Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: YnJ4faPfMX7cbH4rIh4EyoVkssQ4zi6YT5j8hdJRMZg=
Subject key identifier: 17:74:4A:D1:03:78:65:E7:59:23:9F:D2:7E:07:03:A6:D1:EF:B8:3A
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019CAA581EAAD288B009D0E2DB411DADA484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 15E5
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: JV/m3r56Yj0zC7y5za+hQL/lZy8C4PXfX8HQRpJd9vA=)
2: IfURpUgFpbVNvnCEcZgUNhevcZU.roa (hash: 0AGljKEdhAMw7coWxuquiA6Dj1ABe9m7+/a6e4Sbu60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1e:aa:d2:88:b0:09:d0:e2:db:41:1d:ad:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=17744ad1037865e759239fd27e0703a6d1efb83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:1b:6d:ea:7c:11:21:7c:ab:61:eb:d5:16:
b1:6f:5a:88:cc:0d:8e:c3:c0:3a:da:e7:7b:9d:6d:
74:11:70:a3:f6:c8:f4:25:9e:c7:4f:a3:f1:41:5e:
fc:0a:4b:12:c6:90:6c:f8:88:04:f4:b9:84:47:9c:
3f:0e:25:4c:c6:a3:73:30:64:69:90:4a:57:2a:c2:
a3:f5:f3:45:1e:b8:ab:cc:9f:9e:c6:8c:59:ea:15:
34:2f:59:95:b6:18:65:3a:a9:83:af:0e:bb:9e:bb:
5e:a9:e5:18:3a:d2:7b:e5:e2:e3:63:08:e7:72:60:
52:17:9f:f5:04:17:7a:2e:ae:38:94:c5:1c:0b:b9:
13:80:5f:9f:4d:f9:63:7d:56:f1:90:2a:56:a5:35:
c8:28:f1:ea:bd:9a:fe:d1:d4:ee:2e:fc:27:36:5b:
0f:d5:c0:76:75:a6:98:74:5d:bf:77:42:5a:58:24:
eb:6c:95:19:05:25:b1:64:a4:5f:4f:3d:8b:40:10:
05:49:71:0e:01:01:9f:ae:5b:af:c8:f4:e9:24:fc:
e7:a8:eb:ce:d9:54:af:64:b5:d8:a6:ac:81:0e:2a:
28:fb:e6:e4:1e:51:35:db:06:ba:59:7d:92:0f:d8:
f5:10:cd:e1:ed:ed:bc:7a:b4:c3:9b:5e:52:80:1c:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:4A:D1:03:78:65:E7:59:23:9F:D2:7E:07:03:A6:D1:EF:B8:3A
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d5:92:1b:86:bd:97:9b:95:1b:07:24:8f:bf:f8:ce:c8:be:
d0:4c:bd:6f:ca:61:a4:f6:37:a2:c2:7a:6e:45:bd:de:d2:90:
85:f7:76:a6:2c:49:70:31:eb:d6:ea:25:0b:8c:1e:ed:c4:8e:
86:c0:28:6b:af:c4:fd:72:29:4a:b0:3e:73:90:17:8c:f7:de:
73:39:6b:55:f8:ed:d8:8a:a8:bd:4b:b4:79:e9:23:8e:92:08:
38:06:3e:24:f0:9c:50:d6:6d:d7:e7:fd:a0:45:8f:b6:c5:4f:
05:70:64:21:18:4e:1a:57:0d:4b:92:bb:d6:eb:a7:44:49:00:
11:30:93:b6:f3:33:4d:ba:31:a4:9c:cf:e2:41:74:59:2b:a1:
ec:32:72:7f:76:c5:bb:64:69:9b:2d:18:78:36:db:e0:05:5c:
19:ec:73:e4:1b:bf:06:71:ce:35:72:b2:b2:f7:b4:e5:60:29:
e9:e3:ad:8c:22:2e:a6:45:99:f0:49:be:2d:ca:5b:cb:17:c8:
2f:79:08:83:ec:1e:54:0a:eb:dc:15:14:15:05:00:be:1c:1a:
68:ad:5f:44:b6:44:40:d0:08:c3:73:14:58:a3:60:e7:8b:95:
13:c5:0f:b4:8e:9b:e3:3d:27:6c:7c:50:1d:7c:bd:c3:c1:69:
a7:da:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:55 2026 by rpki-client