Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: tiklTO7+9i6Ah48Vho4q1XP7wI8x9/ltb7+d+7uwWmo=
Subject key identifier: 67:BF:4E:CC:04:AF:B6:9A:52:C9:5A:95:F1:2D:51:A9:CE:45:36:27
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 019CAAFD5AAA1DB2C7ACCC0DFC94266D6A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 13E2
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: gZtSldGgR9vJzTI6JAUAo8thYlLmhoOd1jf7GHT3WUU=)
2: JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa (hash: rIUEPyZH+tezouTeaObRUTshflwC+zsZEomWJIodOoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5a:aa:1d:b2:c7:ac:cc:0d:fc:94:26:6d:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=67bf4ecc04afb69a52c95a95f12d51a9ce453627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:ed:9d:2e:29:46:33:44:35:a8:d1:f9:ee:
0c:21:fb:ca:d4:0b:17:01:60:d4:29:38:27:58:db:
d5:9e:67:8f:17:3e:fa:99:d5:83:65:f8:fd:4d:15:
61:f3:f3:9a:50:52:9c:ba:1c:2f:17:af:ee:7a:f9:
f2:cb:6b:fe:d3:fb:5f:76:b7:3c:74:af:59:26:82:
7e:6f:4b:27:45:3a:3f:d5:e4:2e:cf:0c:3a:5c:0f:
79:fa:c4:2e:e6:68:36:b7:8e:28:fa:af:9c:ee:da:
cd:97:41:30:b5:85:d3:1e:d7:2f:3e:3c:bf:81:70:
d1:a8:bb:16:08:c1:d1:bf:17:90:a1:8d:06:a0:de:
0a:b1:95:10:8a:4b:63:97:1f:60:8f:ab:74:3b:90:
a6:70:d2:29:07:10:5c:08:7a:92:b9:c3:d5:43:14:
9a:b0:c4:ac:99:a0:b8:4f:84:7b:50:13:94:b5:7b:
88:18:2e:76:c5:d8:38:c4:ad:ce:7f:19:f8:cb:f0:
38:6a:3d:68:e5:de:be:c8:cb:d8:b7:3e:2b:48:b7:
ac:8d:29:07:85:cd:b9:d9:ad:9f:fb:2d:93:c0:c5:
59:6b:d7:e0:77:7c:b7:62:8b:33:ef:2e:38:0b:db:
dc:dc:fd:46:aa:3c:7e:56:f4:08:8b:77:2a:c9:2b:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:4E:CC:04:AF:B6:9A:52:C9:5A:95:F1:2D:51:A9:CE:45:36:27
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:07:e8:6b:11:f7:59:af:a0:51:6b:56:f4:11:94:33:29:
56:bc:bc:a7:9f:ab:df:60:e5:c2:66:5b:8b:f8:ed:eb:25:f0:
63:7b:50:af:01:7d:c5:ea:4a:c3:34:58:18:45:4f:bd:35:a9:
37:ac:b3:01:ba:51:03:02:e0:44:17:47:69:e2:ad:5c:57:46:
7f:d5:9e:bd:ef:f8:05:97:35:a5:39:76:7e:ad:56:01:a4:2d:
f9:29:23:86:31:3b:2e:b1:c5:f6:11:f7:23:cd:02:d2:16:44:
dc:82:7d:d1:52:12:20:3f:07:eb:c5:7b:6c:96:a3:a7:c2:6e:
01:e9:94:0b:34:fd:e0:f7:16:8c:c5:a8:76:35:51:34:c5:50:
50:79:bf:90:f9:2b:b7:98:78:14:89:97:5d:cb:44:6f:46:50:
f5:4a:5e:fb:8f:06:4d:23:4b:71:bc:0a:1b:ee:79:d2:9b:9d:
06:d2:ea:86:3f:7b:25:19:48:21:34:9a:82:88:11:4b:20:ad:
46:79:ef:18:f3:57:97:60:24:29:c1:b5:1f:b8:77:81:2b:23:
99:68:09:20:e2:1c:86:96:4e:4c:65:3f:3a:48:a7:be:f0:97:
e7:b6:4c:69:fc:1b:2d:7f:7d:bc:3a:78:2f:7a:02:f9:34:17:
1a:43:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:51 2026 by rpki-client