Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: eFxYqI3cGpOwYDtB0//Q9uVA43WzV3HwR30J4yyEnqs=
Subject key identifier: 14:B2:78:26:27:15:F6:98:1C:7C:22:C4:85:AD:05:15:71:D8:3C:85
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019CAD90B83630C7BE524EF07B0528BABBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0C59
Signing time: Mon 02 Mar 2026 08:01:08 +0000
Manifest this update: Mon 02 Mar 2026 08:01:08 +0000
Manifest next update: Tue 03 Mar 2026 08:01:08 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: HrXHiByRM6vN3Hg91RsWOFTHTfIS/L/hwpxh/QE2fUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:b8:36:30:c7:be:52:4e:f0:7b:05:28:ba:bb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Mar 2 08:01:08 2026 GMT
Not After : Mar 3 08:01:08 2026 GMT
Subject: CN=14b278262715f6981c7c22c485ad051571d83c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:9f:0f:a2:61:0b:ca:03:ce:64:ae:a3:e7:
bd:ac:ec:cb:d5:b9:e5:c2:f7:c2:31:55:fd:73:80:
a9:1a:32:fc:08:bc:bf:88:9c:25:d6:fe:d2:dc:f8:
c6:ca:84:1b:ba:77:ec:37:5a:39:2b:fb:bd:94:6d:
8c:32:34:9b:b4:7f:13:03:1b:3f:df:66:a3:37:7b:
29:85:6c:66:c3:c3:26:75:81:d2:6f:9e:fa:e2:9f:
38:71:73:2e:e1:a6:46:62:c5:fb:e0:66:6a:e9:73:
d4:ce:c3:57:5b:df:71:c3:84:b2:87:c2:df:48:3a:
f8:58:96:ba:ac:f2:4c:e1:c7:59:9f:6b:a3:43:f2:
08:80:82:8b:77:64:99:96:1e:05:c2:f5:bc:ff:c3:
7c:38:e0:85:af:bc:0f:25:22:84:97:38:92:fa:60:
c7:c5:7b:a4:e9:d5:14:4d:cc:eb:4c:6e:5e:b4:c7:
23:11:3b:a6:69:82:b1:32:b7:5d:20:e3:56:14:73:
56:8e:08:90:69:a3:3f:3c:77:59:e8:8b:48:ec:0f:
4a:a3:fb:d0:14:94:50:86:8a:c6:61:e3:a0:27:09:
52:9c:d4:24:a8:d8:5d:ee:df:af:9a:0b:1f:28:ca:
cd:42:a3:45:51:f8:d5:d3:95:e9:18:87:a5:3d:e9:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:78:26:27:15:F6:98:1C:7C:22:C4:85:AD:05:15:71:D8:3C:85
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:d6:d9:00:aa:62:5f:3b:7e:26:40:d8:df:05:46:7f:c7:
e5:13:f8:85:b4:19:88:b4:a9:f2:32:fd:4c:5b:6c:90:84:77:
b5:36:9c:01:48:09:d2:d7:0d:1b:d6:d2:82:24:e4:13:65:c2:
6b:1a:b6:c5:6f:0a:50:36:ad:46:0b:20:8f:64:4c:29:03:9d:
d7:b5:72:d4:49:eb:cc:75:d6:9a:c2:a1:6f:68:fd:f7:a9:80:
46:cf:48:f9:c2:0c:fb:4f:a9:0f:43:4b:c8:3e:08:f0:f3:42:
ce:fe:c2:7b:8b:dd:d9:c8:ca:00:bb:5f:0f:b4:c7:93:b2:a3:
d6:19:96:d7:12:a9:e6:f1:18:91:29:21:9a:28:c1:cb:f5:86:
e2:7a:49:4e:97:df:7b:45:1c:b1:fa:78:c1:c6:6e:b8:63:f4:
9e:92:b5:90:04:d4:ba:0b:0e:19:dc:ec:77:da:2a:2c:7d:c2:
be:d5:f2:38:15:aa:5c:65:c7:be:1f:4e:c1:c3:57:75:9a:f5:
85:bb:b6:ce:29:35:15:f4:a8:7e:f0:ef:0a:96:92:c4:9f:8f:
5f:72:51:ff:be:22:97:df:a7:bc:0a:5a:0a:93:31:5c:26:7c:
8d:fe:41:84:4b:8d:61:af:34:a8:58:ad:9a:70:1f:07:f4:cd:
51:75:f7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkLg2MMe+Uk7wewUouruzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWZkZDliZGZjNjBhYmEwNjJlN2M1NWMyYWUyZTkxOGEz
MjljY2EwHhcNMjYwMzAyMDgwMTA4WhcNMjYwMzAzMDgwMTA4WjAzMTEwLwYDVQQD
EygxNGIyNzgyNjI3MTVmNjk4MWM3YzIyYzQ4NWFkMDUxNTcxZDgzYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr6fD6JhC8oDzmSuo+e9rOzL1bnl
wvfCMVX9c4CpGjL8CLy/iJwl1v7S3PjGyoQbunfsN1o5K/u9lG2MMjSbtH8TAxs/
32ajN3sphWxmw8MmdYHSb5764p84cXMu4aZGYsX74GZq6XPUzsNXW99xw4Syh8Lf
SDr4WJa6rPJM4cdZn2ujQ/IIgIKLd2SZlh4FwvW8/8N8OOCFr7wPJSKElziS+mDH
xXuk6dUUTczrTG5etMcjETumaYKxMrddIONWFHNWjgiQaaM/PHdZ6ItI7A9Ko/vQ
FJRQhorGYeOgJwlSnNQkqNhd7t+vmgsfKMrNQqNFUfjV05XpGIelPelXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSyeCYnFfaYHHwixIWtBRVx2DyFMB8GA1UdIwQY
MBaAFBSv3Zvfxgq6Bi58VcKuLpGKMpzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUt
ZTY3MDI3MWVlMTQxLzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUtZTY3MDI3MWVlMTQx
LzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgDW2QCq
Yl87fiZA2N8FRn/H5RP4hbQZiLSp8jL9TFtskIR3tTacAUgJ0tcNG9bSgiTkE2XC
axq2xW8KUDatRgsgj2RMKQOd17Vy1EnrzHXWmsKhb2j996mARs9I+cIM+0+pD0NL
yD4I8PNCzv7Ce4vd2cjKALtfD7THk7Kj1hmW1xKp5vEYkSkhmijBy/WG4npJTpff
e0Ucsfp4wcZuuGP0npK1kATUugsOGdzsd9oqLH3CvtXyOBWqXGXHvh9OwcNXdZr1
hbu2zik1FfSofvDvCpaSxJ+PX3JR/74il9+nvApaCpMxXCZ8jf5BhEuNYa80qFit
mnAfB/TNUXX3hQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:37 2026 by rpki-client