Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: wrofJnq9RMw9Hg/6Zzgmfps0vU8TEtEHkaz4BJ84XDc=
Subject key identifier: 98:30:3A:49:8E:EB:81:35:6A:B8:14:64:2E:C3:67:16:4B:A6:35:E8
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01A0C934354EFB382A8686FE7EA4D7D0976F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 16FC
Signing time: Tue 22 Sep 2026 13:00:36 +0000
Manifest this update: Tue 22 Sep 2026 13:00:36 +0000
Manifest next update: Wed 23 Sep 2026 13:00:36 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: xzPWY+CnuyAb7QQwlMHnDq3v2IcI+pmjHzGLPR6dw08=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:35:4e:fb:38:2a:86:86:fe:7e:a4:d7:d0:97:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Sep 22 13:00:36 2026 GMT
Not After : Sep 23 13:00:36 2026 GMT
Subject: CN=98303a498eeb81356ab814642ec367164ba635e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:3c:82:c3:86:1b:3d:be:c9:48:07:43:85:
ae:24:23:ce:54:de:02:98:4a:e7:7e:76:1a:c8:dc:
a0:0b:b9:84:91:cd:37:ba:d1:ac:78:06:28:8e:64:
d7:6f:c2:6d:c1:44:ae:f9:04:e8:fb:c9:35:4b:26:
58:60:84:73:a7:3c:98:49:d3:8c:be:c6:60:94:d3:
da:fc:7e:97:cc:1f:df:1f:14:7e:6e:f1:be:06:3d:
35:ff:e9:f5:a3:8e:e7:c2:4f:15:d9:37:7f:69:bf:
3a:f3:98:8d:2f:f0:69:2f:03:ba:cf:ef:4b:ef:f6:
03:d7:37:0b:69:03:ef:e0:c7:60:ff:20:7b:0c:8c:
c0:ac:fe:30:de:83:8f:15:b6:8e:0e:d7:df:60:93:
ac:da:4b:16:77:a1:ec:19:59:84:20:88:91:1c:f6:
51:14:a3:7d:0f:b7:f4:e0:67:c4:88:46:05:93:3f:
33:aa:df:73:71:23:d5:73:6b:8b:4d:d0:1d:f3:f9:
9d:52:4b:49:5d:f5:89:39:53:cb:cd:c1:9c:73:f1:
81:b4:b4:b5:be:d7:88:91:7b:81:10:df:d9:56:c5:
b7:b7:7e:2d:8f:2f:43:63:cb:f5:5f:87:56:77:5b:
e4:7e:43:50:00:35:02:97:0e:60:5a:61:e5:f3:a3:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:3A:49:8E:EB:81:35:6A:B8:14:64:2E:C3:67:16:4B:A6:35:E8
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f2:45:52:77:6c:c3:d2:de:d5:6c:ef:43:74:3e:18:a2:ad:
ae:ea:ef:2b:77:24:c1:55:70:2d:0f:14:6a:9f:58:21:e6:cb:
69:f2:24:59:9d:d9:5d:43:01:98:9b:34:f2:97:2b:1a:98:eb:
35:fd:6d:1e:4d:17:d6:3a:f8:cb:a0:45:74:ad:60:aa:7c:9e:
6b:b9:2d:ab:89:56:e2:81:d9:9e:01:64:fe:d3:79:78:8c:5b:
21:7f:e2:a1:e2:86:4a:bf:a6:04:f2:dc:48:cc:46:7a:fc:18:
bc:11:bb:bb:b3:8f:b9:0d:8f:5c:4c:06:e5:45:cc:68:40:d5:
d6:61:3d:3c:3e:47:b8:38:af:6e:ac:81:ba:5d:85:80:6d:ac:
9e:fb:25:b3:78:99:15:6d:5b:67:cb:d1:33:b1:be:f4:0a:29:
1e:b9:77:e1:19:6a:d6:9a:5c:27:2d:6e:b3:4f:b9:be:a2:67:
e6:75:e3:31:51:79:7e:37:70:6e:15:af:4b:8a:f7:51:b5:21:
1a:43:e1:b3:42:70:9c:91:a1:55:c0:d4:d9:11:e3:2c:37:fd:
8e:c9:88:8e:0b:27:63:4c:6e:34:21:ea:5a:7d:5c:4d:f9:cb:
40:86:1c:13:5a:66:5f:61:38:e1:32:a9:b8:93:0d:7a:56:8f:
94:fb:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:26 2026 by rpki-client