Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: GTUao6QSAwVJzuw4oZ8aAbyHm706er5PZxEPlBYsCAI=
Subject key identifier: C1:D3:52:62:D7:4F:92:8F:FE:A0:45:43:BA:B6:82:AE:8A:CE:7E:88
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019FA974A52970DF3DEF8F4ED3EDCFE48BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 014E
Signing time: Tue 28 Jul 2026 16:00:21 +0000
Manifest this update: Tue 28 Jul 2026 16:00:21 +0000
Manifest next update: Wed 29 Jul 2026 16:00:21 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: fuJqLIYq3dH/PbPlCuZWf9CzD7exPLA8LTkc0ibMzLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a5:29:70:df:3d:ef:8f:4e:d3:ed:cf:e4:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Jul 28 16:00:21 2026 GMT
Not After : Jul 29 16:00:21 2026 GMT
Subject: CN=c1d35262d74f928ffea04543bab682ae8ace7e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:9e:4f:7a:cb:11:e6:11:d0:bf:c4:c5:46:
7c:ef:55:2b:2d:3c:10:91:13:ea:fe:76:43:b1:f0:
a8:c2:dc:94:55:f9:77:67:4c:3e:99:db:cc:96:a4:
68:69:72:2a:49:19:d2:75:e6:18:a1:48:38:3c:cd:
dc:f7:3c:bf:e9:fb:9b:1d:2b:e7:7e:38:97:65:d3:
90:a1:09:e9:76:01:a3:90:91:f7:3c:77:be:60:f1:
46:09:85:4e:5a:9e:be:b8:53:ac:da:7a:29:6c:f8:
ae:5a:de:26:4b:0d:22:72:2a:70:0e:e9:68:59:cb:
e8:c5:42:a4:8d:2a:72:94:8b:ae:73:8d:4b:d0:42:
86:89:3b:15:92:ea:92:4b:71:ad:fd:2a:fc:99:32:
0b:62:2f:16:da:01:49:7a:6b:c1:02:17:fb:34:51:
de:81:62:85:74:82:fe:0f:94:c4:86:75:d6:00:b4:
c7:04:24:21:b3:c4:18:8b:e9:f3:ae:5e:9f:f3:69:
01:7e:aa:df:4b:ba:f3:84:5b:2e:85:8f:cf:dd:bc:
5b:5d:29:bd:83:02:17:eb:7d:67:76:b2:c1:6b:29:
e6:14:75:ac:46:92:d4:a5:8e:15:e0:6b:ac:6d:f1:
85:0d:1a:4e:e6:2c:c7:a3:51:4d:0d:a5:5f:4a:8b:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:52:62:D7:4F:92:8F:FE:A0:45:43:BA:B6:82:AE:8A:CE:7E:88
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:6d:12:47:18:eb:3c:1f:90:b1:f0:8b:c4:72:d7:2b:61:
6b:aa:e9:27:b7:42:7f:eb:f7:3b:45:65:1b:c6:6b:b5:11:ef:
f1:ec:87:dd:2e:2e:73:fb:d0:ae:59:44:55:b0:b7:af:2d:a2:
86:04:65:f1:da:c8:2b:9c:45:05:b1:7a:45:6c:95:3e:41:9f:
c7:34:b3:c9:4d:57:68:b5:0b:80:91:39:f8:02:79:9f:15:09:
5f:db:3d:12:70:e4:9a:bb:0f:b2:cc:e8:17:82:31:13:80:76:
b0:19:81:e5:b8:7e:9c:b9:e8:02:9b:48:64:79:7b:c1:cd:3c:
0a:51:e1:00:36:6b:fc:f9:a1:0e:51:5d:d0:a0:a5:00:cb:33:
21:31:7d:c7:f4:04:98:53:f3:fe:c0:88:7e:e3:6e:27:63:f9:
69:9f:f4:a8:cb:6b:8e:aa:08:e7:5e:01:6a:e9:43:07:c0:e1:
93:a0:5b:62:7f:15:c7:50:d2:1a:56:83:f6:8d:5d:ba:f5:0a:
3d:19:44:4a:c7:8d:05:33:ff:70:f4:bb:03:6a:40:62:70:94:
15:cd:9a:96:df:99:9d:bc:c5:0c:fa:e8:12:73:ca:8c:05:a4:
e3:e9:b1:59:e9:c9:47:1a:23:da:0c:47:13:54:c9:c9:9d:54:
bb:a8:dd:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdKUpcN89749O0+3P5IviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDJhNTZjMjRiZDdiNGMwZjkzNGVmNzI0NDVmMmUzZjJl
ZTQ4MmMwHhcNMjYwNzI4MTYwMDIxWhcNMjYwNzI5MTYwMDIxWjAzMTEwLwYDVQQD
EyhjMWQzNTI2MmQ3NGY5MjhmZmVhMDQ1NDNiYWI2ODJhZThhY2U3ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluGeT3rLEeYR0L/ExUZ871UrLTwQ
kRPq/nZDsfCowtyUVfl3Z0w+mdvMlqRoaXIqSRnSdeYYoUg4PM3c9zy/6fubHSvn
fjiXZdOQoQnpdgGjkJH3PHe+YPFGCYVOWp6+uFOs2nopbPiuWt4mSw0icipwDulo
WcvoxUKkjSpylIuuc41L0EKGiTsVkuqSS3Gt/Sr8mTILYi8W2gFJemvBAhf7NFHe
gWKFdIL+D5TEhnXWALTHBCQhs8QYi+nzrl6f82kBfqrfS7rzhFsuhY/P3bxbXSm9
gwIX631ndrLBaynmFHWsRpLUpY4V4GusbfGFDRpO5izHo1FNDaVfSotzBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHTUmLXT5KP/qBFQ7q2gq6Kzn6IMB8GA1UdIwQY
MBaAFBTSpWwkvXtMD5NO9yRF8uPy7kgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEt
Mzc4MDRlYjc1Mzg2LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEtMzc4MDRlYjc1Mzg2
LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRVtEkcY
6zwfkLHwi8Ry1ytha6rpJ7dCf+v3O0VlG8ZrtRHv8eyH3S4uc/vQrllEVbC3ry2i
hgRl8drIK5xFBbF6RWyVPkGfxzSzyU1XaLULgJE5+AJ5nxUJX9s9EnDkmrsPsszo
F4IxE4B2sBmB5bh+nLnoAptIZHl7wc08ClHhADZr/PmhDlFd0KClAMszITF9x/QE
mFPz/sCIfuNuJ2P5aZ/0qMtrjqoI514BaulDB8Dhk6BbYn8Vx1DSGlaD9o1duvUK
PRlESseNBTP/cPS7A2pAYnCUFc2alt+ZnbzFDProEnPKjAWk4+mxWenJRxoj2gxH
E1TJyZ1Uu6jd6w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:15 2026 by rpki-client