Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: 9vE5VtZ+t+3fKkdNRxzMcPbEngaP/7vVMvrLLeLAZDU=
Subject key identifier: 29:47:22:56:82:D1:3E:45:5B:50:81:20:F6:41:BC:03:4D:62:39:D2
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 019F8E34F4AAE1DC0320BE332C4F09CAB247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 0CE6
Signing time: Thu 23 Jul 2026 09:01:02 +0000
Manifest this update: Thu 23 Jul 2026 09:01:02 +0000
Manifest next update: Fri 24 Jul 2026 09:01:02 +0000
Files and hashes: 1: Afr0mV20pbPHdZnpWYatELuCEvo.asa (hash: owfqUhE14A6UilAazSw974fh+e2NlWVeQw7fmwItRO4=)
2: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: 5M/Mj0pxomD057WodlsOc4478yef+MPTTtk93hVNkMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:f4:aa:e1:dc:03:20:be:33:2c:4f:09:ca:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Jul 23 09:01:02 2026 GMT
Not After : Jul 24 09:01:02 2026 GMT
Subject: CN=2947225682d13e455b508120f641bc034d6239d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:06:1a:dc:d7:1a:b9:65:15:c3:83:65:ff:
69:a0:30:65:ed:d7:a2:de:1d:2a:a1:85:d8:f4:ed:
52:78:45:08:b7:bd:f8:f1:74:eb:13:c5:c4:d5:95:
3c:29:ce:b7:08:23:b2:b1:8b:ca:2c:ba:2b:e5:0f:
9f:99:f6:14:02:fe:9b:ff:c9:8a:64:e7:14:bd:2f:
61:9d:24:f4:08:f8:47:c5:f2:ef:04:9c:db:ca:26:
3f:24:6c:5b:8d:46:4c:04:c1:d9:3d:4d:7b:16:31:
60:cf:f8:87:0d:1b:a7:99:3e:1e:b7:e3:61:9b:dd:
24:d5:be:46:06:32:f5:f5:bc:2b:b6:d2:c1:c1:86:
de:4f:64:49:a9:b7:bf:43:ac:86:14:e8:8d:c4:09:
05:e9:d2:42:5d:8f:27:89:96:07:4f:65:2b:01:0e:
54:ee:1c:b2:19:3e:1f:d6:f8:d1:1e:90:ab:43:86:
0a:27:43:f1:7f:41:a4:f0:dc:6f:1d:05:2e:65:89:
2a:99:c9:19:51:5e:79:6d:5b:64:0f:55:fa:ce:39:
19:6b:6f:bc:89:78:22:76:bf:5b:39:99:a7:af:fd:
f8:61:91:bd:06:5f:68:34:a6:a3:88:f5:cd:dd:34:
ab:f4:29:1d:f6:e8:94:9b:95:ba:69:8e:eb:2c:cd:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:22:56:82:D1:3E:45:5B:50:81:20:F6:41:BC:03:4D:62:39:D2
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:57:20:f8:7f:ac:eb:3c:9d:c8:97:14:9c:b0:89:fa:59:
c2:3a:b9:32:71:58:0c:6b:bc:d9:f1:19:2d:94:31:61:13:e7:
74:e3:32:0a:04:0e:e7:0a:c0:0e:67:03:03:f5:4f:c5:2a:ee:
a5:54:a3:dc:e1:c0:1f:56:32:a0:ef:b9:89:84:46:4c:01:63:
9c:91:02:ce:d8:a4:d6:43:40:9b:6a:5c:c4:43:7d:57:a0:a3:
61:a6:17:80:79:34:53:92:10:0a:7a:70:30:6f:5b:84:78:37:
7d:61:87:2f:de:30:3c:f8:b0:58:5e:3a:dc:5f:a9:44:83:b6:
c1:62:cb:10:7e:94:8e:3f:05:10:a7:fd:7c:b3:01:9b:ce:4a:
f5:fd:c2:6a:03:5e:45:12:6c:58:6b:d9:43:c0:07:b3:35:38:
60:3a:fa:81:f0:16:d8:42:c8:43:5f:27:ba:4a:0c:3b:31:a1:
4b:d3:0d:9c:39:4f:c2:95:ec:76:b0:a3:19:31:37:17:b2:ea:
c2:d6:c5:26:d8:8f:eb:bc:c4:62:89:ab:c8:bc:45:8e:44:e1:
1f:39:00:35:25:5f:97:34:e7:af:10:3f:7c:ed:e1:60:a4:ba:
34:e2:d9:37:75:68:6d:b4:37:35:ce:3e:25:f0:42:22:ba:20:
c8:7e:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:36 2026 by rpki-client