Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: cqS0jZ+Nc22VzVHhNR2AJhlZo61/tMOWiwCx4nBNM2I=
Subject key identifier: 30:45:79:EA:69:FB:D8:65:31:B5:7B:0D:8B:81:52:41:EE:06:3C:2B
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019F9248A673DFB72BAA0A19088FE67E7CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 0142
Signing time: Fri 24 Jul 2026 04:01:02 +0000
Manifest this update: Fri 24 Jul 2026 04:01:02 +0000
Manifest next update: Sat 25 Jul 2026 04:01:02 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: Cou3ebodBMDedlExpsnH+/5FUPW7qE56wNpV7Xlg9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:a6:73:df:b7:2b:aa:0a:19:08:8f:e6:7e:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Jul 24 04:01:02 2026 GMT
Not After : Jul 25 04:01:02 2026 GMT
Subject: CN=304579ea69fbd86531b57b0d8b815241ee063c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:64:b3:fe:6c:3f:4f:b5:28:93:04:45:88:
30:9f:69:b5:8c:40:07:f6:37:d0:2e:08:a3:89:74:
71:1e:bb:26:d4:83:87:66:2f:9a:4d:14:56:a2:56:
53:cf:cb:0a:e9:a1:69:2f:36:fc:16:bc:be:e5:87:
a9:c7:46:bd:d4:4c:b8:ba:ef:46:bc:59:53:91:1e:
63:7b:b3:98:f7:d7:6f:99:af:34:9d:ec:61:44:2f:
34:1a:cf:ea:ae:94:d5:23:eb:30:c4:58:56:b0:5c:
00:be:6a:32:f7:de:08:ce:ef:9f:5c:1b:e9:0b:3a:
c1:fa:24:5e:61:70:08:07:c9:a0:46:2b:c2:bc:7c:
39:f6:d3:b1:6a:74:7a:b0:08:ee:4b:56:5b:ca:b4:
f7:8d:c2:47:1b:a3:33:cb:b7:6e:db:bd:75:52:1f:
59:46:bc:2b:f5:85:66:3c:7d:f5:7c:12:4f:36:d5:
08:a9:55:ab:56:b5:91:78:42:b4:0b:85:11:3c:d3:
83:b7:55:be:a6:09:a4:f1:43:3f:57:eb:7b:10:ea:
f7:3c:e4:05:6b:b2:31:38:f1:6c:6e:7c:8a:81:a9:
b5:0b:69:fc:c0:9a:44:35:fd:0e:a1:18:df:59:ee:
b6:25:e2:ee:82:bb:f2:e3:fc:ff:dc:82:8f:3f:1f:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:79:EA:69:FB:D8:65:31:B5:7B:0D:8B:81:52:41:EE:06:3C:2B
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:9e:9d:69:c2:be:de:ef:b9:58:92:d2:56:3d:ed:03:d2:
8b:43:98:bd:be:16:57:ff:d1:2c:4d:e5:26:64:66:4b:09:9e:
a1:0d:f0:e4:a4:bd:f7:8c:b5:78:16:c9:97:9e:20:52:01:48:
31:15:d8:a9:f1:45:55:2d:3e:3b:43:2c:32:e6:b9:9d:6d:fe:
ae:46:99:e5:90:81:6d:51:12:de:5d:59:b4:1f:47:7a:0e:04:
5c:04:2c:4a:ff:2e:b3:8f:19:95:4c:ec:5a:34:c4:c8:db:84:
7f:7f:00:db:a2:af:07:0f:ce:da:9e:5e:e6:2b:9e:1a:3d:fc:
1a:b9:45:f8:76:af:26:a5:95:74:31:f0:a7:64:04:ac:b1:72:
7b:b9:30:74:ff:4b:50:01:e7:cc:fe:e6:20:1d:7d:02:f4:ae:
91:4a:95:60:e3:58:e7:a6:ee:37:9c:35:5c:df:3d:90:b9:8e:
06:4a:71:90:27:53:e7:36:9b:68:3b:a1:9e:43:cc:e1:5d:31:
0f:28:34:56:0a:70:7a:a1:ed:a9:66:0a:26:d1:b0:85:96:1b:
a7:2e:79:12:d0:ef:3c:f7:05:3b:2e:28:88:4d:ae:f2:e7:92:
ff:67:3b:4b:aa:78:31:71:78:96:21:53:25:69:15:84:be:65:
67:ce:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:02 2026 by rpki-client