Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: 7iN5qUnnZYcjBmv9Avpubf84+4kBdLir3vLn8iJlDOw=
Subject key identifier: 06:A2:CD:1A:25:10:A5:77:15:E9:83:58:9B:FD:4E:58:EB:73:0E:B1
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 019CA9B3784189FCF4D947CC8918DA56B2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0CBE
Signing time: Sun 01 Mar 2026 14:00:37 +0000
Manifest this update: Sun 01 Mar 2026 14:00:37 +0000
Manifest next update: Mon 02 Mar 2026 14:00:37 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: HrKUwFbQd5LPttf9GzvszNZot8X56IYBh3MHRwp6F9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:78:41:89:fc:f4:d9:47:cc:89:18:da:56:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Mar 1 14:00:37 2026 GMT
Not After : Mar 2 14:00:37 2026 GMT
Subject: CN=06a2cd1a2510a57715e983589bfd4e58eb730eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:72:7a:19:b9:e2:07:4d:d0:fd:9f:f6:1c:
d2:ad:5f:ca:fb:8f:70:4d:5e:ae:72:3b:c7:ce:50:
81:fc:d5:92:03:36:5e:cd:68:23:6e:59:7a:28:f9:
fc:e1:71:74:e2:39:bc:4a:e6:4e:9a:4f:23:5b:72:
7f:a5:8d:6b:60:0a:48:72:0c:68:c0:14:2d:86:b5:
d0:b7:21:ec:72:f6:1c:77:6b:6c:03:dc:de:3b:48:
ac:23:0c:af:2a:7b:64:04:f1:5d:a5:26:93:c2:1b:
6b:cc:09:bc:d7:3a:c5:13:a1:9b:92:cb:f9:5e:65:
fa:ce:7b:73:ad:d5:20:8c:c1:39:4e:d1:8b:fc:6c:
e9:ac:c3:f0:c2:1b:2a:59:5c:90:35:1a:29:da:ee:
0a:a2:c5:af:0c:f6:5e:1a:a4:cc:04:18:9b:2f:6c:
ef:52:33:91:46:9d:c0:26:05:2f:c2:ec:7a:2e:49:
41:b8:6c:31:f1:da:17:d7:4b:e0:8e:02:23:15:24:
fa:94:0f:07:e9:66:21:63:0e:59:40:56:3b:ca:9a:
f6:a9:a5:7f:a2:86:c9:85:8d:4f:9a:67:31:4e:12:
ab:ce:3b:97:cb:67:98:73:d1:14:01:8d:be:97:0c:
47:34:93:cd:30:3b:68:8b:a1:5a:a9:c4:ed:bd:c4:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:CD:1A:25:10:A5:77:15:E9:83:58:9B:FD:4E:58:EB:73:0E:B1
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:46:b4:38:7e:46:2c:51:b9:de:6a:9f:56:01:ce:2a:34:
dc:b4:3f:12:cd:2e:d9:43:41:dc:d1:8c:56:31:a5:c2:8b:27:
32:4e:fc:dc:22:31:94:ab:77:56:d1:75:14:b6:22:e6:58:73:
5a:e5:1c:d5:83:b8:4d:64:d7:44:e7:55:6e:3a:a0:6b:ad:0d:
7e:77:e2:31:aa:73:2d:5c:6d:c8:b7:61:8b:a3:ad:77:e8:1c:
9e:e2:37:e6:f9:3e:11:fc:18:71:b7:de:6c:81:1d:b9:76:b1:
cb:de:e7:0e:eb:4c:e8:9d:39:04:06:96:7d:da:d7:30:9d:b7:
5e:48:73:f0:a2:a7:58:dc:aa:78:06:eb:95:fb:0c:24:54:87:
ff:8d:87:5a:30:6c:56:79:93:62:91:4e:52:8c:b6:fc:81:38:
00:21:d0:44:7f:0e:7f:2b:8b:34:4f:2d:5d:25:ba:50:06:e7:
43:30:c8:8a:10:fd:e9:81:d5:a1:fe:cd:36:7f:2b:9c:7d:8e:
7f:50:9f:3a:39:06:1c:73:7f:f3:a4:3d:f2:1c:22:17:ab:8e:
61:21:fb:95:77:c2:41:cb:e7:76:42:cb:31:92:6a:3a:2f:41:
c9:12:7a:69:a9:5b:55:27:f7:f7:c0:9f:1a:a8:6d:c8:ff:53:
5f:7a:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:24 2026 by rpki-client