Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: cIsQta5gNS/6zhXHUJ20vJuVoD05x2KpaK1JpsPN1SA=
Subject key identifier: 23:B2:1E:55:1E:D0:7A:94:87:9E:9B:E3:59:16:D5:9E:5E:CF:AA:BA
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 019CAB3451B368BB1733509218554E59A5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 09CA
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: xfiodzyEp3UeJ8SDsJLN4R+p7C+oIp2T/nTnev2sL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:51:b3:68:bb:17:33:50:92:18:55:4e:59:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=23b21e551ed07a94879e9be35916d59e5ecfaaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:66:4c:ea:a3:b0:a1:b4:b7:f0:5a:96:04:
74:61:77:1b:96:f2:ea:7e:4d:51:49:44:50:15:40:
97:bb:4a:7f:bb:8c:c2:45:5e:e6:94:64:93:dd:7a:
00:bb:04:ba:a9:e0:5e:b3:88:33:50:73:97:8c:aa:
cd:d2:f1:b8:e7:56:6f:fe:b0:b2:f1:f1:5b:46:ea:
67:fe:57:1e:66:09:f1:04:0e:02:33:2d:f0:2a:d2:
eb:11:f5:64:fe:60:ee:14:74:e5:99:9a:2a:5d:15:
a3:70:19:54:8e:81:3f:ee:4e:fe:92:7f:4a:fd:e1:
58:b0:8d:52:ac:56:f9:5b:dd:52:8c:60:b5:68:f0:
1f:59:fe:fa:2f:6e:7f:ea:6e:0f:fe:ab:d6:52:30:
b4:bb:7a:34:85:ee:c4:1b:41:b3:37:f0:43:73:7e:
60:f5:a8:41:9e:78:42:0f:40:4d:a8:58:5f:d9:13:
10:b0:c7:6b:44:be:63:63:72:9e:e3:3b:7d:33:fd:
0b:5c:bd:a7:53:e7:c3:71:f4:68:2f:3d:be:9b:73:
d3:23:90:6a:a9:96:ea:d4:74:13:7e:ab:f4:91:73:
22:90:c6:98:3d:82:a6:cb:88:d9:6f:23:e2:9a:63:
b5:5d:54:f4:5c:dd:c4:0d:5e:60:60:69:2c:11:3e:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B2:1E:55:1E:D0:7A:94:87:9E:9B:E3:59:16:D5:9E:5E:CF:AA:BA
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:f4:d9:b1:a3:0d:1d:ae:bf:b0:f2:8e:35:4d:2b:7b:6a:
8d:cb:a9:ac:37:59:81:f3:23:12:0b:c7:13:51:cd:3a:65:36:
72:81:8e:82:31:10:4f:da:9b:4c:fd:18:2b:8e:c9:4d:01:90:
1d:84:71:fe:b3:3f:25:a4:65:3c:9c:f3:49:92:77:fc:7c:ce:
70:2b:5b:be:66:c1:20:71:f4:f1:bf:ff:46:13:00:22:37:8e:
dc:e7:16:6b:50:b1:58:8b:fc:4f:89:a3:75:b1:68:76:c2:3c:
0f:c6:68:66:e7:fe:e6:7b:d2:50:0a:be:27:54:6d:cc:d4:2c:
28:5c:7c:d2:89:82:2c:76:03:25:73:0a:f8:ec:39:51:ad:f6:
e0:a0:90:e5:53:ab:9c:44:08:38:30:7b:ee:85:e4:f0:b0:88:
78:2c:84:22:d4:c7:6d:fd:d2:eb:3c:c6:54:26:b8:77:df:4a:
49:00:c5:13:53:43:e9:7b:c7:ab:e9:76:84:91:6a:6a:38:34:
fd:7c:28:18:52:2a:3d:d5:98:6c:15:03:5d:8c:a0:6a:82:63:
c5:a5:d1:70:98:2a:c0:2d:f4:44:90:64:25:b2:be:ec:f1:00:
f2:d8:87:eb:c2:34:b4:af:43:cd:99:4d:c3:ae:1c:f0:a4:48:
08:82:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:43 2026 by rpki-client