Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
File: FNEUZbrci_3-hbWKrm_H3MNtkUs.mft (raw, json)
Hash identifier: PrbIkzgxbfUlSp5myxUkqflwUeGEN9JUwgkw+iLPlQo=
Subject key identifier: 82:96:D8:61:E7:1B:9A:57:34:DD:70:0D:8E:C7:C9:72:3C:B9:03:B4
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019CADFDF9608AB0EC55B605834845ECD256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
Manifest number: 26
Signing time: Mon 02 Mar 2026 10:00:28 +0000
Manifest this update: Mon 02 Mar 2026 10:00:28 +0000
Manifest next update: Tue 03 Mar 2026 10:00:28 +0000
Files and hashes: 1: FNEUZbrci_3-hbWKrm_H3MNtkUs.crl (hash: i2N+vMb671BE39IWBzsQWIlLBHjqTYFG6ZGRMo9dpIA=)
2: qH7c24JmkVBMYbJmi0p4XVjkvrA.roa (hash: +CSYNI9p5H8qPtanDM1P4+I8bU0tiGoJi7imMK4J3uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f9:60:8a:b0:ec:55:b6:05:83:48:45:ec:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Mar 2 10:00:28 2026 GMT
Not After : Mar 3 10:00:28 2026 GMT
Subject: CN=8296d861e71b9a5734dd700d8ec7c9723cb903b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:2c:31:1c:9a:c8:6c:37:33:cf:fc:11:ad:
9e:99:46:63:46:0d:ca:00:f0:42:77:d8:83:bf:c9:
68:09:37:34:e3:b9:f6:c9:c2:f9:94:d5:24:f7:28:
6a:ec:f7:60:28:e6:11:98:67:46:b1:d3:12:4f:56:
27:1d:fe:47:5b:33:16:83:0f:e3:a9:ca:89:fb:c7:
8e:25:47:20:12:55:b6:b9:19:99:c7:f8:d2:7a:29:
dd:d9:0a:28:58:3c:47:3d:01:3a:03:be:a4:cf:de:
f5:13:62:9b:76:40:92:6a:a2:8f:c3:a2:c7:80:11:
74:2c:cd:8a:dd:50:7e:06:19:d7:07:16:ff:41:82:
5d:ef:31:5a:df:c3:fb:c1:83:ba:6a:a3:9f:88:52:
4d:72:b3:1c:f5:30:5f:ab:e3:56:aa:b1:c2:5b:ac:
ff:cd:1f:f0:0b:74:6f:6d:5c:b4:ce:b0:23:d4:84:
88:1f:89:2c:0e:82:fc:8b:f0:4c:3e:08:c1:63:15:
fd:65:c6:65:5f:b0:82:9f:e7:6a:41:ee:8e:7d:7a:
6a:9d:2d:80:dc:87:d3:4b:0a:92:e5:77:60:11:fb:
d4:04:8e:a6:fe:33:17:d8:f9:8e:b7:ef:34:cc:28:
ed:b9:87:a1:06:6e:ea:7f:7d:9c:96:16:19:42:d4:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:D8:61:E7:1B:9A:57:34:DD:70:0D:8E:C7:C9:72:3C:B9:03:B4
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:a8:c8:c7:6d:94:4c:4a:c1:1b:44:f0:e8:bf:80:aa:f8:
2e:61:18:c9:41:05:d8:18:69:de:4b:16:1b:b0:a1:a6:9d:11:
cf:86:f8:12:b5:16:77:38:ab:54:d4:ce:90:df:51:a8:25:f9:
4a:00:8a:38:1d:07:e5:cb:40:91:1c:13:f2:ed:06:34:d6:b0:
6e:5c:84:55:28:91:41:3d:12:90:c9:54:14:77:78:f4:48:97:
c0:c1:a1:19:a0:ab:60:4d:bd:5a:9e:67:bb:a6:8f:7b:15:84:
08:1e:62:40:ce:b3:81:2f:10:d3:a3:d2:65:c0:1e:3f:62:1a:
9c:94:a2:64:88:e0:19:91:21:09:77:54:58:19:75:e3:ef:db:
83:20:67:0e:3a:84:2f:55:60:8f:20:13:55:d5:65:2f:ca:b2:
d4:14:b3:52:de:b6:c5:d1:37:ce:8c:09:86:47:61:46:29:88:
46:e0:21:8b:4c:ff:ff:1f:56:4a:66:ca:9d:4e:9d:9a:5f:da:
8d:4b:39:c3:79:b7:36:77:17:74:63:2c:85:ea:b1:98:71:a6:
ab:6d:b2:00:3d:70:2f:d8:51:8a:62:fd:8e:f1:25:8a:35:4d:
d4:65:8c:dc:b4:4b:8f:89:76:4e:ef:01:a1:05:e7:db:59:35:
f0:53:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:41 2026 by rpki-client