Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: 2rNnscbSRDvdKXIkT1lLixjU8F/lOQekG4zkfVAgfkw=
Subject key identifier: 98:FC:5C:B8:18:C8:82:54:A2:11:AB:3E:18:DC:F6:DD:B3:D9:BC:22
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 019CABD97338F9BBD6F08E210017172162F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0C3F
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: y/n37CqWqsBHA/f1FxaBIJXokff5a5PnnWKerfwqUHA=)
2: OSKscQD0G4SoAfxxYL6yDh6a54w.roa (hash: VlEznS11KOD/hclQl2r806Gq2L274/j4CryjPPg588I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:73:38:f9:bb:d6:f0:8e:21:00:17:17:21:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=98fc5cb818c88254a211ab3e18dcf6ddb3d9bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:42:f1:87:a2:22:1d:15:a4:ab:29:8c:7e:
de:24:ca:71:a1:d1:da:52:42:22:98:a2:64:2c:17:
d7:3f:93:20:68:34:0d:95:42:51:dd:1b:ec:bc:04:
ff:d0:4a:ef:3a:47:28:39:6b:e0:4d:33:29:a9:a4:
0e:90:8a:51:c0:37:f7:72:03:6a:0d:d4:6a:d8:c8:
f5:44:7b:22:34:7c:b9:8f:89:2a:cf:c7:47:1a:cc:
23:4d:1e:bf:2a:a9:ed:ed:c7:c0:e8:e2:8f:e1:cd:
a1:71:b0:2a:2a:a9:c5:8f:62:0b:46:e3:1f:ab:dc:
85:3a:be:f1:2a:59:c3:45:30:81:1b:e0:d1:0b:18:
46:5d:b3:db:03:d1:f3:21:c9:fa:4b:f7:f0:d4:2a:
07:b5:50:43:e5:d7:95:5f:73:02:4f:f9:2e:cc:a9:
d5:56:fb:eb:14:0d:5a:90:f4:4f:c4:9c:e4:17:56:
52:84:7a:a0:c5:cd:00:91:e1:78:5b:3f:7c:90:c5:
01:6a:b4:44:81:69:26:84:ff:f5:fa:d9:51:f4:50:
1f:3c:5f:2b:e2:a1:6e:df:7f:da:96:02:75:1d:e8:
cb:8e:63:bb:82:79:98:f1:c7:8d:8c:94:52:2b:7c:
61:46:01:91:f1:a5:7d:32:08:8d:32:71:0e:97:60:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:5C:B8:18:C8:82:54:A2:11:AB:3E:18:DC:F6:DD:B3:D9:BC:22
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:10:ca:ad:3c:5c:1e:70:35:65:a0:24:57:ed:fa:33:8b:cd:
99:a9:c8:6b:d6:15:a9:41:45:64:ca:41:54:45:e2:a0:4c:a8:
96:1c:e0:a5:1f:89:04:cf:42:e3:0e:ca:84:c8:01:5d:a6:ff:
33:d1:4c:e6:0d:a7:c7:ae:f2:b1:5b:83:3f:8c:1f:04:06:fa:
2f:e2:ab:16:7c:05:89:0b:db:9d:59:3e:1b:4f:f0:b7:8f:ea:
b1:28:a9:93:f9:3a:c3:47:e4:41:32:39:5b:a7:d3:21:05:ba:
f0:08:12:77:3f:2c:40:e6:38:fa:8d:c7:e9:88:3c:4d:d7:8a:
8a:86:06:bb:f4:81:6e:54:5e:52:c0:86:73:2f:c7:99:11:0e:
56:d7:be:a6:70:1f:9e:de:75:10:f4:4d:42:0f:63:ea:77:3c:
a9:35:3c:a9:7f:75:86:a3:76:42:78:2c:dd:39:49:29:09:a6:
66:ff:c8:33:dd:2a:c9:78:f2:68:57:64:b5:d8:7e:cb:6a:f6:
b1:a5:11:a7:83:03:f0:01:47:97:1e:7a:4a:b7:97:c6:ab:72:
7c:88:75:c2:ca:5b:1c:7d:ab:75:db:8f:23:49:39:53:c1:e9:
cb:7e:30:99:36:54:c1:ed:80:a8:0f:86:7e:35:5e:75:ed:42:
e5:b7:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:13 2026 by rpki-client