Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: w7Ws1UKgYRfwwpaZZeX9GbvfunU63J0jfyZfzd58olg=
Subject key identifier: 7D:57:DF:29:D1:FC:DB:AB:CB:0B:5D:E4:3F:D5:D6:6A:33:09:D6:96
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019E1D902D5C6564A4FB5F829C45DB50AAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 81
Signing time: Tue 12 May 2026 19:00:48 +0000
Manifest this update: Tue 12 May 2026 19:00:48 +0000
Manifest next update: Wed 13 May 2026 19:00:48 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: PwJiEaqDYXBiHj0twT1m2FEIRjbIukMR1VdwwMPAxzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2d:5c:65:64:a4:fb:5f:82:9c:45:db:50:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: May 12 19:00:48 2026 GMT
Not After : May 13 19:00:48 2026 GMT
Subject: CN=7d57df29d1fcdbabcb0b5de43fd5d66a3309d696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:08:cc:43:fe:55:aa:1e:54:52:20:a2:7d:
0f:e0:ac:fa:c4:51:a5:63:c7:15:b4:8e:b9:75:31:
0e:fc:02:a9:d6:7d:16:3d:4f:cd:7f:78:37:e8:ff:
3e:91:40:c5:5a:e5:da:46:1f:4a:23:d2:3e:0c:79:
3b:71:f3:7d:69:c5:b4:7c:13:19:eb:b1:bd:49:9b:
ab:01:18:a2:ba:20:71:03:c4:39:2b:a9:ad:d2:b0:
1b:fb:f9:fd:48:05:10:64:e0:89:49:0f:2b:d2:fe:
7b:06:c0:ed:f6:70:12:03:dc:61:6f:7b:e7:5e:f2:
43:e9:0b:41:35:7d:23:19:a3:4f:c0:54:cc:7e:85:
af:3d:24:37:73:78:1f:b5:b4:50:a3:ca:e3:8b:73:
76:59:02:c6:7e:9b:e4:42:e7:ca:18:34:fa:9a:63:
88:b4:59:5f:e1:69:47:f4:08:9d:a6:17:01:8c:1d:
83:ea:93:0e:e8:c7:02:78:bf:fb:b2:9c:e9:63:c1:
1c:bf:5c:b5:cc:5a:cf:d4:1b:11:3f:e5:5e:76:e8:
bb:db:39:80:44:ec:4f:d4:0e:83:79:07:06:45:82:
e2:0d:3f:7b:f1:1c:80:67:96:e3:4f:b7:ba:17:49:
22:5a:3a:58:2a:64:6b:ed:a0:dd:e3:33:d6:e2:f7:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:DF:29:D1:FC:DB:AB:CB:0B:5D:E4:3F:D5:D6:6A:33:09:D6:96
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7d:4a:e1:51:52:da:af:ea:2e:9e:46:0c:ab:11:9e:61:e9:
86:de:ad:a2:08:18:0a:fd:67:61:e8:6a:6f:47:24:c4:66:fa:
20:21:e8:64:6a:34:35:22:c4:05:69:41:1b:04:27:c3:87:cc:
d1:1b:1d:ad:26:bd:cb:8d:36:e5:26:71:ea:ed:63:39:21:c6:
66:8a:d9:db:54:c7:82:02:fb:61:94:ec:a8:c2:1b:75:7c:fb:
07:50:73:67:d9:f3:27:74:8e:f7:8e:e1:e7:d1:8b:98:17:37:
f0:62:a5:bc:6e:56:2e:c7:3e:72:01:e9:3c:bd:31:dd:e5:f5:
53:cb:25:25:7e:a6:49:b0:57:83:46:dc:15:5c:af:80:2d:7f:
ba:a5:14:30:71:07:49:07:68:6c:79:46:34:9f:e9:4a:70:21:
2f:75:c0:ad:44:8b:8e:8e:71:5d:ba:c3:e9:f6:cb:fc:ba:ea:
a3:83:ad:98:1d:32:b3:17:63:2a:3d:55:be:a5:85:c4:27:95:
ee:47:42:f1:64:6f:cf:79:b0:b8:e3:1c:31:b6:57:97:26:d8:
83:8c:cf:72:33:99:a6:f0:cf:0a:02:1e:a4:9a:f6:3d:25:8d:
31:2b:df:a7:a3:06:29:06:d2:b8:97:b6:17:44:8a:49:39:cd:
92:ae:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:12 2026 by rpki-client