Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: 5DgiqPwxM0ugtIE3TLCtICRnQV1qVNfBwR6l9Joaf7I=
Subject key identifier: CD:43:C4:1D:9C:E5:90:5C:A7:FE:A5:C8:A5:1E:88:3F:75:BF:CE:3C
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019CABA1F7066ECD741E8303313DF5683653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: jcRqi4NF+fecT9xNTfFncUO5mRlc1RroUGzul4o4sBc=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f7:06:6e:cd:74:1e:83:03:31:3d:f5:68:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=cd43c41d9ce5905ca7fea5c8a51e883f75bfce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:fa:01:bc:5c:3b:66:49:ee:68:e0:2a:ca:
fd:61:6b:5c:8c:44:75:5c:58:0f:fb:75:3a:10:44:
96:24:3f:ef:12:09:eb:91:5b:7e:4b:ef:c6:77:64:
04:0b:28:29:b8:3a:36:44:cf:4b:4c:9d:5b:46:36:
dc:da:44:5b:25:e5:5d:80:03:a2:74:b1:e1:53:1d:
e5:e5:41:52:9a:6c:3d:01:eb:e6:fa:35:cb:53:15:
24:3e:11:8b:af:b7:4d:14:36:7b:de:e2:b5:a1:dd:
57:02:0f:05:c4:b3:1f:f7:8a:48:8e:27:bf:c1:20:
cb:45:6e:4b:4d:cc:fd:60:22:f1:0c:17:1d:e7:73:
7b:4d:72:e4:73:fa:ac:d5:5d:e6:35:d3:6a:bc:68:
ec:75:df:75:98:49:4e:bd:2d:e7:b2:f6:93:e9:1c:
21:67:fc:c6:b1:c5:41:ad:23:b3:c1:c4:6b:08:44:
6e:a2:68:06:aa:eb:d1:9f:c8:2a:d6:97:8e:47:c6:
26:f7:ae:e1:4c:2a:bd:7a:67:ff:dc:a8:e5:4b:36:
13:98:61:d1:ac:2b:91:83:97:4a:37:bf:8e:ed:61:
2a:96:4b:b3:2a:14:88:bd:1d:18:35:9f:4e:a4:da:
40:39:56:50:e0:30:64:9e:57:b2:d5:d5:2a:17:79:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:C4:1D:9C:E5:90:5C:A7:FE:A5:C8:A5:1E:88:3F:75:BF:CE:3C
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:8f:71:e6:02:09:38:ee:b7:82:cf:b3:e9:aa:3c:56:bd:
01:1e:be:47:ca:12:96:48:62:09:bc:f1:7e:25:34:fc:cf:24:
c7:c9:58:67:10:7a:13:bd:e7:d0:e7:de:d3:79:1c:e6:cb:11:
e9:3d:33:35:31:b9:76:0a:a6:aa:e1:d7:8c:34:03:ea:76:35:
41:27:ed:55:26:d9:b1:fa:6d:62:cb:22:34:67:00:43:cf:6d:
f0:f6:6f:47:a4:71:8b:e9:8a:6b:13:a4:61:0f:64:ee:c3:5a:
eb:64:24:52:34:58:98:a0:f7:ce:35:6c:1b:69:b8:c6:83:7a:
d4:65:47:b1:fb:8b:ab:dd:74:24:90:1e:71:c6:94:74:96:9b:
10:9f:12:88:18:f6:20:53:79:84:5f:de:a7:fc:1c:78:9e:02:
d7:f4:96:47:1a:33:c7:55:98:fa:e7:7a:e1:12:30:92:97:ae:
93:f7:6f:a8:12:c6:8f:62:2e:7b:96:5c:b5:bd:66:d1:0c:7d:
89:ee:0b:45:39:1a:6e:c8:bd:55:52:da:16:4a:03:aa:7f:ea:
7a:a9:14:77:73:e1:d7:ac:8a:95:7c:8a:e2:20:2e:f2:3c:4b:
28:42:2d:39:5b:00:6d:1d:65:53:09:6d:f5:4a:3f:11:9e:0b:
a3:e3:95:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofcGbs10HoMDMT31aDZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm
MDkxZWQwHhcNMjYwMzAxMjMwMDQ0WhcNMjYwMzAyMjMwMDQ0WjAzMTEwLwYDVQQD
EyhjZDQzYzQxZDljZTU5MDVjYTdmZWE1YzhhNTFlODgzZjc1YmZjZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KD6AbxcO2ZJ7mjgKsr9YWtcjER1
XFgP+3U6EESWJD/vEgnrkVt+S+/Gd2QECygpuDo2RM9LTJ1bRjbc2kRbJeVdgAOi
dLHhUx3l5UFSmmw9Aevm+jXLUxUkPhGLr7dNFDZ73uK1od1XAg8FxLMf94pIjie/
wSDLRW5LTcz9YCLxDBcd53N7TXLkc/qs1V3mNdNqvGjsdd91mElOvS3nsvaT6Rwh
Z/zGscVBrSOzwcRrCERuomgGquvRn8gq1peOR8Ym967hTCq9emf/3KjlSzYTmGHR
rCuRg5dKN7+O7WEqlkuzKhSIvR0YNZ9OpNpAOVZQ4DBknley1dUqF3n+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1DxB2c5ZBcp/6lyKUeiD91v848MB8GA1UdIwQY
MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt
NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm
LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM+PceYC
CTjut4LPs+mqPFa9AR6+R8oSlkhiCbzxfiU0/M8kx8lYZxB6E73n0Ofe03kc5ssR
6T0zNTG5dgqmquHXjDQD6nY1QSftVSbZsfptYssiNGcAQ89t8PZvR6Rxi+mKaxOk
YQ9k7sNa62QkUjRYmKD3zjVsG2m4xoN61GVHsfuLq910JJAeccaUdJabEJ8SiBj2
IFN5hF/ep/wceJ4C1/SWRxozx1WY+ud64RIwkpeuk/dvqBLGj2Iue5Zctb1m0Qx9
ie4LRTkabsi9VVLaFkoDqn/qeqkUd3Ph16yKlXyK4iAu8jxLKEItOVsAbR1lUwlt
9Uo/EZ4Lo+OVZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:27 2026 by rpki-client