Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: c3MnbGwiD3/ZFuHTfrzK47y29ATC0HhcR3fUgjt+7Q0=
Subject key identifier: B0:F7:2A:1D:1E:E0:91:96:5C:1C:83:73:7B:BB:44:F6:55:18:68:91
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01A1637C8E60B5D2EB79C6F18D9FA3BF2D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 121B
Signing time: Thu 22 Oct 2026 12:01:09 +0000
Manifest this update: Thu 22 Oct 2026 12:01:09 +0000
Manifest next update: Fri 23 Oct 2026 12:01:09 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: +OouxlSIvAGK4X7l5Wko35NFaZdV3Xp5M21PQ0IwWto=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:7c:8e:60:b5:d2:eb:79:c6:f1:8d:9f:a3:bf:2d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Oct 22 12:01:09 2026 GMT
Not After : Oct 23 12:01:09 2026 GMT
Subject: CN=b0f72a1d1ee091965c1c83737bbb44f655186891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:07:77:53:07:a4:ea:27:d4:e8:ad:3a:3d:
17:55:7a:ce:59:34:30:c1:f9:f3:fe:90:a1:39:59:
e1:ec:f5:a8:d8:12:f3:cf:1a:97:c5:3d:11:d3:60:
d9:03:29:0f:a8:1d:40:b4:34:ed:1d:db:e2:21:1c:
70:d6:67:5a:88:0f:02:72:9d:e3:61:08:72:8d:2d:
6f:7f:86:7b:1e:d1:41:a2:29:43:d2:30:1c:3d:3c:
ce:16:53:2b:0a:d7:45:97:6e:d6:1b:83:5f:c2:af:
44:80:1f:dd:26:47:0c:38:d0:81:93:a7:92:4e:61:
40:41:a9:b3:c9:75:cb:5a:5e:ff:20:24:b0:20:37:
d0:5c:8a:d2:9b:01:3b:4f:02:05:87:63:66:f8:85:
55:db:09:5b:6b:61:5e:de:40:41:06:86:35:aa:1b:
fb:0d:8d:3a:f4:20:7a:61:a9:a9:de:e7:ae:53:a9:
e6:4b:3f:f6:9d:d2:e9:90:6e:19:d2:92:07:42:7f:
a2:d0:03:43:25:c4:0d:2f:b5:3b:a8:a8:bb:dc:6e:
34:23:e4:69:40:82:24:d6:57:cf:54:b9:5c:a4:ac:
70:40:b5:e8:7f:1a:c1:32:e1:d3:07:82:fa:04:0a:
e0:8a:c6:69:06:6f:3a:c8:4e:8b:69:97:ab:3f:df:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:2A:1D:1E:E0:91:96:5C:1C:83:73:7B:BB:44:F6:55:18:68:91
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:91:0a:aa:f1:40:5b:0b:12:6b:39:c8:8d:ef:4b:bb:61:
f7:4e:a8:83:21:17:0d:1c:06:90:9e:f5:d8:3d:7e:84:02:4a:
27:35:5a:c9:b7:c5:8e:29:bb:b8:c3:1a:dd:ce:b7:5b:d5:09:
21:0c:05:f9:3f:f6:e8:34:92:7c:21:a9:17:9f:b6:65:41:f9:
29:c3:11:39:6b:b9:db:c1:4b:08:10:0c:c7:ac:b7:1d:37:1b:
9b:da:3f:ac:52:34:4a:9f:de:cc:5b:8e:f6:e1:f4:73:05:20:
d7:5f:70:9b:88:1e:c8:0d:ac:6f:25:28:13:c6:c6:19:88:c1:
0f:51:1d:08:bc:85:4e:4c:fd:0d:f8:a6:55:ad:ad:91:23:eb:
d4:c0:ed:e9:34:60:65:50:af:e0:ab:dc:a4:c1:ab:2c:4f:9e:
1d:a6:69:32:00:c7:c8:1f:e7:a9:a4:5e:b4:17:77:4b:95:5a:
4c:7c:ef:0c:9b:fc:e1:51:84:d5:58:48:7d:c9:4b:c1:fd:5c:
09:d9:c1:e2:67:41:f2:37:58:36:00:e0:c6:4c:fb:41:f4:df:
c2:ed:df:29:84:5d:39:63:d9:d5:05:80:30:29:f4:91:6d:65:
96:18:d4:eb:3e:ea:76:d1:fc:65:43:67:22:a7:ff:20:a0:0b:
1a:48:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:58:19 2026 by rpki-client