Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: mcqUAq6vuzid/dg/YyjkeFtCl+9xhVAXKWkJ+XLvgq8=
Subject key identifier: F1:86:EB:B6:97:24:32:AF:28:38:1D:31:DE:5D:D8:B2:22:3C:0E:C1
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01A1344822C899ACFF793FC342E508257DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 10A6
Signing time: Tue 13 Oct 2026 08:01:44 +0000
Manifest this update: Tue 13 Oct 2026 08:01:44 +0000
Manifest next update: Wed 14 Oct 2026 08:01:44 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: OWHrmFz5eF3RRH4NZ5Km1nyrHznKnyPfnOV4ewhPKEw=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:48:22:c8:99:ac:ff:79:3f:c3:42:e5:08:25:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Oct 13 08:01:44 2026 GMT
Not After : Oct 14 08:01:44 2026 GMT
Subject: CN=f186ebb6972432af28381d31de5dd8b2223c0ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:71:31:a0:af:41:db:d3:83:18:71:ba:ee:
13:cc:89:2c:19:3c:0e:de:13:3a:c8:eb:c6:7d:24:
d8:32:46:90:6c:26:b7:80:e0:5a:24:63:9d:8e:51:
fd:0c:8a:e9:71:a6:6d:6b:e4:d5:db:7f:8e:80:36:
a4:3f:e6:f2:89:f3:7a:09:12:1b:bc:4c:45:e9:88:
5d:2e:ec:c6:0b:e5:ca:54:20:2c:80:ed:f0:bf:ed:
7d:b1:9a:f3:fd:5c:33:57:71:de:65:91:d0:29:29:
ba:eb:77:dc:b4:42:a2:41:05:46:21:5d:4f:b2:cd:
ca:d7:70:1b:50:4a:f4:ee:a6:cb:48:b0:e8:f2:57:
26:56:e0:3f:f7:ae:df:7f:c4:cb:23:58:9c:f9:dd:
cc:49:62:8c:4c:1e:f7:57:59:02:41:4d:4d:de:45:
46:c0:2b:ec:58:f0:51:b0:16:65:ab:33:10:5c:18:
1e:5c:60:26:c1:3d:a6:a3:4f:f3:1d:e6:c0:de:19:
86:54:96:cf:b9:d6:59:d4:2b:d9:5a:61:18:ba:18:
2a:53:03:f3:19:f0:3f:a5:dc:49:f0:68:28:91:46:
b1:49:b7:03:58:60:82:87:e5:37:56:04:2c:e4:0d:
27:9b:51:9f:13:e4:83:92:83:d7:47:f7:b1:75:e6:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:EB:B6:97:24:32:AF:28:38:1D:31:DE:5D:D8:B2:22:3C:0E:C1
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ad:ee:b4:39:6a:02:c5:ea:4c:8f:86:b6:58:c2:9c:09:15:
a6:b7:b8:a1:2b:45:59:d0:46:f4:30:ee:11:a9:ae:7a:f9:1e:
d6:ac:bb:c1:45:56:7b:70:18:43:38:8b:9d:fc:a8:8a:14:29:
32:81:2e:5d:41:17:f6:f4:89:58:7b:29:37:7b:09:52:f9:0b:
7f:7e:f1:3b:cc:ce:b2:56:1f:e2:03:b4:71:1a:e5:27:11:21:
37:8c:8c:f7:da:bc:bf:41:8a:60:e7:93:13:15:54:db:bd:55:
c7:2f:aa:9b:d6:a6:4b:4b:4a:f2:1c:b0:be:94:7f:25:c0:e5:
54:3f:a4:47:15:97:28:f7:c9:f7:7f:1f:23:09:a2:b1:41:5e:
c3:54:b0:97:4d:b9:78:85:aa:f2:9b:d6:77:0e:12:a8:f5:c4:
7e:e1:80:c8:e7:ae:21:82:3a:d8:a8:8b:a1:f6:92:db:d5:24:
7d:8f:8a:8b:61:03:e3:af:f6:22:23:12:57:fe:5d:dd:39:d2:
e9:0b:da:3a:8f:2d:02:09:66:07:a6:00:08:90:d1:fe:ef:5f:
66:22:52:de:cf:75:ca:21:d3:77:3d:e9:ef:9e:8a:38:b5:5f:
88:7c:8e:d2:7d:53:93:64:b9:71:e1:2b:b4:1f:81:c8:e2:52:
98:af:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:13:12 2026 by rpki-client