Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
File: FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft (raw, json)
Hash identifier: IOPd24KLI1IBmR807ciuHGNRLR0KrR0uBs0kDDg5pY8=
Subject key identifier: 0B:AD:45:61:BA:32:10:75:CA:AB:D8:AB:F3:D6:DB:B2:C1:E9:40:D1
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 019FA89918F77ED2520D581554054C27B037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:33 +0000
Manifest this update: Tue 28 Jul 2026 12:00:33 +0000
Manifest next update: Wed 29 Jul 2026 12:00:33 +0000
Files and hashes: 1: FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl (hash: RTthKY6M9Awp22iEf83zu7Nlga2HWXekooJLTGU7B/I=)
2: GDHkLZC4ICOFk1gF37ViWc8G4K8.asa (hash: ShNEg2a4VzZQK89j/BS8Dv4tTFffxAezQPXk3PULYec=)
3: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (hash: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:18:f7:7e:d2:52:0d:58:15:54:05:4c:27:b0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Jul 28 12:00:33 2026 GMT
Not After : Jul 29 12:00:33 2026 GMT
Subject: CN=0bad4561ba321075caabd8abf3d6dbb2c1e940d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:98:0f:e0:bb:79:b7:c8:9a:ac:7e:c3:19:
31:63:69:02:58:6a:62:b9:b6:f7:42:06:57:aa:ed:
a7:8a:c2:ee:56:57:cc:57:3d:5e:1a:79:22:c9:e9:
e2:4a:60:b3:fc:3c:45:89:42:02:16:e2:dd:93:72:
22:97:7b:9a:86:49:d2:5f:71:c6:a4:e9:5e:c5:4e:
c0:5c:d9:00:d5:25:78:eb:5c:91:38:3b:67:f4:2d:
a2:4a:1d:10:74:2f:a2:21:30:79:ef:94:f2:28:4a:
a9:26:d1:86:0f:04:16:a8:1d:9d:2c:5a:6d:2d:20:
a4:1e:2a:86:19:6d:c5:5f:51:3a:70:41:fe:2a:ae:
ca:49:22:a1:5f:d3:e3:2d:bb:ea:7f:3c:12:3e:cc:
80:89:4c:68:90:72:d3:f8:b3:11:0a:cc:2d:55:49:
a4:af:8a:a9:de:c8:db:ff:af:24:3f:12:95:01:2d:
9c:59:95:57:f7:45:af:88:9c:25:14:e0:b0:8c:05:
48:f7:3e:58:e7:8d:1f:ca:11:1c:48:a9:e8:53:2d:
3c:59:17:1a:e3:2b:3e:f1:68:62:11:b0:f2:90:81:
e6:46:07:e3:5d:5b:be:7c:ee:d1:6f:b5:26:47:14:
e6:0e:a7:50:c3:99:e6:9b:c3:bc:02:df:a2:34:1e:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:45:61:BA:32:10:75:CA:AB:D8:AB:F3:D6:DB:B2:C1:E9:40:D1
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:65:e3:aa:1b:34:0f:f0:a4:de:e4:a5:00:6a:9e:cb:2c:
af:33:c6:da:a9:35:87:74:99:c5:f2:b3:71:ff:34:49:63:28:
f6:4e:95:5e:79:54:84:70:98:2c:57:f0:28:55:01:4e:ee:78:
f1:ec:fb:b1:27:92:fc:b8:3a:05:84:0d:8b:41:71:f3:15:66:
11:0d:e8:95:77:e4:a3:99:58:d2:ca:ea:fd:55:6d:4f:27:8c:
0c:03:a0:8c:c6:f1:ad:6d:79:76:98:26:e5:0f:fe:76:d3:0a:
3e:87:c2:10:3a:3e:2c:5a:a0:74:e5:40:ee:9a:57:2c:4a:8a:
21:5a:7e:f2:0c:20:77:22:d1:82:8b:91:0b:e7:f0:c3:d8:52:
1c:08:00:5e:22:2b:0e:c3:c2:02:32:26:1b:3f:89:f9:62:cb:
e3:7f:c1:e2:42:25:9d:da:20:41:dc:22:9a:86:43:0f:9c:f5:
3e:90:0b:e5:c3:6f:dd:f7:e3:58:6d:7c:19:48:b3:42:19:17:
6b:8c:47:a0:69:4a:74:43:d2:6c:76:3c:f9:64:03:65:3b:37:
a4:e3:af:20:8b:c5:6c:e5:aa:21:4a:d6:cd:7b:57:5c:24:3b:
3a:67:81:73:c4:ae:08:68:dc:0a:59:e7:7f:1e:66:bd:e2:72:
a0:c5:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:00 2026 by rpki-client