Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: zItQvmUGF2COGx8LwPS7gf1r832fy9tMDnNDiFVUb64=
Subject key identifier: C8:2D:1F:31:8A:CE:ED:1B:E7:3B:DF:78:F8:75:04:58:35:70:48:6F
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 01A0E519A98A665A51C2E97DDE87D96A0C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1A0B
Signing time: Sun 27 Sep 2026 23:00:59 +0000
Manifest this update: Sun 27 Sep 2026 23:00:59 +0000
Manifest next update: Mon 28 Sep 2026 23:00:59 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 44HdAoSZrUcsG9w+zjY5lDSWfhHJIYuwWifHN4wyTOg=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:19:a9:8a:66:5a:51:c2:e9:7d:de:87:d9:6a:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Sep 27 23:00:59 2026 GMT
Not After : Sep 28 23:00:59 2026 GMT
Subject: CN=c82d1f318aceed1be73bdf78f87504583570486f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:9b:fd:b2:1c:0d:7a:97:69:b0:db:06:49:
b1:82:8c:43:08:de:56:aa:23:a9:b9:31:a0:2f:72:
17:63:b9:2c:c1:2b:81:22:40:58:de:2d:dd:53:0c:
fc:15:76:6b:bc:44:c5:78:00:19:87:ae:a7:a2:b1:
07:02:40:4c:60:3b:63:71:d3:95:31:7a:eb:d1:75:
34:fb:ae:b8:da:43:a4:9c:7f:59:91:9c:8b:25:84:
d9:3b:47:62:38:32:53:5a:3b:2d:43:52:4b:51:a5:
e2:2f:2e:d7:5b:2f:18:6e:93:d1:f5:80:fe:15:85:
2d:27:ef:50:33:27:66:d5:eb:88:3e:13:51:47:76:
1d:89:22:c0:47:b9:88:99:a8:7a:cb:d1:4e:26:2f:
55:4c:ca:74:67:98:82:89:df:48:c4:d2:2b:9a:d7:
aa:03:2c:91:7f:49:21:bb:3d:3d:70:7e:10:6c:53:
c1:59:d2:08:df:56:be:26:0c:9b:56:cf:73:37:17:
d1:1d:58:69:f1:c9:ed:86:64:02:52:dd:85:81:4d:
44:a4:aa:a9:b0:ac:75:d8:9f:6d:fb:3f:cd:09:b6:
57:71:56:59:ae:70:ae:b5:45:be:ae:32:e8:cc:6f:
2a:4d:c3:1d:c7:ec:18:3b:88:66:a2:c9:c8:ca:27:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:1F:31:8A:CE:ED:1B:E7:3B:DF:78:F8:75:04:58:35:70:48:6F
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5b:75:4b:4b:39:41:d1:44:d2:23:66:95:c3:54:cb:20:c4:
18:47:5f:69:6a:2f:de:8f:c8:96:42:f8:c2:a1:db:59:6d:8e:
51:39:d8:65:ab:b8:de:c2:bd:a8:ca:15:95:f9:f8:9d:db:6e:
ea:a5:65:98:89:6f:6f:81:96:81:77:e6:db:af:b6:6e:72:4d:
d3:97:ae:f1:ff:5f:55:a7:f2:df:aa:04:a5:d1:ab:05:22:00:
05:e7:b6:b1:c6:e5:c4:4f:10:4f:06:21:88:52:cb:ae:17:82:
2a:0b:d3:64:a5:89:a4:fe:65:87:55:44:39:98:f8:41:0c:9a:
bf:d5:a8:6f:e1:e8:a9:bd:d8:fb:81:84:01:42:ac:e7:34:3c:
4b:9e:44:0e:65:12:22:02:77:1c:db:18:c5:21:89:28:ee:36:
09:59:db:fe:40:fe:f1:35:ed:5f:f4:a4:0f:7d:af:31:cb:66:
95:1b:fb:ec:7c:f2:66:24:3b:0c:c7:d0:ba:a3:05:09:33:b8:
6b:f5:61:16:a9:cf:92:36:2f:d2:ae:d3:44:7f:ce:b6:ff:bd:
0d:1a:a5:72:6a:25:7d:2b:c7:b0:ee:33:26:28:40:51:4e:7b:
3c:cd:ba:64:3b:63:45:98:69:84:66:ea:1c:e5:3b:9a:c5:b2:
2e:bb:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:01:25 2026 by rpki-client