Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: NhwRooC/Cygqpoddds8KuwC48qWCfIqjP1nRMkZoYPM=
Subject key identifier: FF:13:C6:1E:94:04:F1:51:26:12:0D:81:C3:68:D3:96:4F:0A:5F:62
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019D29299511F0F61A13E811E91170A016FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: kaEmGxm+UTigMRYXz86jYZKsHQFzLgtIQKrbhCBhqU8=)
2: sct50ors-JAGFuKrDKCEczrCwZg.roa (hash: 4H40k4wD5tya3FMuPK36WamPaWB4B0t6QhSmDBo+9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:95:11:f0:f6:1a:13:e8:11:e9:11:70:a0:16:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=ff13c61e9404f15126120d81c368d3964f0a5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:44:10:46:fd:20:ec:18:41:de:4a:c2:f2:
a5:8a:3a:ba:1e:59:59:67:f6:85:45:d2:ac:73:ee:
9a:de:82:89:f7:7f:d5:f3:c1:ae:ba:fb:ed:58:fb:
6d:96:3a:85:f6:aa:3c:79:7f:84:a7:89:d1:98:97:
b2:d7:1e:ce:1b:a6:43:6b:ba:d5:0a:15:59:63:1c:
3b:e4:de:ad:93:6f:e8:d5:63:92:56:7b:1b:97:3d:
ba:0e:63:2b:a6:0b:c9:4c:a2:ec:9f:6c:1c:3a:fb:
65:13:3e:b6:3f:31:63:d8:2c:1b:3a:b1:25:b4:c7:
05:68:e6:30:48:51:3f:73:47:7f:22:be:d2:7b:6e:
3e:c4:56:aa:b9:9f:23:77:56:79:48:eb:9a:f0:57:
2a:3a:43:de:57:99:e5:d4:ac:e6:1d:1d:b4:04:23:
f2:b1:52:be:18:ff:64:ab:de:05:97:3e:fb:2f:2b:
18:0f:b1:85:d1:d1:e6:3d:89:4f:02:fb:36:2d:9d:
15:9e:ce:8b:f1:ec:f4:2f:a4:9f:97:12:91:29:72:
93:7b:3a:c5:b0:0f:9b:16:14:5d:eb:2b:0b:23:4d:
76:26:48:e6:5a:bf:db:82:b7:da:4a:96:c5:81:da:
83:f0:e4:46:9d:de:34:c3:7a:92:7b:d8:02:10:e9:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:C6:1E:94:04:F1:51:26:12:0D:81:C3:68:D3:96:4F:0A:5F:62
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:69:9c:e9:fa:4f:22:9f:d4:7f:67:fe:25:22:31:e0:58:
51:58:d6:55:46:5b:11:2f:65:0c:6e:3e:bd:52:1f:2b:4e:e4:
e7:d5:92:7e:6f:b9:c8:7e:3e:3b:44:69:2a:ec:cc:e0:1c:2e:
de:40:6d:9a:08:7c:63:77:87:6b:72:67:c7:38:09:0e:0c:d2:
24:e4:5d:3b:3e:8e:05:ce:5f:d5:6c:bc:51:3a:49:38:33:47:
94:1a:05:b4:75:2c:88:ac:12:a0:8d:fa:79:0a:08:15:4a:3f:
46:c3:c8:c0:83:ba:f2:7d:f8:b5:e1:da:0a:83:f9:ff:4e:84:
b5:85:57:b4:84:6d:02:6c:e3:11:74:4c:3d:c6:90:cd:80:90:
f7:9f:7a:40:ae:c6:e7:49:09:77:f7:e5:a1:ff:7b:f5:3d:ce:
49:b5:7e:31:7d:9a:24:9c:2d:c2:c0:94:60:38:a8:18:37:49:
be:ce:90:56:a0:da:7e:48:4a:ca:84:56:8f:eb:44:69:64:f6:
03:71:14:27:87:9b:24:05:ed:59:46:28:f4:20:9e:1f:bf:c9:
87:3e:45:50:f6:d1:76:dc:20:e6:c5:5b:4e:9c:74:d3:22:03:
b1:5a:fb:1b:0a:49:40:6c:7e:10:75:93:45:fa:36:7c:c3:af:
73:fd:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:42 2026 by rpki-client