Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: SFugajoIMLfkN0xeboj1WjFd6AU5+LmQ6TFiAkYzTcI=
Subject key identifier: 5D:3D:26:BA:FB:15:C4:BF:13:A4:BA:49:3A:2B:4A:07:83:74:E8:78
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 01A0C1E8664C943263634DCBD5E88A3DC6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 0BE8
Signing time: Mon 21 Sep 2026 03:00:28 +0000
Manifest this update: Mon 21 Sep 2026 03:00:28 +0000
Manifest next update: Tue 22 Sep 2026 03:00:28 +0000
Files and hashes: 1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: LiMg2iZy7RXuLnqNN1ikz/eZgxHx36koTJTtjnymop0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:66:4c:94:32:63:63:4d:cb:d5:e8:8a:3d:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Sep 21 03:00:28 2026 GMT
Not After : Sep 22 03:00:28 2026 GMT
Subject: CN=5d3d26bafb15c4bf13a4ba493a2b4a078374e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:16:f8:2e:7e:b7:ae:73:8e:9d:f1:d6:91:
66:f3:5e:5a:70:10:1b:0a:a7:3a:74:3d:97:bc:21:
86:98:2d:3c:af:e7:2e:37:53:f7:a4:1c:ac:d5:a6:
32:66:d6:dd:e8:71:b7:14:e5:1c:6b:83:6b:e1:8b:
a9:2f:d6:f6:c4:ee:8e:15:e9:2a:3f:f5:f9:95:af:
b4:92:d2:d4:da:83:23:ac:52:81:13:99:cd:7a:00:
48:4f:28:c6:0a:07:bf:ee:6c:54:d7:ff:aa:b0:94:
c0:2b:8e:58:50:14:f0:8b:99:03:b6:c6:e0:38:c8:
d5:72:b7:9d:4e:4d:95:80:4b:82:26:68:25:4c:d4:
c7:1f:7e:e3:a2:c8:75:37:cf:84:83:52:e3:ca:f1:
a3:36:ae:3b:bc:b1:8e:db:0a:72:8c:c8:a1:c8:f6:
1a:2e:9e:2e:8e:3b:d5:d9:8c:d6:2f:fc:ed:4b:3f:
a3:8f:25:fe:fd:c6:ca:f2:9f:65:d9:14:f1:1b:7b:
9b:b8:60:9f:d3:2c:45:e9:cf:d5:fc:cb:1b:e4:93:
23:49:20:7b:9c:48:a3:dc:44:b8:d7:7f:79:58:e4:
5d:54:33:78:3b:cb:c4:8e:7e:5c:2d:56:88:68:1e:
a9:2e:65:5b:ab:a3:07:a2:b7:7e:4b:f3:f6:d1:40:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:26:BA:FB:15:C4:BF:13:A4:BA:49:3A:2B:4A:07:83:74:E8:78
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:c0:60:0c:0b:66:58:84:4e:00:10:70:e7:68:d5:45:a7:
43:b3:44:93:84:65:af:c9:24:21:2e:62:b3:42:bd:16:b8:ac:
31:73:79:a2:2b:94:61:bc:b6:0d:a5:ce:37:ae:a3:da:d2:04:
9c:76:94:47:17:84:62:d4:78:e2:1f:90:5c:ff:08:63:f4:f6:
fe:5b:9f:fc:65:68:41:12:3b:de:b9:41:bf:ec:c6:70:f7:cf:
03:92:15:b7:ce:04:62:0c:a5:1e:5c:a7:13:bd:3f:43:5d:24:
58:5d:e8:38:07:b5:15:93:7d:4c:19:42:bb:61:3a:ce:a2:8f:
05:d7:38:36:90:42:c3:b0:73:2c:3b:71:e1:cd:a0:dc:83:cb:
21:d0:8b:d6:c9:68:2c:6f:2e:df:69:16:52:aa:1f:d9:2c:78:
3c:bd:6d:f8:ef:d7:14:d3:16:d6:72:3f:25:c7:ce:40:a7:99:
40:9b:2c:5a:56:da:99:c9:98:a1:a1:14:3e:a5:8a:3a:11:ca:
87:2a:32:a0:09:d1:f0:81:99:8e:d1:db:b1:fd:f5:a7:8c:65:
b7:05:1a:92:24:b0:33:b3:e6:e6:7e:3e:9c:0e:72:b7:52:a2:
5e:32:8e:de:a4:83:00:b5:00:f5:9a:77:5e:78:6b:4a:4d:1d:
de:58:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:31:42 2026 by rpki-client