Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: N1s2ax5C3AZAsIyr4ywDZR0iayROwSbw/cNGDU4SArA=
Subject key identifier: 46:D6:38:29:1C:03:85:45:E6:C1:76:B4:C0:76:7C:1C:B1:AF:FB:34
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019CAAC6E85ECFA446A97197FCD1B2CD0122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: l1h10z0tMe2pDpuPC/0e6CqkgGepT04w4138tFf3s8c=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e8:5e:cf:a4:46:a9:71:97:fc:d1:b2:cd:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=46d638291c038545e6c176b4c0767c1cb1affb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:08:d0:8f:3f:4e:6e:94:65:8f:80:28:2a:
33:0f:4b:a1:50:55:35:c5:31:de:c2:33:51:91:f2:
86:28:f2:ae:ab:15:41:7b:37:b7:3f:56:66:7b:39:
ea:ec:83:c9:bc:a9:c8:33:a4:65:60:5e:72:66:29:
23:d0:89:73:55:d2:e7:2f:6f:fa:8f:5a:a6:bd:c2:
2f:73:c6:28:9f:aa:a1:3e:ef:e9:46:6b:4b:e8:1e:
de:6a:df:90:1b:27:46:8d:0c:40:8d:51:e9:06:65:
8f:09:cc:48:48:97:da:64:94:13:b1:ab:3e:ac:ab:
9d:be:75:8e:d4:ea:85:87:73:ff:ca:b1:a5:95:f0:
c9:19:25:45:7e:b1:48:e1:88:0a:1c:55:4c:28:81:
df:5b:93:e0:2c:61:e4:53:2d:5e:01:59:33:61:56:
c5:ce:c7:13:25:f2:a8:95:1f:67:d0:09:27:c6:27:
f1:84:bc:d2:2c:09:b6:68:e0:28:3b:9d:d9:ff:46:
b3:c3:4f:9a:e1:be:8c:f1:84:75:0a:d1:d3:cb:87:
68:63:e7:10:1e:ae:e9:85:cb:95:13:5c:7c:ca:e6:
f7:b1:55:32:28:52:43:31:d4:50:72:64:22:dd:ac:
29:4a:8c:45:fd:d8:e8:0b:27:2a:7d:71:ea:6c:ec:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:38:29:1C:03:85:45:E6:C1:76:B4:C0:76:7C:1C:B1:AF:FB:34
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:86:ca:a4:c0:71:b9:3e:e9:33:14:93:ef:64:ed:05:81:
f2:e4:6f:a8:59:01:84:f0:66:28:09:34:d8:67:dc:91:71:30:
0a:33:5d:49:d2:55:52:dc:be:4d:37:97:d2:02:90:44:68:8b:
90:eb:7f:8c:e8:e9:90:a3:85:70:2e:4d:c4:70:7a:8e:89:2a:
2e:73:3b:10:38:d9:15:b1:9f:86:f9:44:53:04:c2:de:fb:d7:
aa:6b:07:a8:7d:01:4c:f8:2d:73:96:9d:10:53:a5:b4:b5:2c:
8e:01:c3:fb:7d:ca:cc:2c:9b:30:38:88:0f:3f:c7:04:4d:94:
94:53:2b:ff:e7:f2:bf:6b:33:b5:0f:3b:e9:d4:8a:ff:80:90:
18:7f:f0:c0:4e:9d:4a:2b:d2:6b:38:54:b7:62:b6:c0:ee:df:
e7:a4:ca:a5:65:ec:1d:1e:bc:46:bb:5c:ea:f7:f7:6b:f9:93:
7e:27:c6:96:86:68:de:df:74:87:b2:1b:89:ae:b6:4e:58:c0:
f0:19:92:1e:56:36:5d:55:f8:85:04:6d:6a:95:af:37:fa:47:
4f:01:76:55:48:47:2a:cd:ab:a3:90:f0:e3:9d:49:57:33:56:
68:50:37:00:63:dd:cf:5c:3f:77:3e:71:2e:44:43:e9:4a:2f:
b0:f9:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:21:57 2026 by rpki-client