Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: /saGQLAJihhLn0qsS5ylz964AdPh35+F2BF5UJxUqBI=
Subject key identifier: 62:1D:95:08:EC:09:5A:2B:C0:DE:6D:D5:0E:BC:F4:49:67:08:EB:4C
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019EBFC81D715F3A6423DD4C242D033E9CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: D5
Signing time: Sat 13 Jun 2026 07:00:23 +0000
Manifest this update: Sat 13 Jun 2026 07:00:23 +0000
Manifest next update: Sun 14 Jun 2026 07:00:23 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: B1TBYm6z+7SArbtNJdYJX0WHhpyMCQgzPWjI8xB1P94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:1d:71:5f:3a:64:23:dd:4c:24:2d:03:3e:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Jun 13 07:00:23 2026 GMT
Not After : Jun 14 07:00:23 2026 GMT
Subject: CN=621d9508ec095a2bc0de6dd50ebcf4496708eb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:23:be:1c:d7:cb:1a:01:86:86:0e:5b:b6:
bc:60:ef:35:5d:89:2a:6c:fe:35:a9:a2:2c:8e:40:
a2:d3:0b:ee:aa:cd:25:4a:b9:42:fb:dd:a2:5f:dd:
03:d0:92:e2:5d:61:97:a5:48:8d:69:01:99:92:1f:
cf:be:7f:3f:e1:be:5c:39:3d:7d:09:e6:7c:b1:ec:
7b:ae:4f:4e:f6:13:91:1b:0e:ee:48:49:d2:1c:ef:
fc:d2:af:aa:be:2d:aa:a8:2d:35:75:cc:fa:47:64:
cd:f3:02:16:f2:78:65:09:5a:04:59:9e:f2:ce:5f:
33:00:e8:17:e6:35:f4:8c:ce:69:f9:64:cf:08:87:
59:cd:d6:12:43:b6:b3:ca:8c:b3:cf:91:8a:f1:77:
55:2d:b3:af:fb:df:e0:e3:12:8c:e6:ee:62:5d:f5:
ce:8b:b2:59:0a:29:4d:f0:a1:cf:ce:fa:69:94:70:
bc:9d:46:40:dc:37:07:e4:4f:f8:b8:54:b9:39:f1:
4b:bd:de:fe:34:e4:37:f1:d0:16:3e:bf:2e:00:cf:
7b:e0:b7:2b:f2:23:58:ff:2b:1e:6c:09:ca:57:d8:
26:53:37:16:8c:d4:9c:95:1d:12:ad:91:f3:b6:b7:
51:b0:75:95:e3:26:16:cc:b6:cf:68:52:37:bd:39:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:95:08:EC:09:5A:2B:C0:DE:6D:D5:0E:BC:F4:49:67:08:EB:4C
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:85:49:88:ab:f8:1b:9c:04:3e:e3:f6:e2:03:4b:e6:03:
85:8a:e1:3e:96:24:78:04:e0:03:97:69:e4:cf:d1:75:bf:1b:
24:2a:b6:96:fb:1e:b6:72:fe:cc:ad:94:44:12:f1:f3:2b:a1:
b5:04:79:3b:5e:32:de:83:b3:09:67:1e:92:7a:24:85:d7:7f:
4a:89:41:5f:f8:f8:a8:f3:69:fc:51:1c:d4:4c:29:f6:e3:ea:
8c:6e:ec:82:19:f6:4d:f1:5b:75:52:35:4d:dd:86:89:1a:82:
69:e0:8c:34:ff:64:a7:61:70:8e:78:42:7b:80:9d:e7:fb:a5:
8e:81:39:2f:df:86:5d:4c:d5:7c:91:84:af:b5:06:22:ba:9b:
1c:71:44:6d:dc:5a:be:b9:6e:d2:3c:cc:bb:d4:0c:e2:e6:f2:
b7:20:1a:6d:2e:c8:09:02:17:3c:b5:a3:da:e0:0b:50:2e:e1:
a3:d5:6a:1f:9c:42:c4:81:7c:77:c1:64:5d:2e:79:ae:69:9c:
3a:d0:40:d3:a3:31:b1:25:95:bb:9b:c9:ae:f3:86:6f:19:18:
ad:02:d2:bf:3b:73:19:0a:d5:8a:90:57:90:09:1d:af:60:1a:
7f:9e:78:11:25:3d:d4:5c:cd:97:b7:16:7a:d9:e7:05:b8:8b:
ef:7d:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:36 2026 by rpki-client