Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: Ef1aB7cLMe7jfdZvanNNp6Lkkr/MQXzUI6uQKcJ0LnA=
Subject key identifier: 3B:4C:A5:A7:5A:4C:0C:C3:85:A0:C7:16:B6:DA:E6:03:8C:B4:33:02
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019FAA508E09DDFB2142C3F949C0273B1E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0FDA
Signing time: Tue 28 Jul 2026 20:00:33 +0000
Manifest this update: Tue 28 Jul 2026 20:00:33 +0000
Manifest next update: Wed 29 Jul 2026 20:00:33 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: Zh4AWjEEt/Cna+jqkubgvcjiDYo9/k6JGIlzSsyw0fo=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:8e:09:dd:fb:21:42:c3:f9:49:c0:27:3b:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jul 28 20:00:33 2026 GMT
Not After : Jul 29 20:00:33 2026 GMT
Subject: CN=3b4ca5a75a4c0cc385a0c716b6dae6038cb43302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:28:34:f5:d9:1f:d9:ab:a6:4b:57:9b:01:
0b:4a:63:af:36:c4:aa:fb:40:5c:1d:3b:4c:f2:15:
3c:10:1f:ff:f2:29:5d:9d:51:35:15:07:3d:a8:03:
fc:f8:00:fc:77:9b:a2:c6:45:72:22:f9:9a:98:a7:
12:4e:04:58:ac:87:7e:17:4e:e1:0d:71:46:e7:dc:
36:c5:7e:f6:bd:06:33:27:0b:09:28:d6:b5:7b:7b:
fe:4a:20:7b:c4:3d:bc:81:c9:23:ff:f0:dc:21:a0:
bf:a3:9c:a4:43:70:bc:63:af:ca:a3:c3:e9:aa:d1:
90:07:e6:e6:c5:af:62:69:fa:48:12:e9:8c:bb:f2:
dc:8c:39:75:3b:3f:ef:09:a9:24:62:af:90:97:65:
86:90:8b:15:bf:8b:a7:07:0d:1e:95:a7:c9:31:5b:
89:7e:fb:75:7d:b8:e4:ab:46:9a:4d:a0:e8:c9:15:
52:36:6a:30:55:9a:a6:3e:dd:28:d9:a9:df:35:11:
aa:85:3d:30:79:67:57:9e:34:cb:88:f7:f7:07:f7:
c6:56:fe:01:2e:9b:80:50:93:30:10:3f:55:d4:b4:
c3:7f:d2:76:12:86:6e:c9:78:b9:1d:f7:4f:ba:20:
90:78:db:fd:12:20:a1:e5:50:79:8d:eb:18:ba:1e:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:A5:A7:5A:4C:0C:C3:85:A0:C7:16:B6:DA:E6:03:8C:B4:33:02
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:84:14:7b:a3:22:92:9a:b2:76:09:42:3a:cd:5c:8e:2a:
03:72:31:b2:7d:75:0a:f5:1d:f7:fd:06:71:0e:1a:9a:cc:90:
8b:8e:68:f6:b4:7b:d2:d3:9f:75:9c:3b:06:cd:09:7d:26:c7:
f5:35:f0:db:06:03:9e:a8:4b:dd:e8:61:68:ed:71:85:72:29:
ed:93:ef:7e:fa:68:8e:62:36:93:ed:79:c6:91:0e:eb:78:7f:
3f:d8:c3:19:17:33:8c:65:a9:a9:d3:d0:7b:31:5c:f8:bc:ca:
14:e4:81:2e:e2:2b:49:be:99:f2:ae:63:57:6c:15:9f:14:cb:
b7:0c:44:b0:37:9b:9a:96:54:0a:79:8d:61:87:0f:9f:66:e3:
8f:f5:41:50:0f:97:0f:4d:f7:cd:ba:ce:a8:ab:a4:49:4d:74:
4b:10:9c:16:0a:06:7a:a6:d7:5c:b9:92:2a:24:ed:56:b1:02:
35:1b:8e:1f:f5:76:be:4c:37:85:a0:75:e2:e6:04:d2:79:3a:
4d:f2:87:b0:8e:fe:6f:b4:57:26:48:c1:e4:0d:27:f6:e5:10:
90:bc:d2:a6:8d:8d:e4:0a:3a:00:43:13:88:58:74:33:6a:53:
5b:a9:f9:45:c4:1b:f4:cc:e9:fe:1f:db:c2:9c:25:e2:a8:dc:
1a:35:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:05 2026 by rpki-client