Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 8oE7ls8huFSbOqEBCxugqR6pdJG1FIIwNM1MCGmICJ4=
Subject key identifier: 0A:A3:03:AE:51:E9:99:EB:32:DE:E1:B4:8F:DC:8D:E5:CB:D2:1B:23
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019F90C7B8BA2BDCB1076DC071F431284E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: 0bOGjfX8rCaFK1EFr_iCf9m9E2s.roa (hash: cuAwT7O+fNr0dZzRVxu32quxhPqTENg6uOwyovOP9iI=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: pdiec+5EeBNyGCx6nhCLhKEOPBmNLZn8bwACJHB8kNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b8:ba:2b:dc:b1:07:6d:c0:71:f4:31:28:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=0aa303ae51e999eb32dee1b48fdc8de5cbd21b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:ed:09:3b:8f:e7:d1:f5:f2:3f:c2:24:8e:
82:8b:16:01:f9:b9:45:1a:d5:70:e0:d3:c3:d7:b2:
a9:92:5c:7b:4a:08:7e:3e:9a:b5:9e:3e:d9:dc:23:
33:17:f6:96:1e:1c:13:eb:53:cf:cb:a4:78:56:47:
be:37:45:f9:a2:89:d6:d9:4a:72:d9:d6:41:33:73:
44:d8:eb:4a:24:a4:d4:d7:a6:23:2f:a8:67:9c:bc:
79:b9:31:42:44:89:ad:08:7b:57:bb:df:cc:45:a6:
35:28:c4:22:b5:9a:30:57:50:48:f7:48:fc:0e:b3:
07:27:80:06:1b:24:24:c3:f5:42:bf:89:78:b6:af:
08:db:e0:1f:b5:22:b8:4e:71:27:9e:43:7b:65:39:
69:4a:f6:b5:77:3d:65:a6:ff:c2:dc:89:8a:eb:5e:
da:9b:40:70:a0:89:5a:e7:3d:15:9d:88:15:f5:fc:
9a:68:e1:2e:df:07:d1:89:cc:6e:52:d1:36:ed:63:
14:4b:ea:42:23:de:9d:c9:2a:9a:17:5e:cb:10:c0:
d8:9b:3a:b0:19:23:5a:9b:08:d6:87:99:23:33:f4:
46:25:9b:02:35:38:a2:ff:1e:fd:41:36:95:07:db:
59:e7:da:6a:d1:ab:d1:94:d4:a1:0d:b2:4e:80:82:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:03:AE:51:E9:99:EB:32:DE:E1:B4:8F:DC:8D:E5:CB:D2:1B:23
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:ae:8a:18:77:c8:16:57:f3:b5:f1:d3:6c:b8:90:9e:76:
f4:1d:f4:12:4b:90:84:d2:0a:cd:a1:e0:8a:38:cd:20:be:90:
4d:49:e5:4e:7b:6e:c7:77:04:62:16:fe:37:b8:80:5e:f4:f1:
ed:5e:c4:fb:d2:f2:22:da:1a:3f:7d:08:dc:9f:f9:f3:f3:16:
19:11:04:3d:73:59:e5:10:ad:f1:e2:07:f3:0f:b1:89:9c:35:
05:6c:21:1a:c4:3a:fa:7f:19:b5:af:b2:d2:dd:ed:e3:c3:f7:
f8:24:bd:87:b4:3c:b7:87:f7:15:c4:dd:79:97:b6:5d:02:17:
a4:47:bf:ca:77:8e:fd:12:1c:58:eb:e1:f7:82:f2:25:de:bb:
87:72:38:12:9f:8d:11:9e:db:b6:78:23:13:1a:dd:d6:80:92:
f8:d5:e6:91:a2:bd:b2:c6:f8:63:84:09:c6:9c:c0:9f:44:79:
73:f7:ab:98:70:ff:29:37:16:46:a2:46:2c:73:d9:9b:d7:e8:
cd:1a:15:2c:e5:0c:85:2b:b5:c5:06:33:9d:76:1c:ac:f3:68:
49:59:b7:27:8b:ee:2a:b8:8d:cf:e9:53:cb:c7:e6:33:5a:9c:
15:58:97:e1:0f:1e:13:2e:34:b5:ed:3b:ec:74:41:c1:72:dd:
0e:b4:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:43 2026 by rpki-client