Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: aosHwip6UmjyA+0hfO9EO6k4EF738mPjM6hN4HLb7Z8=
Subject key identifier: 5C:2E:3E:F5:88:1F:F2:17:97:D7:A9:C3:ED:1E:F4:BF:F4:24:D7:B8
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 019D992B4792B78E64A277D5E420508A6BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0D3A
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: xid8EpejaeOO2cQgpmIpQAv0up+eH2AUdN6s0b5I2JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:47:92:b7:8e:64:a2:77:d5:e4:20:50:8a:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=5c2e3ef5881ff21797d7a9c3ed1ef4bff424d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:31:73:ce:a9:f1:de:da:85:d3:a6:9b:47:
8a:a7:55:4b:50:ca:1b:79:fe:3c:01:7b:fb:d3:28:
ba:91:bf:a0:fd:05:8f:8f:ec:3d:e3:e8:53:41:7c:
93:57:7a:26:f9:93:7f:d1:87:1e:e8:2a:52:de:3b:
38:1d:ae:e6:d9:1f:3a:00:7a:e0:90:72:58:cb:fa:
bb:a6:53:c7:36:82:a5:4e:09:af:df:79:f9:a7:b4:
36:26:6c:0c:d6:0a:d1:92:a3:25:56:1b:c2:bd:d8:
c5:7e:0a:f1:bf:4b:7f:27:02:03:83:53:69:dd:f0:
d5:b7:62:31:db:69:86:7b:35:2c:69:20:09:96:e0:
6d:2d:6d:f0:53:85:be:e4:ce:ab:ce:f8:69:48:12:
6d:a7:e1:f9:9b:2e:c6:2a:fe:58:b9:62:2e:ee:90:
8e:3c:70:e7:dc:aa:1e:52:4a:81:41:85:2a:cf:41:
00:92:94:23:2c:d7:5a:a6:7d:6f:42:2b:53:08:05:
00:5b:04:9e:6c:b7:01:86:08:b4:f8:c2:7c:8b:94:
47:77:96:34:2c:eb:89:1a:07:6b:33:ec:c4:57:9a:
00:a2:ff:92:0b:94:b5:3a:1b:4a:ac:13:6f:30:33:
c9:7f:e7:ae:6d:88:78:3f:24:16:67:cf:d1:1c:2f:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:3E:F5:88:1F:F2:17:97:D7:A9:C3:ED:1E:F4:BF:F4:24:D7:B8
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:05:0d:43:f6:2d:a5:03:88:30:69:79:4c:2a:49:f8:b0:84:
9b:4f:cc:0b:bb:6b:e0:f9:8e:2d:67:98:e6:a5:3c:78:9d:ea:
66:d3:95:b3:3a:42:93:f1:e5:4e:2a:0c:44:68:68:ce:2a:ac:
f9:65:a2:70:8d:25:ea:19:91:f7:2f:56:15:56:d0:68:3b:e0:
c8:33:1d:1a:d7:56:4c:21:a5:b7:ca:55:60:3d:21:fb:6f:8e:
88:c4:9a:47:03:cb:66:3c:cb:57:59:8a:0e:5a:d9:52:04:ba:
0e:2c:ed:3f:96:df:29:4e:f6:e2:d6:64:e2:a2:67:cd:4b:c5:
59:d4:1a:2d:66:d4:b2:3f:1d:0a:51:4d:94:72:94:86:6a:5d:
1b:67:a8:02:06:70:cb:28:cd:ac:05:20:32:25:28:3f:6f:cc:
60:62:ed:e7:ce:60:54:ae:da:71:e8:2e:25:53:fb:b7:d8:4d:
ce:93:60:8f:21:6d:c7:4f:5c:9a:fa:8d:ef:40:d6:34:20:ac:
4f:00:92:4b:35:dc:5a:c5:f2:ff:c5:76:26:2c:ee:1e:de:27:
ed:a1:5e:63:64:08:59:7c:c8:26:24:2f:8a:e6:d4:41:3b:ff:
8b:78:e8:9f:a9:89:53:8a:1a:41:95:99:ac:81:62:8d:db:63:
4b:b1:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:19 2026 by rpki-client