Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: Cp29PtkwXXz2cUT9zusaFcQdgrpuPZ1yagPcIyinz6Y=
Subject key identifier: D1:68:62:9C:5F:9A:83:CD:18:B2:77:93:20:84:43:1D:74:24:CF:EE
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019CAD23051E1177EDAAC4D9F8EFB8FA74D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 0AD6
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: BwQVQ_CjJfdcPm0-S87mGB0Ours.roa (hash: Ta3LRpNzq0lEJK2G/WE3LSjK7WYr/aPEY/T1lVk/51A=)
2: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: UEq6lkrTk3+Gk8McEjuNRGRul4LNKIuXbyDIj+SMHpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:05:1e:11:77:ed:aa:c4:d9:f8:ef:b8:fa:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=d168629c5f9a83cd18b277932084431d7424cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:0b:ac:50:0d:6d:d6:bc:23:30:66:6b:f6:
54:1a:48:c2:9d:53:14:0b:ae:6a:fd:ca:a8:5c:a9:
a9:ac:cf:6a:96:13:c5:40:98:4a:a8:7e:74:81:00:
29:05:32:74:ef:04:2c:17:32:4a:86:70:72:e1:44:
e4:ec:2b:51:c3:e4:15:c6:88:6e:9b:4e:57:0a:24:
a9:7e:85:c5:90:23:63:c2:fa:bc:99:22:f3:4d:49:
bd:87:de:0e:05:4a:19:c9:f6:80:e4:3a:58:29:83:
18:fe:31:de:40:3d:ab:e1:2a:54:ae:c7:39:b4:1a:
b4:57:7d:36:82:2d:96:09:18:35:ec:32:6e:af:26:
fb:a9:78:6b:eb:02:0d:12:c8:67:97:43:b9:93:1e:
0d:90:c4:95:3f:7b:ee:92:bb:40:52:1a:19:05:dc:
3e:eb:f6:f2:28:7e:77:75:e3:a4:8e:18:8b:a1:ac:
c4:72:96:b8:06:97:67:8b:db:36:49:49:16:a4:62:
0e:8e:44:ac:8e:3a:ae:eb:18:5f:19:15:e9:27:be:
ac:9b:65:89:ea:78:b9:c3:54:e3:2d:0f:82:64:aa:
b7:8a:9a:28:31:74:a5:6e:15:99:67:29:28:9b:e6:
1a:b8:a1:84:98:cc:80:92:15:41:b9:b7:75:42:94:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:62:9C:5F:9A:83:CD:18:B2:77:93:20:84:43:1D:74:24:CF:EE
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:55:82:1a:e6:38:13:bc:46:60:28:83:df:24:12:20:c9:
06:01:01:d5:2f:30:48:7e:09:e2:a1:a1:7c:99:fd:89:8c:73:
96:f1:e8:6e:a5:9d:97:2f:12:44:31:88:53:2c:33:37:cd:b3:
ca:33:72:66:14:19:7f:2f:dc:27:33:6e:37:29:35:61:d5:a4:
a4:fd:35:fe:13:54:57:ba:fd:1c:6a:59:b3:f9:9c:9c:7a:b9:
0c:1d:16:79:7d:64:cd:71:83:84:38:4a:1b:1e:d0:d1:c0:2a:
47:6c:ac:cd:89:37:89:6f:e6:bb:46:6c:80:51:1e:54:05:99:
d3:2b:41:c9:65:4c:e2:04:0e:96:6a:de:c9:b6:6a:1c:2a:b4:
41:c1:b7:f6:6e:f5:ee:06:c0:21:68:cf:17:d1:ba:0b:5e:d7:
99:e0:12:12:c3:b8:9b:e1:35:e0:01:4b:fb:7f:6b:43:24:21:
23:9b:4c:40:94:a9:d4:46:b9:36:42:3e:9b:97:0c:81:aa:06:
86:25:1a:43:a6:88:75:e4:e9:08:c5:f5:51:c4:bd:08:ec:ba:
fc:c3:dd:06:85:13:09:ee:0d:1b:ad:b1:28:84:2b:f4:3b:3d:
96:84:7e:6b:4b:b1:fb:b4:95:82:0c:f6:d6:00:ba:f5:91:5d:
e3:bf:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:21 2026 by rpki-client