Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: TwraCxqeTq/GLDpcwFeZbMtM9hiCJlZRdDbPCFdtk2k=
Subject key identifier: 8B:55:D9:98:84:2B:57:FD:35:B6:C5:FD:F0:75:3F:7E:64:57:AA:28
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 019D98F48D6283AB81F8383BF31A53E75B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 0BE2
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: 4Xc+XGvObqEHRKbusVJEcAwfBBcmWSIYbUacwFyijTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8d:62:83:ab:81:f8:38:3b:f3:1a:53:e7:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=8b55d998842b57fd35b6c5fdf0753f7e6457aa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:fe:aa:fa:b7:74:37:c4:bf:a3:f3:10:76:
82:d1:1d:88:af:34:df:c7:a6:ba:15:0f:5b:27:ce:
ea:0c:1b:e3:87:5f:a2:29:47:af:e8:fd:ad:49:f4:
cc:a2:46:a8:ab:74:ad:c9:ad:29:2a:df:10:cf:74:
db:51:eb:9a:24:56:9c:76:ca:b6:ee:01:c9:eb:7f:
d2:44:ad:ae:99:a6:c1:fa:1c:c0:f0:2d:2a:96:c3:
3c:65:4a:e7:b6:38:5d:89:ce:22:1c:45:53:80:09:
7c:cd:54:b0:0a:ed:eb:f6:b1:e3:db:d8:e4:b9:8d:
f8:13:0b:84:49:21:4c:2f:84:6d:56:ce:9e:fa:f5:
0b:22:2d:df:3f:69:4b:d0:8d:97:db:c0:a9:ba:18:
da:ef:b6:eb:49:6f:38:4d:bb:19:99:5b:fc:c6:04:
33:d5:3b:1a:3e:ba:5a:2e:18:a9:0a:0d:b2:be:46:
b9:1e:92:fa:8b:ff:bd:d9:fb:6a:68:94:5b:b7:54:
ac:63:7e:80:bb:b9:be:5e:0e:4f:cc:6f:cb:b3:f1:
15:5f:b6:ea:bc:22:b6:c8:5a:3f:95:0b:37:d8:c5:
3f:26:5d:95:93:9b:43:2a:7b:49:f2:87:48:5c:7e:
39:fe:d0:98:22:90:36:ee:b4:e0:63:6c:30:c4:c8:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:D9:98:84:2B:57:FD:35:B6:C5:FD:F0:75:3F:7E:64:57:AA:28
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:b7:c4:de:8a:3e:b7:fc:7c:c2:8e:90:dc:a9:da:6f:e1:
fa:50:52:40:f1:95:41:e7:8a:fe:36:0c:54:08:9c:ef:f4:53:
79:99:cf:9a:cf:a2:87:71:9a:cb:b7:5f:43:5a:9b:0d:b8:46:
55:ac:76:7c:ff:b6:bc:c1:91:fe:01:d0:2a:48:3d:77:43:69:
77:d1:3f:28:b6:03:80:9c:29:55:4b:9b:a9:8d:12:a6:45:20:
67:39:ca:e4:d9:9f:e9:b2:a5:66:e8:82:6f:3d:f4:76:c7:0f:
91:d9:82:01:8d:0c:fc:6b:d5:7d:37:64:28:07:60:59:cd:67:
bd:88:02:6d:75:0f:8e:fb:2a:1a:98:f8:d7:90:cb:de:9f:d9:
01:26:26:e9:71:c5:d7:e5:bd:ed:26:20:48:7b:b8:d5:64:e1:
9e:bb:6e:8b:c8:7c:b9:bb:8b:53:18:35:0a:15:3e:0a:78:5b:
7f:d9:db:f0:6c:ac:0e:41:a1:c7:0e:2b:4e:01:bd:ee:e3:ed:
2b:e1:46:9f:2c:5d:98:f6:c8:62:70:fd:8e:88:62:28:61:4d:
c4:f8:51:45:b4:25:e2:85:e4:42:ea:e4:6c:5a:16:0d:73:21:
2d:cd:c7:4c:cf:6b:65:79:0f:9b:5b:d3:10:2e:2b:e3:0a:92:
59:38:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:25 2026 by rpki-client