Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: 0q0ejWynJFNI7G9gqlcrg/89IQcTtGrBF3mg5DxCgXw=
Subject key identifier: 86:1F:D3:08:40:23:97:72:B4:4F:E3:74:5A:A7:D0:B9:AC:9E:E6:DB
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 01A0E7AF0CCD181FD9C4C18CBB7E936E62BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1A76
Signing time: Mon 28 Sep 2026 11:03:23 +0000
Manifest this update: Mon 28 Sep 2026 11:03:23 +0000
Manifest next update: Tue 29 Sep 2026 11:03:23 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: TdVIIRfC98TVSndVWtvtziX4fMcNTf1jskj3hJC/cRs=)
2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:0c:cd:18:1f:d9:c4:c1:8c:bb:7e:93:6e:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Sep 28 11:03:23 2026 GMT
Not After : Sep 29 11:03:23 2026 GMT
Subject: CN=861fd30840239772b44fe3745aa7d0b9ac9ee6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:db:fb:9f:2f:a3:c5:fb:d2:e1:02:df:f3:
10:05:e8:69:a4:50:38:9d:ee:d6:bb:b8:c9:b4:17:
97:bc:43:4e:0b:1e:da:e2:1b:2c:79:7e:8a:1b:20:
8f:6a:32:11:d5:11:c1:b3:74:c6:7b:5b:cb:71:a6:
08:de:44:4c:43:9e:dc:32:c8:ee:51:2e:29:a8:39:
24:f3:76:82:61:dd:cc:ed:3c:9b:35:c4:c5:55:8f:
49:a1:05:ea:e9:fb:f1:cc:3d:d2:8c:b8:1d:96:8b:
6d:a2:31:a8:65:1b:a0:71:9c:91:02:3d:65:cf:4b:
88:c1:e8:3a:4c:9d:a3:66:26:49:11:f2:b1:d7:8b:
11:e8:12:3e:ee:f2:b0:e2:63:60:45:73:02:fb:97:
63:50:51:bc:bf:0d:7b:f2:f0:e0:f1:4d:5a:05:b4:
25:e6:96:41:46:c8:94:68:15:9b:48:e4:ba:4e:52:
8e:18:0d:2d:5f:a9:60:2d:7d:cf:8d:d2:eb:62:76:
c2:c4:cc:4e:85:f1:c5:24:86:0a:0e:55:97:c5:22:
ef:9f:ea:cb:4b:36:b2:6a:40:a5:f7:de:6b:15:64:
f2:5b:14:af:0b:bb:81:2b:af:1b:5a:cd:b4:ee:74:
35:5e:c9:1b:c5:5a:8c:0b:83:98:b9:8d:31:91:aa:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:D3:08:40:23:97:72:B4:4F:E3:74:5A:A7:D0:B9:AC:9E:E6:DB
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:32:3e:3e:55:30:0b:04:c5:dd:5d:92:d7:95:45:a5:29:15:
55:0a:c7:cf:2a:aa:55:8f:2e:86:6a:ff:eb:d8:ae:dc:15:67:
35:4a:17:ad:cf:08:7d:1d:9c:f7:ab:97:63:47:ca:8e:28:e4:
ae:67:f7:57:ac:da:fc:6e:8f:da:e7:4b:c1:9a:04:08:ff:40:
b4:a8:cd:13:2a:6d:ac:3b:9f:c1:c6:58:be:ff:ee:0f:e7:1b:
a9:e3:c0:63:b8:ab:97:79:95:69:0a:5b:61:ca:0a:38:ac:f4:
70:f9:dd:0a:ea:b2:f4:e7:42:19:f1:00:d3:7f:a5:66:07:cc:
a4:a5:67:1d:bf:36:6c:2c:fd:52:70:9c:72:d2:8a:a5:8a:d6:
9e:6a:18:c2:74:8c:a1:bc:e6:ee:8d:be:74:0d:d9:9f:de:33:
26:cd:5f:02:5f:9a:f1:cf:36:6c:51:40:2e:a7:f2:c5:b6:6b:
4b:a1:60:b1:d0:c2:b0:63:a5:4a:e4:71:5e:f4:ef:80:8d:6a:
6c:8e:3c:2d:99:c0:7a:bb:a1:9a:f7:81:3b:ef:92:d4:18:fe:
0d:f0:d4:13:ed:f4:04:d8:1b:6b:7f:c4:7d:4e:cd:6c:1a:2f:
e1:ab:b1:51:07:fa:3a:22:02:c0:91:23:78:09:80:f9:eb:6a:
9c:ae:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:28:44 2026 by rpki-client