Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
File: FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft (raw, json)
Hash identifier: DMwNEvoNuVARug7cuUeOtqE32bS1LTOYg4UjCmfzGCs=
Subject key identifier: BE:DE:1D:16:54:3D:F8:A5:20:77:BB:B6:58:4D:38:62:66:CF:08:85
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 01A126F9B61E0D288ECC519DE875C2AF662F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 18:01:01 +0000
Manifest this update: Sat 10 Oct 2026 18:01:01 +0000
Manifest next update: Sun 11 Oct 2026 18:01:01 +0000
Files and hashes: 1: FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl (hash: QXD0puqqaBt4hzhmYgkmecNbEaLdF+afNlYO8jPZhtg=)
2: GDHkLZC4ICOFk1gF37ViWc8G4K8.asa (hash: ShNEg2a4VzZQK89j/BS8Dv4tTFffxAezQPXk3PULYec=)
3: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (hash: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:b6:1e:0d:28:8e:cc:51:9d:e8:75:c2:af:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Oct 10 18:01:01 2026 GMT
Not After : Oct 11 18:01:01 2026 GMT
Subject: CN=bede1d16543df8a52077bbb6584d386266cf0885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:14:a9:20:45:1e:97:3b:c2:26:14:f1:2d:
24:67:b5:92:5d:b6:68:62:47:8d:99:61:ca:41:ea:
65:12:ea:36:f1:f7:70:f1:d6:7c:d6:41:00:51:7c:
55:ec:07:30:5e:b0:44:76:27:32:55:c7:9f:b8:6b:
4c:4d:6e:08:d7:df:7f:10:71:4e:ce:48:51:a6:ab:
2a:71:4c:f3:a1:2c:8c:f8:cf:47:2f:62:39:ad:6d:
d6:3f:15:32:da:70:ee:3d:86:fc:11:39:c7:18:3a:
23:d2:94:62:12:c8:0c:35:8b:a9:66:ec:5c:0e:8c:
06:be:05:8f:9f:b6:21:9c:e3:d4:70:a3:a0:97:b8:
84:03:d4:1f:3f:56:7a:82:61:29:15:01:f3:96:46:
73:2b:91:52:e0:7e:ed:72:b5:d6:98:5f:05:f9:45:
fe:9d:03:80:cc:60:e3:bc:d0:45:89:9f:45:b2:71:
79:74:b8:04:fe:10:9d:ae:c2:86:a4:f9:ca:94:a6:
b4:27:34:62:a9:70:9b:45:d1:f5:d8:37:e3:33:ae:
9f:80:1e:59:7e:83:a0:c8:03:77:0e:c8:7f:e4:f9:
59:27:83:91:4d:34:f5:b0:44:96:49:e1:e5:a1:55:
0a:64:83:d9:16:8e:96:ca:70:29:aa:6b:48:c6:ef:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:1D:16:54:3D:F8:A5:20:77:BB:B6:58:4D:38:62:66:CF:08:85
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d9:53:6f:ad:5e:c4:d9:11:18:44:5d:1c:b6:25:9f:3e:d1:
a3:e6:40:69:bb:d4:a6:b8:0d:47:1f:da:76:c5:91:17:c5:37:
9a:e7:68:89:f2:7e:43:a7:39:1c:05:fe:23:3b:a2:fb:15:54:
2a:44:7b:0c:a7:4c:1f:cc:92:2e:6f:a7:55:09:19:ca:a6:c5:
cc:b9:42:83:16:4c:b7:e3:21:20:a0:2d:a2:fd:2d:c1:c3:a8:
56:7d:9a:1d:b0:6b:3b:cc:ba:90:55:7b:1c:83:85:5d:b0:a9:
c3:b4:5f:83:2c:df:8d:38:e8:be:56:7d:95:ef:91:6e:a9:31:
23:6c:ab:0b:20:37:3c:16:bf:72:ab:c0:6e:ca:d5:75:cb:d4:
02:6c:1d:4b:72:24:1e:1b:56:a4:34:40:ae:5b:3e:32:81:54:
2e:de:bc:bb:b8:7c:b4:b7:70:8c:e4:b7:fe:55:a3:56:81:9a:
ea:07:28:ac:91:6f:be:55:23:6a:0c:1c:15:3e:f9:15:2f:9e:
95:8d:d5:ff:3c:ae:0a:35:70:6e:a4:55:6b:d2:14:b8:35:5a:
9c:d9:96:f5:a2:af:d1:df:dc:80:3e:50:16:dd:1e:00:86:a1:
29:33:12:df:7e:73:2f:83:3c:76:a9:4c:5e:60:a6:0f:2c:72:
10:77:94:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:12:18 2026 by rpki-client