Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: 6WmP+XjndnBmfEtZlD5bpn6czgUhh9YFxsOxV4YVS0A=
Subject key identifier: 2A:E9:0D:DF:B5:F2:E5:CF:2E:D8:AA:0F:11:17:8F:43:E6:2D:8A:40
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 01A0BFC3498AB73D14B7EE854F9F8607AB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 13D8
Signing time: Sun 20 Sep 2026 17:00:41 +0000
Manifest this update: Sun 20 Sep 2026 17:00:41 +0000
Manifest next update: Mon 21 Sep 2026 17:00:41 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: 6xELRFrNNwSfSnszh8YHwKedQWmLk5edXcmYIsUISF8=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:49:8a:b7:3d:14:b7:ee:85:4f:9f:86:07:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Sep 20 17:00:41 2026 GMT
Not After : Sep 21 17:00:41 2026 GMT
Subject: CN=2ae90ddfb5f2e5cf2ed8aa0f11178f43e62d8a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:e7:2c:37:bc:66:bc:9b:82:a1:80:ba:24:
1e:00:0b:be:c5:fc:55:60:b4:b6:78:40:7a:bd:8c:
2a:e3:8c:89:38:cc:cd:5e:6a:92:be:40:b8:6d:48:
5e:8b:37:2c:0b:ee:3e:4a:a1:e6:f0:a5:e5:23:c6:
16:1a:e0:46:9e:6d:c0:a9:b4:7d:74:ae:fc:76:fb:
0f:9c:07:91:c1:1d:0c:4d:ad:25:b4:8a:f0:e7:23:
af:37:69:a7:94:0a:de:04:2a:fa:56:78:f1:3f:34:
fa:3e:ff:ef:8e:36:49:66:d9:8a:d6:7b:5a:eb:b5:
17:ea:bf:eb:1a:e9:44:12:91:e9:f5:a5:30:8b:ad:
78:7f:0b:c5:99:9b:45:18:7a:c5:6e:b4:19:38:f8:
e5:39:1d:2e:e6:71:0a:33:b7:2d:c1:86:70:94:bf:
dc:e7:26:7d:6f:16:47:d1:84:fa:f1:a2:5d:53:44:
4e:17:29:7c:6c:9f:66:4c:f5:48:3c:6e:a7:d7:86:
98:bd:f5:e3:b7:43:29:50:ec:84:13:c4:b9:1e:a9:
59:4e:56:3e:96:3f:36:a9:be:4e:08:de:1b:e5:d9:
72:41:b9:f6:5e:f0:68:a4:78:f5:d5:2e:ee:5b:3c:
35:0e:d4:52:12:18:d4:97:a1:d2:e7:3a:ac:f5:f5:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:0D:DF:B5:F2:E5:CF:2E:D8:AA:0F:11:17:8F:43:E6:2D:8A:40
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:9b:15:53:45:7e:b2:13:28:a1:64:fc:9b:73:be:b8:45:
fe:94:e6:3d:e5:74:e2:15:d4:ae:d7:14:40:3e:0f:a7:05:e6:
4b:99:17:83:37:00:2f:82:5c:55:50:0b:65:64:cf:7c:8c:07:
ae:64:41:97:97:a2:2c:66:4e:3a:d4:1d:7a:4e:56:b8:cd:28:
01:98:8a:b8:3a:e1:91:6d:62:a9:1a:3b:a1:d8:6d:0c:33:34:
8d:a4:f2:32:b3:96:ee:92:df:7f:6a:3d:de:a0:97:c4:47:c4:
94:b9:97:ad:4e:1c:bc:5a:8c:7e:23:f3:77:a4:7d:ad:8b:ba:
57:f3:49:48:67:95:4d:47:3c:01:15:ab:e7:42:e0:1f:70:9d:
12:29:0f:7e:2f:1e:4f:77:21:bf:17:a2:31:56:9f:e0:f8:89:
84:cc:c8:93:d0:be:cc:98:61:95:c2:0b:6f:f8:c7:89:e5:b1:
19:99:94:66:d9:3b:60:cd:a6:3e:7d:3f:dd:36:54:bc:0e:f7:
75:e1:02:17:63:19:ca:29:70:13:94:49:46:1d:a1:28:2a:0d:
01:a5:3c:59:04:00:5b:eb:ef:4a:b1:90:5d:7a:29:e5:fe:d7:
5c:ad:f9:f9:52:fd:c2:e8:87:e0:ed:51:a8:b5:c2:e9:b3:7a:
c5:ca:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:38:59 2026 by rpki-client