Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: eszMBIBOTfHWAV3LjLHJkpMG9DpvKL6O0jvfwhRr9Ls=
Subject key identifier: EB:12:FF:9F:7F:3C:72:76:79:D5:E0:26:1A:1F:78:9A:E3:89:EF:AD
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 01A0C70EBBA33BC0B6DB0EF643DE758FF8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 0D88
Signing time: Tue 22 Sep 2026 03:00:26 +0000
Manifest this update: Tue 22 Sep 2026 03:00:26 +0000
Manifest next update: Wed 23 Sep 2026 03:00:26 +0000
Files and hashes: 1: Afr0mV20pbPHdZnpWYatELuCEvo.asa (hash: owfqUhE14A6UilAazSw974fh+e2NlWVeQw7fmwItRO4=)
2: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: 9+xtmkmaHBiacBUS9CtM0763fOYWo7kQ/4rnHfUcx3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:bb:a3:3b:c0:b6:db:0e:f6:43:de:75:8f:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Sep 22 03:00:26 2026 GMT
Not After : Sep 23 03:00:26 2026 GMT
Subject: CN=eb12ff9f7f3c727679d5e0261a1f789ae389efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:38:f2:6a:a8:6b:64:14:b6:43:10:86:40:
f8:1a:1b:59:54:f9:2d:8e:98:4f:40:b1:20:3f:7d:
b3:4f:75:cf:7c:bc:20:b5:aa:5d:b5:51:b8:57:d0:
21:74:f0:bc:7d:41:29:a2:64:e5:60:23:0e:54:34:
bb:80:c6:f2:89:27:58:19:d1:a9:ce:cb:4e:71:a7:
51:eb:c9:46:de:8f:87:46:61:28:21:51:b0:51:e1:
aa:b2:9e:d2:61:5d:82:2b:6e:a1:e5:f3:fe:d4:cd:
ff:a3:51:3d:e6:fb:ee:23:58:71:ab:77:77:70:5a:
9f:94:8e:db:11:cd:29:d3:90:89:f4:f3:29:57:d9:
fb:f2:73:f0:44:21:4c:71:d0:94:c6:6d:61:4c:5b:
3d:da:43:0e:4c:87:5e:e2:13:29:63:6f:eb:fc:a6:
9c:ac:d0:a1:ac:39:01:1e:75:bf:53:84:47:fe:0e:
ea:b1:e7:82:d9:e9:e2:71:03:3f:24:99:77:7c:1c:
e6:94:10:8b:8e:56:24:b4:c0:7c:68:a3:c6:c4:e6:
1f:0c:6b:6a:a2:44:cc:43:fc:1c:d7:00:1c:c4:2d:
55:f7:85:be:88:9e:67:b3:29:1b:0e:92:42:80:a4:
af:8d:9a:e5:30:e7:47:71:f1:5c:22:25:ff:fe:6f:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:FF:9F:7F:3C:72:76:79:D5:E0:26:1A:1F:78:9A:E3:89:EF:AD
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:52:eb:60:2a:1b:76:1a:24:85:5b:3a:41:0a:72:c8:16:
c3:80:75:ed:2e:7a:7a:ed:3a:00:e3:74:3c:2f:4a:fb:76:ab:
c1:ad:46:84:aa:1f:3f:c1:7c:eb:34:6c:93:54:70:c1:3a:cc:
74:1c:3a:59:e6:07:40:d8:2e:4c:8f:f4:da:ff:72:b9:73:c6:
fd:c3:39:96:f6:95:95:d7:9a:e4:39:a9:3f:b5:8f:93:7b:8f:
77:7f:4f:39:23:21:49:3a:c0:f2:f1:dd:25:fd:61:0d:f0:b6:
cd:e4:0d:b4:78:5d:26:2d:bc:ab:46:56:67:87:75:40:49:cc:
19:37:ce:0a:ed:5d:92:3b:d3:1c:d4:67:63:96:e0:06:56:bf:
80:dc:42:f3:eb:4a:4d:ab:9a:53:4e:d0:b3:44:30:f8:83:65:
65:96:0d:ae:cc:ec:44:f5:c6:d4:4c:6c:7b:ab:05:98:0d:38:
a4:03:14:30:46:a1:b1:1b:8d:1b:87:46:29:55:03:cf:da:3e:
1b:b0:85:28:82:5b:2b:f4:2f:9c:49:ab:54:8a:33:9b:24:99:
e4:d3:64:6d:ae:66:c3:c3:43:64:3c:2f:88:0b:cc:66:44:07:
96:66:8d:93:76:d0:43:7d:91:47:7a:4c:c9:28:27:89:19:c1:
0e:3e:e7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDrujO8C22w72Q951j/i/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzczNTI1OWZkYjdiODNmMjc3YWRmMTJkMDhjYzk4YjVh
NjEwMGEwHhcNMjYwOTIyMDMwMDI2WhcNMjYwOTIzMDMwMDI2WjAzMTEwLwYDVQQD
EyhlYjEyZmY5ZjdmM2M3Mjc2NzlkNWUwMjYxYTFmNzg5YWUzODllZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySc48mqoa2QUtkMQhkD4GhtZVPkt
jphPQLEgP32zT3XPfLwgtapdtVG4V9AhdPC8fUEpomTlYCMOVDS7gMbyiSdYGdGp
zstOcadR68lG3o+HRmEoIVGwUeGqsp7SYV2CK26h5fP+1M3/o1E95vvuI1hxq3d3
cFqflI7bEc0p05CJ9PMpV9n78nPwRCFMcdCUxm1hTFs92kMOTIde4hMpY2/r/Kac
rNChrDkBHnW/U4RH/g7qseeC2enicQM/JJl3fBzmlBCLjlYktMB8aKPGxOYfDGtq
okTMQ/wc1wAcxC1V94W+iJ5nsykbDpJCgKSvjZrlMOdHcfFcIiX//m+F1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsS/59/PHJ2edXgJhofeJrjie+tMB8GA1UdIwQY
MBaAFBTHNSWf23uD8net8S0IzJi1phAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWIt
ZGJlYWY3ODQ4MTdhLzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWItZGJlYWY3ODQ4MTdh
LzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgxS62Aq
G3YaJIVbOkEKcsgWw4B17S56eu06AON0PC9K+3arwa1GhKofP8F86zRsk1RwwTrM
dBw6WeYHQNguTI/02v9yuXPG/cM5lvaVldea5DmpP7WPk3uPd39POSMhSTrA8vHd
Jf1hDfC2zeQNtHhdJi28q0ZWZ4d1QEnMGTfOCu1dkjvTHNRnY5bgBla/gNxC8+tK
TauaU07Qs0Qw+INlZZYNrszsRPXG1Exse6sFmA04pAMUMEahsRuNG4dGKVUDz9o+
G7CFKIJbK/QvnEmrVIozmySZ5NNkba5mw8NDZDwviAvMZkQHlmaNk3bQQ32RR3pM
ySgniRnBDj7n4A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:29 2026 by rpki-client