Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 5xOnNFYRomSR5RljbWAYkcKrW267C/4JvGDHuM5lAu0=
Subject key identifier: C7:6B:DB:14:63:F6:3E:6B:FC:B0:26:CF:04:74:FE:28:CC:2E:3D:53
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 01A0CB9006A23DFB1159118ACEC781E33219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 00:00:08 +0000
Manifest this update: Wed 23 Sep 2026 00:00:08 +0000
Manifest next update: Thu 24 Sep 2026 00:00:08 +0000
Files and hashes: 1: 0bOGjfX8rCaFK1EFr_iCf9m9E2s.roa (hash: cuAwT7O+fNr0dZzRVxu32quxhPqTENg6uOwyovOP9iI=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: DgxlKKNImrETdg6Q+zlH5TwTMEzxSakPMY2308YUg3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:06:a2:3d:fb:11:59:11:8a:ce:c7:81:e3:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Sep 23 00:00:08 2026 GMT
Not After : Sep 24 00:00:08 2026 GMT
Subject: CN=c76bdb1463f63e6bfcb026cf0474fe28cc2e3d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:0c:f4:e6:78:cb:88:5d:4d:6b:2d:89:c2:
3e:c6:9f:64:c1:f4:84:70:7e:41:5f:36:a5:9d:24:
42:34:1d:18:49:b1:66:ed:cf:ff:5e:ad:ce:f1:c3:
0e:a4:1b:d3:ff:5e:67:b6:c6:58:df:fe:63:e7:fe:
fd:ff:87:2c:d2:cf:f9:19:6f:01:13:aa:b2:31:1a:
14:93:d5:cd:86:6c:12:ee:b3:6d:57:95:5e:8c:53:
ba:f6:51:00:1a:56:86:72:af:4e:08:f7:57:5b:5c:
67:e4:da:fe:41:ec:a6:c0:c1:bc:c7:f5:8c:b3:2f:
83:58:64:c9:33:18:df:86:29:74:ef:ce:11:8a:0e:
8a:82:20:bf:13:2f:fa:fe:48:34:ec:d5:c9:f2:a7:
a4:b8:01:d8:89:c8:8a:93:49:60:51:56:69:06:d4:
75:98:e1:df:fa:07:16:b2:c2:cb:6e:57:0b:71:65:
7f:56:0d:e8:9b:fa:6a:65:ca:dc:f6:38:a4:07:6c:
76:e9:c3:95:93:3a:15:11:ea:15:8d:89:06:05:68:
d5:87:ca:c9:a3:23:8c:84:aa:44:81:bb:5e:8e:14:
10:1e:12:01:db:27:58:80:c3:db:f3:e5:24:22:c4:
bc:49:45:96:88:67:3c:1d:91:77:66:0f:90:36:b8:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:DB:14:63:F6:3E:6B:FC:B0:26:CF:04:74:FE:28:CC:2E:3D:53
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:10:01:d8:1c:15:67:c3:d3:32:96:0e:bb:ac:c9:d5:ed:39:
c7:a5:81:69:81:56:73:55:ec:e2:16:04:14:82:9d:c7:82:19:
88:ed:b5:70:cc:1b:cd:b4:da:42:4b:6e:f3:37:3d:cd:a5:56:
52:1f:5b:dc:9a:e0:58:5b:29:a3:4a:5f:c7:a6:8d:14:2f:01:
bc:6e:75:1e:da:dc:b6:13:a1:ab:55:e5:1f:50:17:0e:c6:0e:
b8:8c:ed:c5:44:20:2a:a8:c8:8f:f2:c8:33:77:35:c7:d5:b8:
36:d1:12:c5:33:01:e9:8c:a1:9c:44:fa:e3:4a:67:70:64:5b:
7f:b4:6d:5a:9d:14:b7:60:26:ad:83:80:f8:ea:ea:82:07:47:
15:18:3e:08:de:88:9f:6e:9b:91:e8:e7:71:d3:04:86:2a:60:
d4:7e:4e:06:3f:42:26:75:ad:68:bc:27:33:cb:e7:50:17:a0:
3c:19:ab:2a:40:cd:a6:3a:af:f2:b7:e2:ba:78:61:ba:67:51:
7b:78:2a:66:b6:d9:94:e0:68:29:46:b7:eb:b7:00:68:8f:3a:
6f:f1:14:32:3c:c4:d5:43:6d:7b:67:92:4e:2a:a0:36:17:50:
a3:15:ad:7e:c2:20:b9:c1:37:32:89:86:b2:ce:72:01:e0:df:
8a:44:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:41:19 2026 by rpki-client