Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: TrVOjjGHyRrkzOKHtvM90giWAGz+aJ/9HKSnzvPKkeQ=
Subject key identifier: 39:1C:B5:78:75:32:08:37:DE:50:E7:4D:2D:C4:07:83:25:68:6B:07
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 01A0C557AB51D7FC895FCA0DFE80A1E83295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 19F7
Signing time: Mon 21 Sep 2026 19:00:52 +0000
Manifest this update: Mon 21 Sep 2026 19:00:52 +0000
Manifest next update: Tue 22 Sep 2026 19:00:52 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: usmjWZvUtoPFCLZTYf7nIR2hyWdPVraRIWCVE9X6ETI=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ab:51:d7:fc:89:5f:ca:0d:fe:80:a1:e8:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Sep 21 19:00:52 2026 GMT
Not After : Sep 22 19:00:52 2026 GMT
Subject: CN=391cb57875320837de50e74d2dc4078325686b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:3c:96:b1:c4:20:5a:6e:7d:7d:2a:82:31:
eb:5b:95:ce:0d:e4:cf:61:00:46:5b:72:a7:0a:0e:
29:9a:9c:cf:8b:a2:ae:59:1d:8b:34:eb:c4:c0:e6:
c1:df:4c:c8:5b:60:b6:8c:4b:79:1a:3d:30:21:8e:
f0:ca:b0:40:71:7a:99:55:c1:da:48:9e:be:c5:93:
42:7f:a3:08:f8:d5:be:f4:16:e3:19:87:08:b0:a9:
7b:73:86:70:19:2f:b5:5a:72:a7:92:a1:aa:ba:61:
cd:57:e2:b5:e3:7f:e3:a3:67:44:c8:7d:99:be:70:
13:7b:d1:fd:38:1a:e1:54:72:5e:31:36:96:89:ba:
e8:ed:b8:a4:c4:04:dc:cb:75:7a:dd:c4:48:04:e5:
52:d8:c9:0b:4f:82:e3:c0:ec:5c:47:d8:65:c5:58:
f2:d8:00:b9:0e:35:ae:c6:6f:d0:c9:0a:f5:3e:1a:
93:d7:03:7b:5d:82:88:b1:b8:70:a9:86:2e:64:39:
45:00:6e:54:d6:ad:48:6e:1f:c5:0b:73:be:81:9e:
60:0e:cd:d0:71:57:aa:cd:51:8a:1b:7e:37:64:9d:
d6:6b:b6:d0:b9:8c:07:89:d7:b6:82:1a:39:85:6c:
3b:0f:c9:c5:f8:3e:04:3c:11:38:26:0b:39:f3:6f:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:B5:78:75:32:08:37:DE:50:E7:4D:2D:C4:07:83:25:68:6B:07
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c7:e5:e1:ff:8b:37:cb:5f:79:0e:b3:63:32:ac:7b:8e:2a:
94:83:1b:41:0e:b1:d3:5c:e0:eb:a9:84:c0:52:d5:0e:29:60:
2e:02:87:c5:3c:04:d9:0b:69:ab:c0:0b:36:bc:4e:52:46:1b:
da:8a:e4:91:8c:4c:e8:48:f3:60:75:42:0e:3f:ea:a3:2e:e5:
eb:bb:7c:e7:b3:41:02:a2:b3:76:be:32:c2:87:3f:03:35:2a:
bf:64:fa:ab:22:bb:83:e1:f5:ff:f5:b6:ff:a2:00:2c:e6:0c:
c8:62:0c:e9:2d:0a:c8:6c:8d:89:2c:b1:fe:44:f9:9a:2e:77:
1b:8b:ec:ff:10:e3:c1:a1:f6:88:97:40:1d:5a:c0:c0:4e:3e:
b2:fa:5b:15:e3:dc:da:9f:4a:5a:dd:33:79:d1:fa:36:65:d3:
b9:ba:0e:22:e2:ca:78:a2:45:d0:49:0a:b9:0c:84:65:b8:cb:
58:b4:46:6a:14:0f:e7:30:14:e6:d5:a4:16:70:56:2c:5c:d9:
fd:d7:33:fb:40:2e:00:e8:3e:1d:18:30:28:54:04:d5:4e:aa:
9c:2a:f6:df:eb:a4:9b:0d:8b:f0:a9:de:43:1d:b1:59:c8:ab:
af:47:99:b9:ed:be:db:bd:fa:46:1a:c7:90:69:06:3d:50:12:
02:7d:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:48 2026 by rpki-client