Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: 3jGOanA3xV2IlnHR1ujz3dspqq8BwfB7jpiRQ2HjItM=
Subject key identifier: D0:DC:20:BF:6B:F7:7D:C4:BF:30:A3:18:AD:B7:8E:F6:2B:35:CD:DE
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 01A0CF6D2B60955C09BA7D785B844A1C2FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 0520
Signing time: Wed 23 Sep 2026 18:00:33 +0000
Manifest this update: Wed 23 Sep 2026 18:00:33 +0000
Manifest next update: Thu 24 Sep 2026 18:00:33 +0000
Files and hashes: 1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: hlAPd+sz3awQhHCmrAXrMMr+T5bBd2a48Ml7yBB3cTU=)
2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:2b:60:95:5c:09:ba:7d:78:5b:84:4a:1c:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Sep 23 18:00:33 2026 GMT
Not After : Sep 24 18:00:33 2026 GMT
Subject: CN=d0dc20bf6bf77dc4bf30a318adb78ef62b35cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:24:61:b3:0c:b2:74:cd:25:a5:2a:ff:38:
e4:85:c3:66:8b:91:1a:cc:90:54:90:70:58:a7:e3:
6e:0b:9c:39:72:40:19:50:e1:8f:4f:ad:86:50:c8:
67:df:db:88:f8:ca:02:6d:4e:5e:e9:8e:13:f7:c5:
97:49:17:49:43:72:39:f2:fc:ca:33:bf:1c:a6:92:
8c:8b:47:15:94:80:d3:4f:68:cb:b8:ce:be:7c:b3:
6b:30:f0:af:3f:89:21:d3:09:34:0a:d7:c0:ce:0e:
db:8b:5c:92:f9:8c:c5:61:02:65:81:97:d5:7f:cb:
0e:db:be:5e:dc:e5:36:7e:91:41:60:b5:da:1d:66:
6f:d2:c2:29:b7:e2:a1:4b:16:50:18:dc:63:c5:f2:
fc:ee:9d:28:15:1e:de:44:a8:bd:d6:97:6c:9d:a8:
87:29:8d:39:b1:39:ac:6f:f9:0b:c5:e2:ec:0e:45:
76:0a:e2:00:7b:ca:51:9a:da:2b:27:34:68:d0:ea:
91:b3:93:17:13:76:9a:1e:d5:b4:c5:72:27:53:a6:
08:c9:39:56:44:c3:70:69:e7:f9:b5:64:43:33:b0:
76:28:11:d7:84:12:3c:4a:fb:54:cb:bb:fd:6b:eb:
55:a4:46:a7:ce:28:d1:e0:72:57:ec:f5:25:65:ec:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:20:BF:6B:F7:7D:C4:BF:30:A3:18:AD:B7:8E:F6:2B:35:CD:DE
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:03:bd:66:b6:8e:77:b9:cc:b7:91:95:27:9a:df:3e:25:e9:
b9:f9:5c:6e:13:be:70:07:fa:24:85:66:eb:70:cf:40:43:18:
cf:97:e8:70:ad:01:d5:2c:5b:eb:29:da:23:09:fd:2e:b1:bf:
11:68:71:7e:2d:c5:5c:16:fe:62:23:5c:c2:1f:2e:b4:63:79:
90:d4:95:b8:0b:ff:8a:c9:ba:6d:8a:15:7d:e2:16:48:4f:4b:
fa:7d:6d:18:58:b9:33:c1:81:32:75:71:ea:b3:98:86:27:7b:
91:f6:40:ec:fc:3f:af:4c:ec:3d:1f:69:32:d8:c7:0e:c7:1b:
dc:da:9b:0f:65:17:51:4c:e5:78:a4:f4:ae:79:dc:98:ff:24:
e3:8a:df:a5:22:ca:9a:a7:3e:97:05:76:38:ea:26:0e:b4:ed:
88:9c:ef:cd:fe:39:67:b5:df:f4:8a:fc:e4:6f:3c:a3:33:20:
0c:69:6e:90:11:66:9c:70:bd:05:7a:a2:0c:f0:b8:f8:8e:73:
cf:fe:9f:2f:7f:f2:b3:a7:d2:e6:e0:a8:b6:4e:16:ee:27:61:
f8:17:55:9b:e4:3e:00:3d:6e:63:e0:fa:ea:69:58:9f:fd:1d:
e4:50:09:4d:96:1c:0b:60:c3:c3:d5:18:69:b1:cb:4e:a2:b5:
ec:5d:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:47 2026 by rpki-client