Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: dBRQkhbtofPNM4gGOVpzHx/MkOVFddkDRfa6/j9FGzo=
Subject key identifier: 8A:4E:04:85:FC:ED:F1:18:40:14:20:8C:33:78:70:31:02:EB:B6:A6
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 019D322C160B96B58256B51978F0E156300C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 1428
Signing time: Sat 28 Mar 2026 02:00:43 +0000
Manifest this update: Sat 28 Mar 2026 02:00:43 +0000
Manifest next update: Sun 29 Mar 2026 02:00:43 +0000
Files and hashes: 1: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: itpQkqI0Eifi1v6wQNVUEim/Ar8pZrE9ecAp7Z1x1Vc=)
2: JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa (hash: rIUEPyZH+tezouTeaObRUTshflwC+zsZEomWJIodOoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:16:0b:96:b5:82:56:b5:19:78:f0:e1:56:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Mar 28 02:00:43 2026 GMT
Not After : Mar 29 02:00:43 2026 GMT
Subject: CN=8a4e0485fcedf1184014208c3378703102ebb6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:35:4f:64:e3:d3:05:ab:d0:75:47:85:3c:
ed:0d:90:8f:03:54:f4:3c:ef:b2:2e:33:7a:fe:eb:
35:fb:18:aa:47:72:01:85:de:a9:29:12:71:e3:36:
d1:95:85:7b:65:1d:d3:03:8d:03:d4:49:05:a3:1a:
0d:be:c9:af:bc:82:99:3d:e1:cc:c1:a4:e2:88:62:
29:ae:bf:a5:ca:16:24:5e:9e:3c:39:b9:0c:2a:eb:
42:a6:ce:2e:e2:e5:74:83:1e:ab:85:f0:b7:22:e6:
be:d0:1a:ba:88:56:ed:9b:29:ea:fe:39:01:10:14:
b9:f9:94:4f:45:10:53:2b:3f:eb:19:f6:4f:e2:66:
72:1f:5d:33:ae:16:8e:c7:5c:88:7b:c1:cc:3f:f7:
42:1a:fb:22:b6:39:9b:a4:7c:03:83:db:a8:c0:1e:
8a:84:7d:41:91:ba:d8:0e:53:31:04:90:6c:bd:a3:
b2:5f:50:04:50:42:41:85:65:7b:17:fa:e9:e6:e9:
ca:6e:30:00:73:ed:85:49:04:61:87:01:fd:b1:c9:
6c:cf:ee:c7:3f:b5:f3:e9:8b:2e:7e:cc:57:a9:a4:
ba:5a:fe:ec:1c:ce:2f:67:a9:f8:e2:5d:2d:5a:55:
b1:05:65:da:07:2f:d7:76:a0:f8:3a:c1:11:74:80:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:04:85:FC:ED:F1:18:40:14:20:8C:33:78:70:31:02:EB:B6:A6
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:86:6e:67:6e:58:86:16:76:2e:3b:8f:09:03:0c:74:d6:f2:
cd:20:3c:dd:b6:2f:e4:dc:e5:38:a7:6b:65:80:7f:b1:57:65:
99:99:7b:1a:45:2c:90:2f:33:da:ab:56:d9:4a:e7:51:6e:8f:
90:e1:f6:cc:15:f1:8a:48:f3:c4:d7:0c:35:78:17:87:4d:f7:
37:a5:f9:ee:e0:95:7f:ee:92:d5:9a:a3:56:b6:ae:b7:4a:ac:
16:a4:d9:13:64:8e:83:51:b9:90:f4:30:d2:c6:df:7e:ea:fb:
48:b9:4a:6b:e9:86:28:a5:b9:42:30:43:ac:be:db:ce:86:c7:
9f:dc:46:95:96:3b:25:dc:a3:6c:73:1a:54:4d:47:0e:bb:1f:
7b:a8:36:2c:9a:cd:45:bf:1d:d0:6f:20:88:22:72:7a:c4:39:
6a:eb:30:5c:8d:87:d2:90:e9:48:7d:cd:7c:df:ef:24:08:26:
3c:5c:3f:6b:a5:39:47:12:1b:3e:66:97:40:2c:98:95:77:f4:
6c:9e:00:b4:f7:15:f6:14:2a:1f:91:ef:7d:0d:f8:e7:5c:5d:
a7:9e:4d:56:2f:50:f7:52:b1:36:75:57:5d:5d:34:de:e0:e9:
a7:1e:ff:15:d8:7d:e1:59:b8:1e:17:b1:24:ca:bf:d2:bf:24:
53:de:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:41 2026 by rpki-client