Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: rwb60Z3sqBjO5yjdZVdpphtAbz/cgQXkCrAWKngILZs=
Subject key identifier: 84:BB:3D:A8:B7:D2:8B:69:53:3E:1C:99:1B:51:82:EA:33:5D:6D:05
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019D39E57DBE3F95EDD47D7F19CCAEA6378C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: iKSQJhPIhZstYoqajtJ0yFtyfFr3gS4Y+fT/9VutFmM=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7d:be:3f:95:ed:d4:7d:7f:19:cc:ae:a6:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=84bb3da8b7d28b69533e1c991b5182ea335d6d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:50:32:0b:23:fa:db:f5:62:73:b6:c3:bf:
8b:f6:87:b6:36:10:d0:ee:0a:73:83:18:52:11:5a:
c1:85:0c:1f:fe:80:5f:d8:70:15:ea:7d:d5:69:63:
ad:35:70:41:6b:a1:b8:39:0f:06:38:f9:d3:4c:01:
8b:29:7f:05:0a:a1:2f:91:48:b6:0d:a6:3c:22:4a:
90:69:36:83:a3:67:4e:95:dc:b1:d5:7e:b6:8c:3d:
68:ca:95:85:ed:bc:0a:39:dc:2e:22:f7:de:56:eb:
ea:e1:94:dd:85:f5:b8:8a:71:12:bb:2b:e2:96:de:
ce:ae:b8:59:9b:90:38:02:8f:76:4b:18:fc:23:6b:
48:36:f8:71:55:b3:af:50:89:9f:aa:6b:64:b7:27:
0f:bf:5f:d4:57:32:36:8a:4c:fa:f5:38:8c:a4:3d:
5f:1b:4f:4f:8c:da:3c:07:d2:86:cb:b8:30:92:98:
23:8a:7a:73:ad:62:13:e1:6e:0b:15:23:2b:32:0d:
b0:a8:09:07:38:6e:d8:59:36:b1:fe:79:c3:4a:56:
01:9b:11:fa:19:a2:42:82:f8:aa:d5:15:6a:3d:dc:
54:b9:35:17:77:a2:40:de:b6:77:1c:d7:d1:5d:16:
45:bc:a7:9c:80:3f:65:1c:83:b6:79:14:56:dd:ad:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:3D:A8:B7:D2:8B:69:53:3E:1C:99:1B:51:82:EA:33:5D:6D:05
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:92:2b:96:b8:25:31:74:79:6d:83:55:46:ce:8f:7a:b3:57:
67:51:f2:9d:94:85:6b:7d:12:0f:a8:9d:b7:95:87:fe:4e:f7:
b9:4a:04:a7:7b:99:f0:40:46:1c:ab:a4:87:05:e0:48:17:ad:
d0:de:b6:e6:19:52:da:3a:59:6f:b7:8c:1d:89:2d:36:af:32:
59:3f:ad:e3:ef:c9:88:83:8c:63:d9:46:a6:50:03:7a:f1:49:
ba:e7:a7:e7:67:e3:0c:e9:c7:eb:39:d8:5a:4e:b4:25:e6:5a:
8c:98:3d:36:a5:2a:1c:99:98:14:10:be:d1:b2:fd:b3:0e:00:
2c:6e:72:ea:c6:12:8f:d2:3a:2c:56:86:76:ab:84:c9:a3:c8:
26:96:69:3f:a4:dc:b0:70:2b:30:28:75:87:d4:20:77:88:63:
b5:e6:0f:3c:6a:da:4e:48:a3:7c:bb:5c:e2:33:5d:69:43:1c:
ac:96:f0:c7:d7:44:a2:65:08:53:04:22:06:70:9a:8e:c8:fb:
bf:56:bf:3a:fb:94:c1:1d:a9:52:2c:94:d2:3a:68:9c:d6:fe:
c7:f8:7e:c8:59:e2:1a:02:07:b8:be:21:fc:3c:2b:48:5b:53:
c6:0f:69:f1:01:02:11:5d:f4:e9:45:87:d8:9a:c2:a1:cc:7f:
42:08:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:51 2026 by rpki-client