Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: Y686xZYjxVUrMYr94P5Y0bjMBIQRoov75S8GvW57gWQ=
Subject key identifier: 89:F1:7A:62:E5:AD:44:24:3C:9D:05:9B:58:F1:D4:2E:01:8C:85:EB
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019CAC7E5393EB587588D27E9324DEF76DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0FAA
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: 5h59VcdSmIfrjb4J3M+nA5EfOizT3R0SSppf40nzNGE=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:53:93:eb:58:75:88:d2:7e:93:24:de:f7:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=89f17a62e5ad44243c9d059b58f1d42e018c85eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:c9:0b:ad:8a:8b:0c:a5:0e:f6:47:0b:30:
65:f7:8a:17:71:9f:2c:76:09:39:4a:2e:fb:b0:9d:
18:6e:64:bb:52:02:36:be:ff:ba:b9:64:65:14:c9:
e8:ff:4c:6b:d8:59:15:65:b1:88:86:a2:b4:0e:b3:
38:38:fd:0d:b0:be:4e:72:5a:4f:a5:3f:22:80:cf:
27:cc:dc:cf:dd:c0:8e:9d:e1:6c:6f:8f:9a:3a:0a:
f5:30:92:d3:e8:37:eb:74:00:fa:60:b2:18:b0:24:
ec:6f:e6:82:c8:92:1f:af:96:64:d7:8b:5c:6d:ad:
42:f4:6d:0c:53:f5:e6:21:d5:8c:e2:39:97:ac:36:
ff:51:94:e0:22:e8:76:c0:68:26:a2:0a:6e:88:ac:
00:89:0e:8f:be:3a:7e:16:3a:21:0c:c4:51:26:43:
2b:6c:8f:bc:75:02:12:63:6b:e9:be:7d:07:51:20:
4b:d8:75:c5:7e:6f:39:a0:9a:18:9d:13:fb:87:dd:
ac:6a:f5:2e:f2:9a:55:ec:2b:fa:a3:62:64:f4:af:
16:74:01:38:b1:5b:27:46:fb:f3:4f:bb:19:41:d6:
3c:01:bb:1f:c1:69:80:99:9e:9a:58:fa:ce:f6:42:
c5:9e:26:0b:1a:6a:66:b0:72:b2:bd:8c:b0:69:66:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:7A:62:E5:AD:44:24:3C:9D:05:9B:58:F1:D4:2E:01:8C:85:EB
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:76:f6:ff:1e:38:0b:f8:15:39:bc:79:a2:ad:01:1b:00:
45:5c:14:54:eb:b3:27:ca:d8:4c:58:94:10:79:b8:d9:47:c6:
22:bf:1a:38:78:71:4b:2a:a0:40:6c:83:aa:9a:1f:43:f3:e5:
0c:82:2b:44:20:b8:27:39:56:06:fc:05:4f:3b:27:aa:d7:a4:
dd:22:94:09:1f:7e:13:9e:62:f2:be:bf:b3:98:54:d8:33:09:
eb:4d:6f:7a:c9:b0:ad:07:b4:8b:3f:87:4b:af:f1:eb:1b:33:
28:09:ee:3f:7b:55:32:7d:a9:92:04:09:55:65:ec:89:bb:32:
eb:fc:d0:8c:3d:ab:7b:1e:73:44:20:77:8e:03:f9:3d:82:8e:
c3:44:c6:0c:71:e7:3d:2b:76:c8:98:96:bd:37:4a:8c:6a:78:
f8:85:91:17:01:ba:80:ba:ac:9f:91:56:db:ae:38:21:af:93:
ab:a1:ef:e3:da:22:60:a3:7b:e2:c0:11:3e:8e:a5:3a:1b:15:
23:83:05:fc:fb:b1:dd:74:1c:2e:61:fd:6f:4a:33:d6:3f:1d:
f5:a9:e9:45:38:d0:37:5f:43:79:da:a1:86:2c:42:cd:8e:7f:
cd:c4:0f:5f:09:9e:55:e1:78:02:ec:a1:f8:e0:27:12:df:80:
6d:11:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:13 2026 by rpki-client