Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: UjvtMuPCohuzeIo+HJHsxfY4Zv1M+537ZdPEXXGoo3g=
Subject key identifier: BE:80:70:71:E6:B8:85:48:86:B9:BD:26:29:10:04:77:F7:3A:F7:65
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019CA9B3D374856633731613EA9711CE9A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0E4C
Signing time: Sun 01 Mar 2026 14:01:00 +0000
Manifest this update: Sun 01 Mar 2026 14:01:00 +0000
Manifest next update: Mon 02 Mar 2026 14:01:00 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: a9R/lgHjajpr8a2oqqB8sUJntNibRcI9ApF/TzqZ1UM=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d3:74:85:66:33:73:16:13:ea:97:11:ce:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Mar 1 14:01:00 2026 GMT
Not After : Mar 2 14:01:00 2026 GMT
Subject: CN=be807071e6b8854886b9bd2629100477f73af765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:e4:73:e4:b6:61:dc:dd:de:1e:cd:f8:0f:
a8:d4:3c:3e:43:d7:62:a4:7b:26:a4:d7:36:36:13:
b0:4c:a7:1c:fb:2e:6a:dd:87:9d:fe:54:63:91:4f:
10:46:b3:4d:bf:35:0c:24:19:37:01:2b:63:a9:8c:
bb:fd:a4:68:30:0b:79:2b:d9:5b:1a:a2:df:00:46:
9c:c9:47:ae:52:8c:bc:bd:d7:9d:2c:97:bb:cc:94:
64:3d:33:ca:f8:e5:c3:5b:4d:94:fa:d4:d7:b2:2e:
dc:d0:78:82:12:a8:38:34:0b:9a:4d:d3:71:54:b2:
eb:d8:ec:ba:05:9c:4b:d0:61:54:11:06:f0:a0:97:
d5:4f:62:a1:6c:04:9f:a5:da:79:c7:ea:b3:ac:af:
54:ab:46:04:b7:eb:48:53:bd:e8:7e:6d:1f:cc:dc:
c6:a9:ab:6a:bd:e6:c6:7f:3e:e8:6d:f1:96:35:fb:
72:7c:50:93:34:6b:b8:0f:04:18:3e:f1:86:d2:33:
7a:0d:0f:97:92:5e:36:8a:cf:fa:fc:10:94:74:69:
0a:75:57:63:f0:7f:fd:3c:24:6f:1b:28:1e:f5:d8:
70:21:f2:1c:da:0f:3b:25:bc:52:9b:1b:86:07:d1:
db:56:ad:bd:aa:09:5f:60:05:d7:3c:2d:67:a1:f3:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:70:71:E6:B8:85:48:86:B9:BD:26:29:10:04:77:F7:3A:F7:65
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b4:f8:82:c3:43:3d:6b:60:12:90:cf:20:73:54:44:f2:27:
88:b9:ab:0a:b7:23:c0:2e:c8:b8:d5:88:4d:4c:8f:9e:91:2d:
cf:a9:7d:f0:9b:62:7b:bb:4c:f6:b3:a0:fa:a3:cb:cc:3d:90:
a2:e6:af:1d:51:ce:c4:32:e1:27:be:c3:96:9f:0f:c3:04:64:
e6:69:57:d5:6c:a7:69:7f:6b:ff:64:50:4a:12:6a:1c:09:5a:
f4:61:70:6a:28:8b:f8:d8:13:46:9d:80:bd:9d:d1:57:af:78:
28:b1:71:bc:e9:5f:f6:fd:c8:9e:37:6c:6e:84:31:88:d1:62:
60:a3:b9:d6:ac:87:74:f0:38:dd:67:64:a5:56:c9:a5:11:f2:
81:63:66:6c:32:64:28:8a:5f:4d:1c:76:10:d8:d6:74:b2:f7:
f3:0a:cf:b4:a6:98:6d:99:75:99:37:c4:5c:f9:cd:93:bd:de:
88:01:29:96:55:81:92:a9:25:fe:69:0c:f8:58:45:2f:75:46:
f6:4e:0a:fe:e2:7a:b2:c0:4a:1d:b5:81:e1:03:40:b1:2f:a9:
39:28:a3:39:0c:2e:39:69:de:eb:e7:e0:2c:2b:51:7b:35:6a:
ff:47:f8:66:c7:3c:bc:91:7f:cf:be:d6:ca:0a:52:58:9e:f1:
d6:d1:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:49 2026 by rpki-client