Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: zhUXaeF+8NaKFUuPxGqvS9wjSio1VkPoLJE6ril4K9o=
Subject key identifier: A0:E0:94:54:5F:CC:03:FF:60:64:96:FA:C2:88:F4:60:2E:D4:46:5B
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 019D9B5043C50F7F75E06CEC2ADD6081D986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0CBB
Signing time: Fri 17 Apr 2026 12:00:21 +0000
Manifest this update: Fri 17 Apr 2026 12:00:21 +0000
Manifest next update: Sat 18 Apr 2026 12:00:21 +0000
Files and hashes: 1: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: GjQsLhRqHEu3wvfQ6o+GRO7mwUhuIOXJXezbSnI9S1c=)
2: OSKscQD0G4SoAfxxYL6yDh6a54w.roa (hash: VlEznS11KOD/hclQl2r806Gq2L274/j4CryjPPg588I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:43:c5:0f:7f:75:e0:6c:ec:2a:dd:60:81:d9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Apr 17 12:00:21 2026 GMT
Not After : Apr 18 12:00:21 2026 GMT
Subject: CN=a0e094545fcc03ff606496fac288f4602ed4465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:31:83:42:f6:84:6e:8f:73:b7:74:98:65:
eb:66:d5:3a:93:6e:08:7b:9f:20:80:9e:44:f9:54:
96:d7:b0:91:a1:5f:19:ab:53:7a:18:d4:0b:a7:e4:
af:2f:9c:2a:fe:cd:1a:fb:e3:41:0f:98:64:fe:be:
83:1a:ab:53:b3:1c:61:f3:8a:19:0e:f0:bd:bc:d6:
2e:3d:01:63:06:fc:eb:ee:60:2a:2f:02:9a:d4:c8:
be:77:db:0a:f7:8e:58:24:70:b9:a1:13:c7:23:80:
50:09:fc:7c:3e:5b:82:fe:d7:f3:38:41:2a:93:e0:
3b:6e:e5:83:df:c5:fe:ed:64:62:8a:49:2c:82:d4:
f5:80:4c:00:f3:5a:78:e4:a1:eb:82:33:83:7e:e2:
e9:19:25:1b:29:97:72:c7:61:03:f7:0f:39:43:ea:
9b:68:c1:9d:36:79:c3:04:23:48:2e:91:eb:6f:c2:
6a:86:d6:67:e7:f7:35:cc:50:6d:42:cc:1c:b6:f8:
8a:f8:5a:ea:a2:8c:a8:aa:a9:4c:50:04:dc:5a:3e:
f7:9c:8e:01:10:9d:ca:b0:94:20:79:fc:08:ad:2d:
89:c8:27:96:92:0d:82:1a:6a:1e:a1:61:17:23:b7:
74:f0:e2:8f:ff:40:a7:5f:9d:02:2e:99:54:4a:c6:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:94:54:5F:CC:03:FF:60:64:96:FA:C2:88:F4:60:2E:D4:46:5B
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:34:f8:26:81:0b:10:29:1b:4f:f3:ce:8b:e3:0c:12:8d:
02:72:90:8c:ed:de:4c:43:f4:95:97:84:63:87:d5:6b:eb:57:
49:4e:bf:3b:02:a4:8c:30:46:49:95:6c:45:fa:4f:3f:1d:85:
c9:e8:6d:4e:2a:49:8e:65:7d:c1:f5:7b:4d:0d:cc:c1:58:14:
33:70:26:a2:a1:ee:7d:e5:d3:d2:bf:99:62:f8:38:dc:7b:f4:
05:b3:1a:3c:b2:a5:c6:66:9e:7e:f0:58:8e:2d:b2:3b:ce:08:
83:6d:3d:d8:94:0f:28:9d:d1:57:43:4b:2c:e9:a6:41:7b:dd:
91:e5:aa:d6:94:92:c3:29:6d:ad:35:73:ed:32:c5:20:98:f3:
50:39:c2:6f:1a:9d:1c:05:c7:45:eb:1e:02:31:3e:f2:23:6f:
80:ec:4b:d1:80:bd:1d:83:9a:e9:38:dd:f8:fb:ad:19:7b:68:
0a:2e:24:19:c1:73:fd:0d:fd:e9:b7:a5:d9:e8:e1:8a:80:a9:
e7:03:9d:0d:8e:c9:cc:80:f2:c0:43:26:f9:f5:89:4b:ed:26:
de:30:96:35:dc:19:b9:0a:c2:91:22:e0:70:f9:19:fd:49:1a:
8c:b5:a3:6d:e4:b3:ef:68:1a:c0:1f:26:53:ba:d8:c6:41:96:
4c:38:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:21 2026 by rpki-client