Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: FC7gZ1tSt89z21eq32XuqStBvJeiCvEXbQyDH/nGB1w=
Subject key identifier: 5E:C4:9C:3D:61:47:E6:82:62:93:29:C6:B1:05:63:74:60:5B:28:A9
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019FA9AB9C5E06BA71E350CEB7B78055D4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:23 +0000
Manifest this update: Tue 28 Jul 2026 17:00:23 +0000
Manifest next update: Wed 29 Jul 2026 17:00:23 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: ZG/1PVcLZFcjrKXhDJZ+R8rIGj9AT0M3A/9vhUTqW/M=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:9c:5e:06:ba:71:e3:50:ce:b7:b7:80:55:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Jul 28 17:00:23 2026 GMT
Not After : Jul 29 17:00:23 2026 GMT
Subject: CN=5ec49c3d6147e682629329c6b1056374605b28a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:52:e3:1b:cf:b5:d3:b5:a9:96:ef:75:cc:
8f:6f:c1:83:65:6d:df:8a:f6:a0:64:f4:36:7d:78:
1c:b3:ca:b3:c8:55:0e:10:4c:24:b6:a7:38:31:5e:
89:6d:b7:54:25:49:3f:b6:83:4a:1e:2f:90:22:97:
5e:e7:31:83:88:db:2b:c4:a3:a6:39:5f:18:97:3f:
8f:3e:22:8a:0c:06:b7:3d:1b:94:c7:4e:1a:58:24:
8d:36:9e:9b:22:0a:fd:b5:7c:13:b4:44:af:39:f5:
ca:e9:cc:07:cc:ad:a0:ad:93:2d:68:9c:13:96:f9:
c7:c4:56:91:0f:1d:2c:7f:c1:2f:81:da:90:0c:2d:
a7:d6:e1:5f:8e:93:9e:32:41:1b:b8:17:c5:a6:2c:
84:57:ff:7e:12:e8:1d:e2:e3:d0:85:2f:78:f1:9d:
d1:5c:9f:25:91:ed:7c:3d:cc:64:20:17:77:d3:d4:
a5:6e:e6:9d:ec:ba:1a:59:ee:70:dc:21:7e:f1:38:
f4:c5:52:10:5e:f8:cd:6b:19:7c:19:06:89:91:f9:
ee:4b:44:3e:9f:06:fd:a3:42:3d:72:97:55:fd:d0:
d6:02:d7:c5:7d:e0:81:c5:2c:48:6e:fb:50:d1:07:
36:a5:35:d3:32:88:0b:13:ad:ae:2e:81:2f:76:fb:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:9C:3D:61:47:E6:82:62:93:29:C6:B1:05:63:74:60:5B:28:A9
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:ee:c7:c1:31:8a:6a:25:d5:de:2f:c8:87:cf:f8:45:d4:
ea:9d:71:e4:ba:61:e2:48:70:fe:2c:04:ba:9b:21:01:67:68:
83:2d:50:5a:40:5d:46:b0:ed:c9:e2:f7:6b:7e:d8:8e:14:8b:
09:a6:86:a7:e7:85:75:8f:8e:5c:f8:72:9b:d2:52:28:0f:1d:
ab:3b:63:48:13:53:84:5a:8b:80:a5:d6:4c:f7:97:20:c2:20:
d0:8f:67:6d:5c:40:11:af:2e:d7:d2:51:1b:72:aa:db:44:ca:
12:e8:89:7f:6d:a9:32:70:d1:ec:f0:59:2a:85:f3:0c:78:93:
c6:8e:d7:8b:47:e9:78:8f:a3:19:54:ec:9c:20:7e:7d:1b:ea:
7d:34:d1:d2:24:9c:e7:af:06:49:b9:d8:72:52:9b:50:4c:53:
53:a6:ae:d0:6d:11:36:7c:39:ef:1a:cf:d4:e1:59:d6:92:0e:
49:3c:a1:6b:36:9d:c7:10:18:09:75:4a:46:21:6d:5d:a6:cf:
60:2f:75:4a:d5:7c:0b:eb:1e:89:fd:55:4d:01:32:3e:67:4f:
c2:b5:08:97:0e:1e:65:fb:9c:a1:68:4f:8b:35:ea:9c:90:be:
7d:f3:05:0c:f2:37:75:17:04:82:36:2f:83:07:77:dc:f3:ae:
6e:6d:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:07 2026 by rpki-client