Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: kOsOzrL3hMLoLO0FOuzE15hv8wAyVIOilGBF4jkwmQQ=
Subject key identifier: 24:42:D2:E9:5D:86:3C:63:01:AD:C2:98:AE:43:90:E2:95:A1:89:A5
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019E1E6C58EE7B4F142CDB738E1CDA3D8598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:17 +0000
Manifest this update: Tue 12 May 2026 23:01:17 +0000
Manifest next update: Wed 13 May 2026 23:01:17 +0000
Files and hashes: 1: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: rIIlqgmNQ7I6V1JLM4KVXvTg540CetctIxRPz9Ds3fI=)
2: sct50ors-JAGFuKrDKCEczrCwZg.roa (hash: 4H40k4wD5tya3FMuPK36WamPaWB4B0t6QhSmDBo+9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:58:ee:7b:4f:14:2c:db:73:8e:1c:da:3d:85:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: May 12 23:01:17 2026 GMT
Not After : May 13 23:01:17 2026 GMT
Subject: CN=2442d2e95d863c6301adc298ae4390e295a189a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:22:d8:de:2c:38:ba:c6:1d:94:35:7a:23:
ee:db:27:d9:ea:e3:8f:5a:75:aa:0e:b6:6a:2e:92:
e6:f0:3b:a5:10:a3:96:e8:e5:6e:6c:94:fe:b7:fd:
47:49:7f:05:e2:4c:7e:6a:bc:9f:72:8a:db:ab:03:
9e:b9:db:93:8e:27:91:6a:46:bd:ae:12:23:3b:d2:
e6:ec:ee:f3:8a:ab:f8:6b:5e:92:3d:71:17:41:e4:
97:15:7f:3d:ad:e6:4b:75:a8:c7:a7:07:fe:2a:94:
c4:4c:de:b5:bf:86:0a:47:a8:6d:bc:99:a9:2a:0b:
75:a2:06:01:26:a8:ce:cc:bb:de:08:09:d8:e2:8e:
12:49:20:f8:76:f2:e6:33:4b:5f:b1:ce:5d:01:30:
52:e0:b8:04:a4:9a:fd:da:c9:5d:23:50:bb:8a:1d:
9a:52:87:e2:8c:06:52:69:e2:a0:c1:68:22:71:30:
2f:d1:54:98:02:9b:fe:99:06:94:1f:db:09:13:4c:
75:8a:1c:28:e7:e4:6d:07:1b:a6:26:d9:17:5a:ba:
a7:07:b0:e3:21:fa:5e:1b:97:5b:65:62:bf:36:8b:
fa:79:33:e8:ed:cb:e8:4a:4f:4a:df:56:7b:d7:b0:
d6:56:ed:51:8a:74:aa:a3:04:e1:d9:4f:c8:6c:36:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:D2:E9:5D:86:3C:63:01:AD:C2:98:AE:43:90:E2:95:A1:89:A5
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a6:b0:69:5b:7d:81:5b:16:8d:0f:db:98:6e:c5:e7:a5:36:
6e:1e:9b:d0:81:4d:f1:89:45:ef:5c:76:39:12:61:7a:2e:a3:
95:3f:8a:97:19:d7:6c:f7:8d:de:3a:31:2a:43:0a:ef:5d:d6:
c7:a4:13:66:78:11:e3:ce:fe:01:b4:c9:c4:fe:09:9d:02:eb:
4c:de:4d:ce:e5:77:c6:f6:88:d4:4e:9a:58:b8:c9:3a:df:6e:
ba:f6:49:c9:7a:d5:9d:0d:22:74:56:70:81:e2:78:96:51:a1:
1e:d3:1f:b6:81:ca:74:36:fa:13:87:60:3c:73:9f:85:46:82:
57:db:b8:2f:f7:3e:93:3e:8b:1b:54:c1:91:19:c8:8a:54:b3:
dc:9c:29:0a:23:f5:bb:2e:7b:22:f4:00:bb:0b:c2:03:fb:0b:
41:5c:9b:fb:e1:49:3f:a9:b2:94:d3:3a:40:61:2e:53:3c:cb:
4e:dd:66:ef:f4:5e:46:cc:04:eb:72:36:6a:f2:ad:8e:62:f8:
ff:6f:f6:cc:9a:f1:51:ee:d5:3a:c2:7d:86:87:77:76:09:7b:
38:5c:ee:3a:ab:f3:98:af:90:7a:9f:21:c9:f4:ec:3b:30:ca:
3b:67:40:55:71:e7:f8:7c:25:1d:c8:6c:38:13:e7:82:4a:2b:
a8:1e:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:29 2026 by rpki-client