Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: omFnzQociCRGuLXSs/UUnjoV6O+M5SLQ88JK/VkTgSo=
Subject key identifier: 96:EF:56:FE:76:55:29:D3:BF:85:89:96:E5:6B:F5:2B:DA:FF:19:A5
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019D29299EF3D4CF775F983F258FE9A05F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: Oumo3+aZk648d3FZ0ETgv7Lo8Kyy4WIS4zZuHB7tp7s=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9e:f3:d4:cf:77:5f:98:3f:25:8f:e9:a0:5f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=96ef56fe765529d3bf858996e56bf52bdaff19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:47:ab:42:d1:93:1c:81:4e:be:2d:27:e9:
0f:86:b4:68:ff:e8:66:59:43:d5:b3:64:74:3a:ca:
da:fd:20:c5:a4:99:c7:a2:35:a1:32:bc:52:ff:1d:
41:03:07:07:2a:93:8f:89:7e:37:dc:ab:8d:fd:24:
f3:68:2b:5e:5f:68:93:ca:e4:eb:46:8b:b3:cd:b5:
87:e0:24:0d:bc:cf:c4:9e:b7:6d:1e:c7:02:cb:23:
56:fa:f9:b8:77:30:3d:a1:d7:ae:4c:50:e2:41:22:
16:54:b8:39:31:28:86:8c:56:d5:cc:57:99:a8:00:
d9:78:06:81:0f:47:57:d6:e5:63:d1:75:9a:b4:99:
7b:20:bf:da:a1:96:92:dd:54:80:d6:fb:d8:5a:c0:
39:8c:c1:e8:cc:e2:71:ae:ad:68:27:48:07:8a:31:
83:ff:a8:73:6a:a5:44:6f:e5:80:90:e0:80:4c:0b:
15:6b:ac:a6:ea:9a:38:2e:3e:7a:b4:b5:6d:22:34:
58:0c:70:62:52:64:a3:fb:36:31:52:6a:c4:e6:e2:
bb:4c:5a:67:6d:96:49:d5:36:1c:a2:69:78:76:2d:
8c:39:27:b5:16:a2:47:24:f6:39:1d:0d:5d:c3:b9:
6b:2a:dc:06:26:cf:c2:c2:28:e5:34:db:27:a6:67:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:56:FE:76:55:29:D3:BF:85:89:96:E5:6B:F5:2B:DA:FF:19:A5
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:41:e8:49:cf:17:8c:85:68:e7:1b:50:de:b3:2f:28:d1:4f:
42:d1:49:3f:80:59:1d:33:c3:99:23:41:cd:3f:6b:2e:07:95:
3a:6d:ea:5d:d3:33:ae:51:ea:0a:d2:a6:e2:bf:87:b0:b6:bc:
6e:22:68:48:59:5c:11:0f:91:81:3d:de:2f:23:bd:5b:66:42:
32:a2:13:32:5e:96:cc:d1:95:20:cc:86:ba:c9:4f:2c:25:6e:
fd:cf:87:f7:8b:ef:3a:83:44:6d:ed:5d:32:5d:9a:91:8d:88:
3a:5a:5c:10:ca:0e:d3:5e:c1:40:ce:d5:38:5a:15:b9:46:43:
59:85:83:bf:30:a7:b0:96:d6:71:89:87:dc:e1:f4:05:28:18:
75:3b:fc:52:46:8d:7e:f7:43:64:a0:79:89:60:f0:19:f6:c4:
3e:1b:f9:eb:ff:48:fe:67:ac:ce:61:7e:0b:b3:a0:e5:26:ec:
5d:51:eb:fb:06:d4:47:e4:f3:96:84:36:a3:df:6f:52:21:d3:
64:a0:4e:9e:31:56:23:84:72:5c:c4:80:c9:52:c1:02:dc:fe:
62:07:d3:f3:03:8f:59:6a:70:8d:ce:71:5e:99:83:9a:76:5b:
4b:f4:bd:59:cd:76:74:9b:4a:79:0b:9f:97:73:c4:17:77:cb:
1c:7d:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:59 2026 by rpki-client