Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: FHQKb1cYIevq4SwvAT5JQFDJGW0fKwhuvLqozI2zG/U=
Subject key identifier: D6:A1:0A:61:39:DA:29:9F:E2:41:BF:6F:B5:F4:2D:B2:0A:2E:88:F5
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01A0C633723C068FF60A94B4E5F42DE99AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1A14
Signing time: Mon 21 Sep 2026 23:00:55 +0000
Manifest this update: Mon 21 Sep 2026 23:00:55 +0000
Manifest next update: Tue 22 Sep 2026 23:00:55 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: +lX30lFkR1/FhDr6FvmBoOnBs/t7l4XZHHagOeCfeaE=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:72:3c:06:8f:f6:0a:94:b4:e5:f4:2d:e9:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Sep 21 23:00:55 2026 GMT
Not After : Sep 22 23:00:55 2026 GMT
Subject: CN=d6a10a6139da299fe241bf6fb5f42db20a2e88f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:4b:48:9d:fa:b7:35:6a:7c:72:72:16:90:
30:f3:81:af:0a:f0:08:0e:83:08:6e:61:62:32:d1:
ed:fc:e0:72:3b:c4:ac:a8:db:21:4f:ab:45:28:14:
43:35:70:40:8c:cf:bd:3f:6b:9b:71:1f:8f:72:49:
1d:10:02:da:f7:27:72:47:1d:ce:53:79:dc:bd:04:
eb:67:70:80:3b:3b:a3:80:ec:fe:92:fa:cb:cf:80:
3b:01:fa:6c:a8:db:0a:87:3e:63:17:fd:66:ff:9d:
a6:42:0b:7d:8b:47:ff:8e:a6:0b:7b:b6:ea:bc:86:
72:3b:2e:94:35:bb:4c:dd:5a:63:d4:0e:d2:8f:22:
07:31:0b:e7:ee:52:bc:5f:f3:c3:36:73:93:52:83:
13:49:99:0b:47:ec:ac:d6:e2:94:ad:69:7c:b6:0c:
c0:8c:07:73:d9:ae:59:e1:4e:1a:d7:07:14:74:5a:
4b:ce:30:19:29:d7:6c:47:d4:c8:80:b4:06:a3:bf:
df:c8:00:d8:47:45:79:92:66:74:8b:3e:49:76:c6:
bd:73:3a:d1:fc:19:00:cb:13:bf:00:6e:0b:b0:f0:
2c:24:d3:6a:77:2b:aa:09:09:51:1c:05:89:44:77:
29:d9:a8:ec:1f:0d:03:fb:18:0c:7d:ed:fc:2f:a0:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:0A:61:39:DA:29:9F:E2:41:BF:6F:B5:F4:2D:B2:0A:2E:88:F5
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:2d:da:e7:ac:d0:fa:08:67:69:4c:70:8d:7d:c7:b3:1b:
77:e5:34:8b:11:c1:82:68:79:1e:24:51:e5:db:5b:c8:51:74:
3b:ad:26:ed:de:53:b2:cb:b0:f9:57:fe:7a:6c:43:98:1f:9c:
e3:26:53:a7:b7:97:86:37:3d:bb:aa:5e:ca:75:8b:00:e2:10:
79:f6:4a:6f:58:98:bc:28:14:7a:aa:34:70:6a:58:89:41:3b:
6f:21:57:bd:74:da:a0:41:c0:93:b2:66:d9:41:55:c7:57:da:
5e:bb:44:e6:b4:d5:59:2f:cc:7d:06:43:ff:ec:b7:ea:dd:d0:
d2:48:3f:c1:a2:14:ec:7d:e7:f5:14:73:f3:15:cf:e3:ef:83:
41:c2:12:cb:72:ff:88:b1:fe:a6:a7:f7:52:d2:1e:3c:79:c5:
2c:32:1e:61:9e:43:6c:a3:23:7f:17:64:c7:21:48:3e:78:57:
df:40:96:97:d3:8a:eb:f9:00:14:fd:71:55:a3:8d:a9:64:36:
e6:7b:c8:23:94:7c:1a:68:2a:a3:e4:2a:9c:23:a9:54:cf:1d:
7b:b4:88:71:c0:f3:6a:7e:8a:02:8f:d1:02:19:0a:3e:76:25:
02:58:9c:9b:f0:c3:96:6a:70:9c:34:3c:47:39:97:3a:cc:54:
21:86:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:28:10 2026 by rpki-client