Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: xu1PQZrUFKuy+8FC87oDi6B2sjC+QZgmPCwFAyu6LaM=
Subject key identifier: 8A:CD:5A:A8:2D:03:56:96:43:35:28:DB:54:2E:19:C0:13:F8:11:B1
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 01A0D6B95252E55EA104AB88A9E02C9E2E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 01EA
Signing time: Fri 25 Sep 2026 04:01:04 +0000
Manifest this update: Fri 25 Sep 2026 04:01:04 +0000
Manifest next update: Sat 26 Sep 2026 04:01:04 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: 0Q1sitc1v57avCryJdXnEGyl7qDZctKo4MEEuXDaPTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:52:52:e5:5e:a1:04:ab:88:a9:e0:2c:9e:2e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Sep 25 04:01:04 2026 GMT
Not After : Sep 26 04:01:04 2026 GMT
Subject: CN=8acd5aa82d035696433528db542e19c013f811b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:6a:f7:3c:dc:dc:6b:98:a0:d0:7b:2b:28:
19:a8:00:ca:d6:04:a4:3f:b5:1e:2b:01:90:6c:10:
10:6c:c1:8c:af:a7:51:2c:76:33:e9:3f:30:e9:0b:
8f:3c:60:94:44:ba:88:10:aa:eb:23:af:6d:8b:f2:
58:dd:53:c0:37:b3:06:80:c7:24:ae:8a:d9:1b:1f:
38:03:8b:03:f8:c7:12:2d:b5:5c:f6:4f:a0:1a:ee:
f0:19:ec:bc:d6:53:a6:49:7a:f1:08:c5:b4:8f:86:
26:f6:91:95:f2:21:20:37:59:7b:1b:7f:69:0e:7f:
1e:e0:df:44:9d:d7:31:33:07:58:97:29:44:5e:50:
c7:ad:69:6b:c5:68:21:09:8f:db:b5:fa:8f:13:5f:
70:21:40:5b:0b:12:f1:0c:4f:45:a3:43:ac:b0:65:
b3:48:9c:d9:8b:92:56:c1:1c:ac:7a:bc:a4:b9:e9:
fc:5f:ac:c3:82:18:91:b6:ca:47:8b:ba:a6:36:79:
02:96:a1:27:23:91:15:33:2d:20:bc:2b:8f:b8:34:
40:9c:94:b6:dc:ba:6a:0b:f7:bc:54:1f:ba:7a:12:
3d:f1:a8:6b:66:e2:01:27:da:49:10:dd:3c:cc:b7:
71:9b:31:8c:63:0c:fc:f6:5d:05:77:c9:74:25:d9:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:5A:A8:2D:03:56:96:43:35:28:DB:54:2E:19:C0:13:F8:11:B1
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2b:6e:9f:c9:dd:4c:2d:8b:33:eb:75:42:3d:75:0d:ad:7b:
66:bf:11:3e:cc:e2:2a:eb:b7:a3:e8:cf:59:fd:b2:6b:57:89:
b1:e6:91:fe:b7:93:8f:d0:75:2c:6c:2f:bc:00:4d:37:41:02:
9a:63:2b:ee:e3:3d:1b:fd:42:67:fe:a5:39:58:bc:57:93:21:
89:d5:90:05:9f:06:56:ed:b8:5c:5a:4c:fb:70:21:cf:73:e2:
ec:5c:c7:cf:c1:04:e8:f4:9d:03:f6:ac:5c:c8:ee:87:dc:c4:
bd:28:eb:40:03:10:9d:a1:25:e4:f3:ef:8a:38:51:f7:e9:6d:
4b:34:42:f6:6f:42:71:53:73:4a:44:bd:c7:c0:e4:98:76:90:
11:ca:21:de:21:96:50:a9:f9:79:66:60:ee:b3:39:43:3a:29:
b6:95:13:54:79:05:bd:95:d0:37:0a:5f:09:16:da:21:d1:c2:
45:ce:07:28:ae:ba:2f:66:a5:59:d4:96:f0:be:63:99:bc:2e:
7a:d4:de:79:74:bd:8c:d5:6a:c6:7b:75:a8:46:39:d7:2a:c5:
4e:f8:73:14:ed:28:a2:ac:d0:81:fa:e1:82:64:f2:1d:22:72:
30:ff:ee:c4:72:bc:1f:08:ef:46:b0:a5:2a:b2:b6:0f:9b:06:
00:e4:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:10 2026 by rpki-client