Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: BqIHrusbRutwAKo1l0tnk9Qly7S6Lx5hJnmQnyG9iJw=
Subject key identifier: 8C:A8:59:51:A2:4E:52:61:4F:0F:62:2C:3E:BB:C5:F5:11:9B:B4:84
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019D284D30689ED364D7BC8C4FB63C4AD25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: Y9/vGtGFQEakkgSvIVxDUE3js1gBj1ag/Xn7q7eHg1Y=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:30:68:9e:d3:64:d7:bc:8c:4f:b6:3c:4a:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=8ca85951a24e52614f0f622c3ebbc5f5119bb484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:df:ce:ee:dd:74:34:2a:3c:f1:4d:81:77:
35:01:8e:e6:ed:6c:82:35:60:e9:c6:03:4a:b7:0f:
d7:70:a2:45:7a:73:0a:4d:a4:53:c1:49:87:83:f3:
bf:b9:43:a3:c8:d9:45:7a:61:cc:11:40:7b:b8:f5:
b3:da:57:4a:ec:4b:97:0a:a8:67:fc:92:e3:a2:e1:
d7:1e:5f:a0:be:a2:93:82:38:b8:cd:d9:ed:fa:02:
cc:b5:20:cd:68:dc:24:9f:76:4c:ee:fa:ed:d4:ab:
1d:cd:83:24:9f:8b:28:37:f2:3a:27:53:d1:91:83:
eb:5f:1f:cd:82:c3:9e:5c:23:c6:69:1f:af:d1:fc:
d7:0b:ca:66:a3:c6:26:87:8c:6d:dd:97:2a:84:f0:
17:03:b1:3c:ef:ef:67:b6:44:f6:9b:19:ad:0f:66:
e3:75:f3:fe:48:c6:77:16:9a:0c:28:d1:a3:dc:2d:
42:98:04:10:99:2b:f9:1d:b1:73:8b:fb:f8:99:c7:
c5:36:c6:e8:62:24:b7:e0:cc:2d:40:69:ac:02:96:
9e:21:22:5c:11:c0:a5:91:42:fe:06:41:84:38:36:
43:cc:4b:83:42:fb:ad:1e:19:4f:8c:e9:eb:75:58:
51:56:ae:f1:c5:0b:26:07:2c:fd:d5:7e:df:7f:ef:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:59:51:A2:4E:52:61:4F:0F:62:2C:3E:BB:C5:F5:11:9B:B4:84
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:02:a5:57:81:fb:d9:23:44:6f:d8:2e:12:a9:12:73:73:7d:
87:6e:a9:25:08:46:c5:bf:be:8a:d2:9f:cd:91:6c:a0:c6:49:
1f:24:01:07:bf:99:e0:e0:d7:fd:83:0d:29:fa:c8:1e:94:c8:
96:1b:3a:48:6b:e4:2b:0c:0a:8f:7f:e0:72:c2:49:e3:b4:c7:
32:23:1e:a3:09:a6:c9:4a:70:13:20:f2:c7:57:94:71:2a:7d:
31:1b:ba:b3:25:92:28:61:d3:61:92:bf:4c:fc:b7:6e:48:61:
99:cc:78:48:dc:92:8b:99:13:af:30:98:6e:c1:6e:06:aa:17:
36:62:5f:da:f1:7f:43:e7:a7:2e:16:12:58:bb:a6:28:10:f5:
94:bc:9f:01:b2:78:cb:cc:89:c5:de:97:1c:2a:2f:83:0e:30:
c3:5c:bf:cf:c7:cf:91:e3:dc:dc:8c:02:5b:50:a7:e2:89:8c:
f7:75:5f:14:ef:d5:0e:a1:41:1e:11:b3:04:db:32:9b:69:b6:
fc:20:72:dd:e0:6f:e6:17:65:55:40:d4:f7:cf:90:96:0c:55:
be:1f:c6:36:9c:56:36:18:1e:83:8f:93:25:a1:40:10:55:79:
c1:6e:41:df:bd:97:4e:e0:c7:83:93:c8:b9:73:a2:10:05:d2:
0a:d8:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:57 2026 by rpki-client