Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: mjMAOytx0293J8+gY29UVnCBlzggIKafVWoOzqcfq34=
Subject key identifier: 9C:12:4E:29:5A:41:16:A1:89:16:A7:E5:F1:91:B7:09:A1:78:B3:7F
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019D98507ED9B9E58C65118F4288230AAFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 22:01:45 +0000
Manifest this update: Thu 16 Apr 2026 22:01:45 +0000
Manifest next update: Fri 17 Apr 2026 22:01:45 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: RlDZnednmU8oorg8lKQHHwQZC2rgQJ6NmGXSELio84c=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:7e:d9:b9:e5:8c:65:11:8f:42:88:23:0a:af:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Apr 16 22:01:45 2026 GMT
Not After : Apr 17 22:01:45 2026 GMT
Subject: CN=9c124e295a4116a18916a7e5f191b709a178b37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:f5:36:50:e8:81:91:2d:0c:92:39:c0:e8:
33:32:5e:82:16:7f:df:b9:e2:4b:00:5a:29:ce:00:
0a:f3:50:d3:29:cc:20:c7:5a:7a:7f:9a:1d:fe:1e:
13:c6:fd:3a:7d:74:1f:04:b8:e6:61:0e:08:36:e0:
d7:33:20:23:93:b0:18:77:77:57:d4:b8:11:cb:42:
fb:f2:c6:55:3f:67:7f:1d:d2:21:d9:ee:ff:c8:72:
e7:7e:d4:06:ba:31:e2:12:60:64:06:f6:95:9f:1e:
2c:de:81:95:cb:18:16:34:e3:db:bd:47:3d:27:98:
30:c6:9a:cd:f5:b6:05:f2:a7:1c:2a:47:79:44:25:
f8:24:49:c9:c0:6a:64:47:09:db:38:81:31:98:1e:
90:02:98:ce:83:fc:fa:8c:bb:c6:22:a1:55:2c:6f:
bd:a2:01:74:e5:a2:0d:3f:56:6e:e9:90:a8:d4:18:
c4:4b:86:a4:78:31:43:95:e3:33:5d:09:20:fa:2f:
20:49:3b:25:25:fe:1a:9c:7c:3f:01:cb:bf:16:0d:
34:56:d5:65:98:ca:da:32:a2:ed:fe:1d:55:95:15:
47:8c:0e:26:38:9f:ae:9e:fd:76:a0:18:50:49:33:
ea:4a:ca:13:a7:43:27:9e:ee:f9:79:fb:84:fe:f4:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:4E:29:5A:41:16:A1:89:16:A7:E5:F1:91:B7:09:A1:78:B3:7F
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f9:0d:1b:01:79:21:db:87:57:8f:f1:b6:9c:e8:4e:94:c7:
46:d6:e4:0c:0b:d5:79:d4:e3:39:65:46:39:bb:73:88:c8:4d:
b9:3e:c9:8b:f6:dd:57:e1:d2:ed:2e:de:0e:e4:49:dd:87:dd:
57:40:6a:83:51:d3:d6:93:c5:0c:99:d0:db:1f:d2:00:a7:bd:
ce:71:ae:ca:29:fe:81:bc:5c:9e:61:0f:ac:97:73:95:79:7e:
c8:1d:de:ee:a0:7a:11:b1:2f:a2:e6:af:50:4c:4a:25:c2:49:
97:3f:d7:97:0a:17:a2:ee:1b:b5:d5:28:97:4b:f8:e5:53:d7:
bf:9b:ff:f9:bb:d8:09:98:95:57:87:14:d7:df:9b:47:16:39:
e3:2b:69:8f:88:b4:f8:5c:1e:96:c6:b2:b4:69:5d:7a:92:77:
22:bc:66:24:e7:9f:c7:33:f3:e3:b9:d3:d5:91:5b:e6:c6:c0:
8c:93:f8:d2:73:a0:45:95:88:3f:8a:cd:ca:a0:f5:8f:eb:2c:
6c:1f:34:da:22:78:80:34:3e:7c:8a:23:6f:06:0b:e9:65:2d:
d5:5c:2d:d9:95:1a:f1:74:46:b9:fb:cb:02:77:b1:db:5c:03:
8f:3d:64:0e:7a:10:69:63:51:e5:3f:5c:51:0c:d6:1e:65:35:
af:7e:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:14:35 2026 by rpki-client