Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: GbGfQUdk4C3DWRekhV1C7SXiiv3zkH30dq8d56v3bEM=
Subject key identifier: 08:34:42:88:FF:1D:9D:CA:07:E4:1B:A8:9C:18:8B:75:67:BC:AA:91
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 01A0CDECDB9BE67EAF0ACC7530F093C5F17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 11:00:47 +0000
Manifest this update: Wed 23 Sep 2026 11:00:47 +0000
Manifest next update: Thu 24 Sep 2026 11:00:47 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: 40XLV3TjxlYFnC/RMsJxNr5jIOfjAr7QArB0+lDyhFo=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:db:9b:e6:7e:af:0a:cc:75:30:f0:93:c5:f1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Sep 23 11:00:47 2026 GMT
Not After : Sep 24 11:00:47 2026 GMT
Subject: CN=08344288ff1d9dca07e41ba89c188b7567bcaa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:36:d9:5a:4e:fc:84:f6:48:18:89:23:d7:
0a:45:c7:56:51:3e:61:b7:0b:f8:7c:d9:c7:03:4d:
27:18:c9:62:0f:10:1f:89:c2:19:52:e7:03:c5:f5:
27:ae:4c:0a:88:fd:b8:1a:b6:78:c7:52:5c:38:2b:
6a:a0:9d:2e:ec:a4:a0:13:8f:60:05:b8:29:ec:ff:
57:f6:6a:96:48:07:4a:e9:f8:60:da:62:6e:b4:ea:
8c:f3:1f:28:90:c2:b1:01:29:b9:55:f7:76:e4:28:
59:cb:b4:08:04:ca:09:95:be:59:dd:a7:2d:bd:d6:
f7:6f:4a:85:9a:35:7c:b0:72:9d:af:5c:d3:2f:8f:
8b:10:14:76:f4:b7:ed:46:60:3e:95:1c:d9:8f:7b:
ee:c0:d6:84:52:88:a2:5a:77:60:d9:69:7b:2a:cf:
de:37:5e:bf:ba:f1:6d:6c:87:54:73:1e:58:85:84:
56:1b:a3:2b:fa:31:1e:b7:82:08:6f:33:bd:48:fa:
d9:18:f8:a7:d2:7a:54:dc:5e:c8:b2:4a:47:af:b9:
d2:6e:2a:a4:80:be:06:25:44:12:57:34:34:9a:d1:
d6:46:98:89:9a:94:fe:67:7f:b1:53:1f:26:ad:51:
f6:9d:50:fc:f8:68:bc:a0:01:7f:2a:02:ff:1d:39:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:42:88:FF:1D:9D:CA:07:E4:1B:A8:9C:18:8B:75:67:BC:AA:91
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:1e:bc:28:60:5b:f8:7d:60:72:d9:4d:11:0d:83:bd:86:
e0:4b:b3:48:d9:4f:29:f2:c7:72:43:13:57:43:c7:39:d2:7e:
bf:28:aa:41:62:40:bb:53:01:4f:af:2d:c5:a7:23:fd:7c:8d:
7c:03:4c:6e:b1:e6:9c:a6:e2:45:87:6c:e6:bc:d0:2d:59:b3:
3d:6f:3e:60:53:75:c3:6a:df:42:db:dd:9a:2b:04:72:2f:f5:
b6:a5:c1:03:97:0d:a3:66:9f:5b:6f:d9:00:5d:ef:e0:76:ef:
f1:a3:1e:04:04:c8:3b:fa:58:51:2c:60:a3:a1:31:a7:25:25:
fd:94:8a:44:21:04:26:0a:c2:5d:6b:25:2d:be:50:47:3e:7f:
5d:d0:b1:87:9f:25:d0:31:bf:d3:6f:8a:46:26:65:91:40:13:
60:55:b1:31:d2:93:d9:b7:43:48:56:16:56:01:68:5d:07:8e:
05:70:3d:f6:53:9f:0e:cd:7d:c2:64:16:5d:e7:70:3e:66:74:
9e:f5:2b:79:72:ea:fa:d4:ae:54:31:4d:af:9e:ec:32:9d:03:
d0:f2:c0:94:a8:17:c2:4f:fd:11:89:d3:61:df:28:be:2c:f1:
4d:79:8f:82:1d:6b:fa:e6:3b:2d:8e:b7:5e:50:96:02:48:9a:
e7:12:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:31:37 2026 by rpki-client