Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: 9G5wZw4ZQhwHeOoXk7BSpsf/CUNjtO4lJXQQhpjhmOM=
Subject key identifier: 3D:55:D0:E8:24:03:4E:3C:C4:6D:19:91:BC:4B:1F:F6:F8:C7:C8:9C
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 019CAA2201C5E38B6492C406B35D0242F9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0EFB
Signing time: Sun 01 Mar 2026 16:01:21 +0000
Manifest this update: Sun 01 Mar 2026 16:01:21 +0000
Manifest next update: Mon 02 Mar 2026 16:01:21 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: dZehknbAPaeJI2jHilrfgiseQSp9lW9rdufKyHw9bEc=)
2: TF6uvKJoThoeL-6VAxiiIrXGTDE.roa (hash: Z1iMOswxtKc687KzUW15WbR0/w7lrYl+AKo5ErE1KtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:22:01:c5:e3:8b:64:92:c4:06:b3:5d:02:42:f9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Mar 1 16:01:21 2026 GMT
Not After : Mar 2 16:01:21 2026 GMT
Subject: CN=3d55d0e824034e3cc46d1991bc4b1ff6f8c7c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:a6:11:9a:2b:82:19:4d:19:e4:c4:01:ed:
36:b2:35:f2:cd:c7:50:f3:1d:b5:34:2d:38:26:bc:
fd:47:ec:fd:39:f3:88:20:96:5c:03:e8:a0:4d:0d:
48:1b:da:53:68:fd:f1:9f:f0:9d:e5:c7:5f:43:9a:
41:24:b6:8e:4f:94:70:0f:2e:49:aa:4b:19:3a:b0:
85:de:ff:35:fe:f8:5b:99:0d:07:d6:6b:60:5b:b2:
a5:07:ae:3d:c2:60:46:ed:12:ae:18:f8:86:1f:ad:
b7:c1:3d:da:bd:8d:a7:71:f0:88:6e:f3:66:f0:73:
5f:a4:fd:8b:6a:96:ad:33:f2:36:e8:b1:7b:6c:cd:
bf:b1:98:8a:fc:f0:cc:1a:2f:0a:a1:03:d8:2d:40:
f4:43:a7:7f:f8:92:0b:8f:f2:4f:3d:06:98:07:d5:
db:8d:3d:98:1a:fa:c7:f7:2f:f3:05:66:3a:87:ec:
10:0d:f3:98:3c:7d:91:5b:fe:17:a8:7c:70:eb:13:
ca:a7:33:11:27:1a:71:38:96:4d:b0:29:58:06:56:
ea:7a:f4:49:c6:44:6a:04:56:51:40:8f:1a:78:f3:
30:9e:95:42:e7:77:41:6b:0f:4d:76:05:03:f6:7e:
22:d0:7a:c2:2d:ad:39:32:75:9b:2e:29:d6:58:72:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:D0:E8:24:03:4E:3C:C4:6D:19:91:BC:4B:1F:F6:F8:C7:C8:9C
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:62:9c:a0:68:0e:ed:f7:f2:bd:c0:07:2e:27:6a:63:65:52:
5a:f8:df:64:c5:dd:bb:6f:b5:b3:25:5b:ce:59:c3:89:ad:60:
09:96:00:59:ad:54:16:ec:af:b3:9a:78:c0:76:10:8f:8d:f5:
bf:17:31:87:10:8c:52:59:b9:1d:b0:7f:66:95:b6:08:fe:f4:
98:60:a4:cb:4d:5e:6d:26:7d:ec:53:bb:4a:4f:3e:7a:0f:20:
98:82:d8:44:12:1f:f1:ae:c0:a4:ea:af:21:c2:ed:91:24:58:
be:c7:30:e9:2d:2a:9a:ba:d0:1c:25:58:9d:4f:d1:96:40:be:
ae:62:a9:cb:6c:1d:d0:f6:6d:9e:68:02:01:5b:43:48:d6:10:
a0:6e:ae:f6:bd:63:90:5b:cb:33:60:6a:62:f3:26:37:96:4a:
f0:35:77:56:d2:59:6f:a3:1b:84:9e:1c:aa:04:19:4a:d1:3f:
b9:8c:73:b7:ff:76:59:c8:59:7d:e4:b3:73:55:c4:c2:84:1d:
42:1c:12:3d:83:28:0c:a3:54:11:eb:d0:8d:99:37:6a:b8:75:
cd:ec:21:be:3f:69:9f:35:66:65:c3:fe:35:1d:2d:71:db:bf:
ba:44:95:2c:d0:c7:90:ec:25:ee:1a:bd:49:ff:98:18:15:52:
a7:78:84:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIgHF44tkksQGs10CQvnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj
OTQwNmUwHhcNMjYwMzAxMTYwMTIxWhcNMjYwMzAyMTYwMTIxWjAzMTEwLwYDVQQD
EygzZDU1ZDBlODI0MDM0ZTNjYzQ2ZDE5OTFiYzRiMWZmNmY4YzdjODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PWmEZorghlNGeTEAe02sjXyzcdQ
8x21NC04Jrz9R+z9OfOIIJZcA+igTQ1IG9pTaP3xn/Cd5cdfQ5pBJLaOT5RwDy5J
qksZOrCF3v81/vhbmQ0H1mtgW7KlB649wmBG7RKuGPiGH623wT3avY2ncfCIbvNm
8HNfpP2LapatM/I26LF7bM2/sZiK/PDMGi8KoQPYLUD0Q6d/+JILj/JPPQaYB9Xb
jT2YGvrH9y/zBWY6h+wQDfOYPH2RW/4XqHxw6xPKpzMRJxpxOJZNsClYBlbqevRJ
xkRqBFZRQI8aePMwnpVC53dBaw9NdgUD9n4i0HrCLa05MnWbLinWWHLgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1V0OgkA048xG0ZkbxLH/b4x8icMB8GA1UdIwQY
MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt
NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh
LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWKcoGgO
7ffyvcAHLidqY2VSWvjfZMXdu2+1syVbzlnDia1gCZYAWa1UFuyvs5p4wHYQj431
vxcxhxCMUlm5HbB/ZpW2CP70mGCky01ebSZ97FO7Sk8+eg8gmILYRBIf8a7ApOqv
IcLtkSRYvscw6S0qmrrQHCVYnU/RlkC+rmKpy2wd0PZtnmgCAVtDSNYQoG6u9r1j
kFvLM2BqYvMmN5ZK8DV3VtJZb6MbhJ4cqgQZStE/uYxzt/92WchZfeSzc1XEwoQd
QhwSPYMoDKNUEevQjZk3arh1zewhvj9pnzVmZcP+NR0tcdu/ukSVLNDHkOwl7hq9
Sf+YGBVSp3iE+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:18 2026 by rpki-client