Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: hBuCWmg9dD20qBcbWzU/Lx4BEzi0A5uUmqm/ciT7ajQ=
Subject key identifier: BB:13:A2:3F:8B:E3:BE:CF:B2:A7:91:27:34:6E:93:66:56:6E:FF:11
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 01A0D727595F8B009FBB860B8800E4B371F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 06:01:15 +0000
Manifest this update: Fri 25 Sep 2026 06:01:15 +0000
Manifest next update: Sat 26 Sep 2026 06:01:15 +0000
Files and hashes: 1: 0bOGjfX8rCaFK1EFr_iCf9m9E2s.roa (hash: cuAwT7O+fNr0dZzRVxu32quxhPqTENg6uOwyovOP9iI=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: zy7KeQl0fT30u5aBVTLp9fBghAJioZyRKiRdfMfGOJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:59:5f:8b:00:9f:bb:86:0b:88:00:e4:b3:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Sep 25 06:01:15 2026 GMT
Not After : Sep 26 06:01:15 2026 GMT
Subject: CN=bb13a23f8be3becfb2a79127346e9366566eff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:c0:5c:71:73:fd:1f:cb:31:d9:a6:d7:cd:
bb:f9:9f:fe:10:fd:25:9a:f4:74:9b:e9:c4:58:a1:
55:6e:78:3e:28:9c:96:43:df:ef:42:0e:68:85:d2:
a1:ba:a9:db:e6:27:b4:cf:fe:19:38:02:b3:7c:3c:
e5:04:ae:9a:e5:29:23:f8:a2:5e:5e:7a:a4:fa:02:
f4:6e:b5:a5:c2:e9:d6:ca:6a:aa:9b:36:27:a8:d4:
6b:a3:6b:6b:d1:af:16:8f:1f:38:65:2c:09:2a:e1:
db:6c:d0:4d:d4:11:d8:ff:e4:cc:03:42:86:31:86:
3c:0f:2d:49:70:de:de:6e:30:cd:95:d2:da:8b:0b:
c4:99:7f:d9:58:7e:e9:b8:b5:9a:d3:0d:45:de:a1:
37:64:e6:b4:37:54:9b:90:83:63:a4:a4:8c:4a:5e:
dc:ec:17:e8:8e:05:c0:6b:4d:dd:21:7d:22:65:45:
0e:66:04:ab:58:13:69:73:9a:73:02:38:06:8d:a0:
8e:21:b7:05:aa:96:2a:3a:d9:f2:4e:04:6c:28:38:
b5:ec:c8:9e:f6:84:a4:b6:29:32:33:7a:19:1a:0b:
f6:bf:ad:36:06:57:4f:c9:2d:aa:a6:88:c0:65:31:
68:28:e7:42:46:ce:3b:e8:4a:70:01:23:f4:de:77:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:A2:3F:8B:E3:BE:CF:B2:A7:91:27:34:6E:93:66:56:6E:FF:11
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:78:47:9a:37:6a:14:24:30:25:ca:d6:07:eb:5e:03:fe:
b4:3e:f3:b2:f4:ec:a0:c1:c2:bd:99:c1:a1:eb:0e:9e:3d:27:
17:b5:e5:83:cb:da:5c:2d:14:df:ac:e3:fd:21:18:c7:bb:39:
83:f3:09:97:a2:31:ed:ad:b3:d5:37:58:a1:eb:16:a1:08:af:
96:70:49:34:70:96:e4:cf:6d:d8:1a:16:94:f6:28:46:35:b0:
12:20:4d:4a:10:ea:80:39:4a:c6:13:d5:e0:8d:d9:50:97:c0:
05:16:63:0f:78:e2:7f:22:ba:30:aa:73:50:e4:55:ff:90:36:
f0:67:85:5a:fd:05:32:51:ce:ab:cd:b0:19:af:3e:08:06:37:
b1:19:c9:c8:2c:ef:57:cf:e2:e2:83:8b:20:3b:f9:1e:e0:cc:
73:dd:b2:0a:7b:0a:98:51:88:88:3c:6a:3e:4a:65:0f:ea:04:
d3:84:66:c9:a8:9e:0e:53:81:c0:66:24:71:ae:8d:37:02:b6:
da:ad:23:9d:f0:72:33:0a:26:c5:c1:62:42:ec:3f:8b:1a:e9:
5d:19:76:57:7a:5c:0e:c1:96:73:d0:89:4a:66:d3:48:c5:9b:
fd:3f:27:9e:3a:a4:04:a1:6f:b5:cb:4d:b3:ff:5c:21:a9:3f:
cc:80:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:37 2026 by rpki-client