
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: xz3lpBvRP/iBlv+HTNjyLNDx6s/HvBZDOzHQN7cBBHg=
Subject key identifier: A3:22:BD:F6:41:3A:A0:31:DB:EE:6F:5A:2C:03:47:81:9B:A8:6D:E5
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019CAB344180584C5448F092B10D36C21A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: +FjLF7tOnke/UlG1T/G74RaV5vfXYEIy0xtH04EbELA=)
2: tpgO__8JIWwf0K5I2LYCZrVrikM.roa (hash: f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=)
3: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (hash: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:41:80:58:4c:54:48:f0:92:b1:0d:36:c2:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=a322bdf6413aa031dbee6f5a2c0347819ba86de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:69:a2:c9:9c:e4:72:5b:62:d5:49:d5:10:
18:2a:ff:22:6b:d0:d1:c1:29:38:53:28:4f:3b:0f:
c4:91:b3:18:99:0e:59:82:96:d6:63:30:9b:49:02:
e2:01:c2:44:17:8e:14:01:16:c2:e3:d8:df:68:de:
f5:54:a2:74:f7:51:d7:74:d2:0f:23:2e:48:a3:2a:
5a:b1:ba:4a:a8:5d:40:ba:49:5b:e3:a1:bb:d4:81:
6f:77:2a:61:c5:2a:41:97:1f:1d:54:9f:71:c8:75:
cf:7a:ea:2f:6f:58:87:56:8d:23:7b:fc:cc:fa:18:
3e:60:1a:c6:4b:4b:42:91:b9:ae:2b:dc:f2:3d:e4:
9d:7e:5f:e2:0d:3f:fa:f5:67:58:2e:8b:05:da:b0:
be:6b:dc:c5:01:47:ac:0c:14:75:f7:1e:1d:89:30:
6d:55:7a:09:b7:36:29:e1:0e:ab:a5:8d:72:d5:ff:
30:eb:59:db:18:3a:fb:69:f9:9e:b9:4c:0a:69:28:
52:95:e0:9a:f1:d9:94:20:b7:93:1b:2b:35:41:ae:
be:7c:d9:ae:c1:ec:89:f4:f2:bf:0b:89:ee:ac:3f:
7c:c9:0c:46:a3:8e:4c:90:7f:1d:8c:3d:32:6c:87:
b7:c1:fb:29:ef:8f:b2:9c:a7:61:ff:52:fe:9f:3a:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:BD:F6:41:3A:A0:31:DB:EE:6F:5A:2C:03:47:81:9B:A8:6D:E5
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:8b:15:1b:06:97:b9:e7:dd:2c:5c:16:dc:6b:95:a0:3b:
7d:52:fb:78:7a:b2:b2:73:47:13:21:6d:bc:a6:b9:95:11:b1:
c9:9b:99:45:47:10:20:3a:6f:7f:e6:10:85:a7:21:e2:b5:17:
e1:3f:2f:4a:cd:73:30:36:2b:63:07:81:1c:82:ce:21:0a:5e:
f8:2d:72:b4:69:f1:cd:2d:45:bb:f0:87:c1:04:5b:9c:87:82:
ce:1e:83:06:78:18:13:f2:a3:98:9b:96:f3:da:cd:61:51:3e:
d6:01:bd:3f:56:e6:8a:75:a8:3e:5e:6c:a7:b3:62:49:b2:85:
ba:e6:84:4b:bc:62:e6:74:fc:93:df:fd:15:bf:23:3e:40:55:
f8:38:ee:25:2d:4f:8c:a7:1b:c5:07:d9:78:26:3c:14:74:fa:
f7:ad:c9:54:d3:69:8c:b0:c5:de:4e:03:a3:dd:f5:c9:3c:ec:
28:b0:7f:1e:a2:cb:b6:4a:0d:3f:51:61:4a:36:7e:77:96:bf:
78:e6:d8:4c:e2:95:0c:24:29:37:38:99:bd:bd:03:92:e8:31:
94:fb:fd:20:fc:60:cd:e6:87:0b:09:40:6c:bf:87:d4:31:fa:
71:e6:8c:21:de:80:e1:5d:e9:78:9c:b1:f7:fc:41:b6:bb:be:
c2:09:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:34 2026 by rpki-client