17:30:2b:90:a6:d6:20:25:bf:48:60:ee:32:47:
84:c9:a0:01:34:fa:d7:00:2b:8f:7d:64:13:1e:2d:
5e:98:5f:a4:50:df:e2:40:d1:7e:01:cc:ff:35:b7:
61:b5:a5:ee:c8:e8:95:2d:9c:ac:ba:3e:ff:f3:c3:
ce:b2:64:eb:04:4b:07:14:c0:c4:a7:66:57:51:4b:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:E1:11:70:D4:37:F1:78:0B:86:10:63:6C:F3:D3:CA:78:29:E9
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:b2:d1:7d:6a:98:f9:f6:04:1d:b4:64:b3:80:8f:2b:91:
e8:70:de:cc:4f:c2:ce:73:43:53:db:28:56:b2:13:51:75:32:
2a:47:e2:3e:ac:90:8b:82:2d:ec:ec:93:fc:56:dc:32:68:ed:
4d:a3:28:8f:9a:89:7d:73:e3:5e:d0:d1:f3:0b:73:78:dd:54:
11:de:3e:25:22:9e:a4:d4:8a:79:b9:ec:17:d1:b9:81:cb:71:
b1:52:b9:86:7d:8e:2f:51:39:45:6d:a2:64:d3:f3:2e:eb:3f:
80:49:7c:28:d9:a6:82:18:b1:68:5d:8c:de:14:b7:6d:b3:71:
92:d6:16:1e:59:8e:c3:52:f6:b8:58:27:42:9f:e0:7c:91:b0:
9e:07:21:2d:6a:53:0f:c3:b7:58:a6:bf:8c:2f:32:eb:69:ee:
77:ba:31:c5:b9:3c:a6:03:ee:bb:1e:e1:c9:ad:00:51:c2:4c:
2c:f5:ea:25:08:5a:74:80:8d:8a:93:93:72:2f:49:37:c6:7f:
35:c0:5e:77:29:96:d6:8c:43:f6:c3:05:3b:4d:f1:12:af:ee:
f3:0e:c0:c8:14:d2:ee:3b:59:0f:d5:0c:7a:f9:03:82:56:97:
93:70:1a:13:b9:f6:77:4e:77:ae:79:c3:0c:73:cd:68:ee:7e:
88:3f:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:10:29 2026 by rpki-client