Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: PjC8XITAg8f9Y1w4JjZORRvwN9ii1JplvKgL3VDBeSk=
Subject key identifier: 8D:A8:99:73:4E:6D:97:7F:18:09:3C:37:96:63:A6:D4:30:75:07:63
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019CAAC6B0B242933BD0F8738D55AAE452D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 14DA
Signing time: Sun 01 Mar 2026 19:01:13 +0000
Manifest this update: Sun 01 Mar 2026 19:01:13 +0000
Manifest next update: Mon 02 Mar 2026 19:01:13 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: GKYTPPBm7zMZsdJQtg4DwkDip+M6XTkcdelEYJDzlDU=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b0:b2:42:93:3b:d0:f8:73:8d:55:aa:e4:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Mar 1 19:01:13 2026 GMT
Not After : Mar 2 19:01:13 2026 GMT
Subject: CN=8da899734e6d977f18093c379663a6d430750763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:71:6c:e7:12:f9:58:ad:9e:8a:9a:50:02:
e1:15:2f:aa:bf:69:80:e1:c6:60:2b:ff:26:74:eb:
f3:49:6c:01:59:24:9c:d4:71:7d:d1:42:69:88:f7:
06:0c:07:33:1e:94:4b:89:92:30:02:4d:73:cf:1f:
71:d5:cb:72:ed:22:3c:23:a5:e2:c9:07:06:05:60:
d6:10:87:09:73:86:d8:22:5e:12:ee:8c:18:28:45:
cf:30:a6:fb:09:0b:9f:59:57:43:22:65:84:c4:30:
e5:69:25:50:cb:21:41:1b:6e:f0:e0:c8:99:0d:c8:
33:d5:83:3f:3e:15:7b:9b:84:ed:85:b1:fd:b1:37:
25:ea:b5:70:cd:b2:c9:9d:43:ea:81:38:c5:13:d8:
dc:f0:c4:f5:b1:e4:c1:3b:c7:e4:e3:31:1f:8c:64:
26:71:f8:2a:d1:14:58:11:5d:87:de:f3:5f:55:96:
6c:41:86:6e:e1:2e:34:ad:c1:e2:e0:07:96:c8:ec:
39:a8:27:d5:3f:fd:b9:ad:06:c0:55:07:a6:16:d0:
49:4e:2a:58:64:f3:4b:ae:cd:d6:95:25:e5:86:cc:
e3:36:a5:3c:7d:80:eb:42:1c:7a:3c:19:e3:63:3e:
6d:1d:74:ea:e6:25:47:76:f9:0d:9d:7e:8b:a1:f3:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:99:73:4E:6D:97:7F:18:09:3C:37:96:63:A6:D4:30:75:07:63
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c9:e6:a4:4d:6a:e4:1e:68:ee:89:b0:41:94:03:ac:e4:1d:
af:81:b9:f5:db:7e:38:e5:54:f9:7e:39:9e:43:46:3a:8f:4e:
49:59:5d:40:d8:e7:84:67:98:46:02:44:77:d2:e8:85:3f:3e:
52:8f:ad:2e:21:5f:5c:35:3f:aa:73:ff:f1:1e:05:6b:0b:7a:
fa:60:65:7e:48:43:b3:b7:d4:88:32:03:e2:5c:c7:1c:5a:44:
ea:57:29:69:8d:15:5f:1c:d0:df:2e:b7:11:bc:cf:80:e2:73:
f1:bc:5d:45:9b:dc:c9:8c:fe:3d:ed:fa:7e:4d:10:67:9a:81:
29:a4:4b:58:d0:c0:8b:e0:54:e5:0c:25:3c:9e:e3:2d:cd:77:
2c:5c:e6:a8:2c:50:e5:32:40:64:0f:99:b4:2d:25:88:11:05:
cb:53:7c:29:43:db:e8:0e:05:c2:8d:32:1c:35:cc:dc:40:24:
7a:64:7a:36:e9:58:18:09:67:4e:6f:7c:2f:aa:ff:10:2e:40:
96:b5:47:96:28:13:89:eb:cc:ce:13:b2:50:49:9d:d2:e1:06:
9a:cb:b2:1f:79:07:de:b4:a1:36:95:78:23:a6:ca:4d:69:48:
f3:7e:ff:3a:61:d4:c7:69:72:ca:15:a7:47:9b:30:8a:d5:0f:
fd:92:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:23 2026 by rpki-client