Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: qcx/rHEbfX/ysY8N7+l3rDCxhVpJnzkTIJS5mQLP/Ds=
Subject key identifier: 86:C0:E0:77:61:68:8F:1F:B7:64:70:13:1C:20:7B:F4:7D:1F:B0:F7
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019FAB63EDFB660AFCB7263FF29AE46F51D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1965
Signing time: Wed 29 Jul 2026 01:01:20 +0000
Manifest this update: Wed 29 Jul 2026 01:01:20 +0000
Manifest next update: Thu 30 Jul 2026 01:01:20 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: UvXAnRvgYvt3Shr6ZQk8DhB1rQMGGqaHhHef1CSaMB4=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ed:fb:66:0a:fc:b7:26:3f:f2:9a:e4:6f:51:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jul 29 01:01:20 2026 GMT
Not After : Jul 30 01:01:20 2026 GMT
Subject: CN=86c0e07761688f1fb76470131c207bf47d1fb0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:55:0c:08:4f:4e:99:46:02:75:5b:3f:7a:
82:58:d9:e6:7a:74:0e:b7:b5:d7:da:fd:a2:75:d7:
d3:e1:97:7a:9d:e9:49:b9:43:3a:2b:8a:3f:c1:88:
06:a4:80:ea:7c:0d:de:dd:e5:dd:5b:9c:62:2a:11:
26:ee:eb:31:ae:28:44:d8:83:75:90:83:1b:4c:53:
73:7b:1a:f1:ac:61:f4:eb:6e:a5:98:78:cc:fc:79:
a5:52:7f:06:a6:09:39:a1:37:3e:03:4a:59:89:ef:
f0:59:1c:e5:2a:4c:cf:99:59:fb:29:0d:59:46:cd:
93:8d:c4:7c:21:c9:87:cf:89:2b:70:6e:04:17:50:
e9:4a:de:79:68:d4:55:bc:91:9b:03:8a:83:6d:d6:
eb:e9:06:80:0e:16:2f:e6:25:9d:47:9e:23:c8:11:
4c:61:b8:27:ab:aa:24:1e:41:15:6d:d8:95:6e:4b:
4c:15:08:02:31:dd:a2:e3:ab:b2:9b:59:80:d7:6f:
06:ef:ba:d9:65:23:29:8c:8e:43:d9:11:4e:e9:ea:
5f:fd:46:88:d3:20:19:54:11:25:5e:71:4d:b2:78:
ac:fe:52:71:9d:50:a2:52:b8:63:2f:f6:54:aa:a4:
fd:70:00:00:01:cf:50:41:f0:e3:d8:8e:da:ea:f6:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:E0:77:61:68:8F:1F:B7:64:70:13:1C:20:7B:F4:7D:1F:B0:F7
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f6:ba:af:86:f2:dc:c8:ed:6f:3c:b6:dd:76:bf:57:7d:e8:
38:50:54:9b:4a:dc:f6:14:e2:6e:98:c4:d2:a1:e2:9d:7c:b9:
f2:87:70:d2:92:31:b1:bb:62:ee:31:82:47:c8:fc:3a:c5:e4:
71:20:51:a8:dc:bc:94:90:61:5b:4f:bf:5f:3f:00:d0:a0:9a:
2e:b9:08:08:5c:40:32:c2:e8:56:bc:96:14:75:6c:5f:9b:29:
9e:0b:47:38:ee:a0:87:5a:bd:40:04:a3:46:87:c4:8f:b6:31:
3e:83:cd:98:77:00:0d:c5:6f:09:7a:45:8b:0d:f9:84:06:ad:
13:c2:8c:1f:5c:5e:2d:53:e1:91:da:14:59:50:aa:ef:ee:48:
5b:59:20:90:4f:50:3f:a1:9b:86:3a:11:52:70:d9:6a:ef:36:
c3:c3:c5:79:f4:e3:3a:78:60:6c:98:cd:66:d0:77:62:02:d9:
49:54:11:4c:59:48:29:84:a1:66:f0:04:d6:3b:05:19:6e:b0:
39:01:1d:e9:fc:d5:e8:83:e1:ef:70:de:47:48:64:27:95:55:
be:70:54:71:07:0e:ac:34:6d:36:46:b0:5a:8b:6b:10:78:25:
98:f2:f1:aa:c6:08:83:62:8e:27:aa:85:97:54:6c:7d:40:f6:
f1:28:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:01 2026 by rpki-client