Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: zsTQGk4WmmF1KlPYjw2nfd6x2NtqHWGsSrHkoelAzMc=
Subject key identifier: A3:75:43:E8:D9:01:CE:B5:AA:D0:62:7B:A9:0E:C7:33:1C:83:3B:D7
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01A16D2493614F495EC1EF42DB7C68D396B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 1220
Signing time: Sat 24 Oct 2026 09:01:15 +0000
Manifest this update: Sat 24 Oct 2026 09:01:15 +0000
Manifest next update: Sun 25 Oct 2026 09:01:15 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: Z6I/cA+zcH3JdSGqzTsvoYDKko6qDUWW3sWR+fi9JeE=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:24:93:61:4f:49:5e:c1:ef:42:db:7c:68:d3:96:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Oct 24 09:01:15 2026 GMT
Not After : Oct 25 09:01:15 2026 GMT
Subject: CN=a37543e8d901ceb5aad0627ba90ec7331c833bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:06:7e:77:34:f7:bf:1a:ac:51:ad:f2:31:
d7:00:0c:3d:3f:19:9d:34:7b:f9:c7:01:8e:ac:01:
46:4d:c1:37:e8:53:b5:d6:1e:7f:cd:8f:2a:29:4f:
5a:9b:58:a2:7f:60:75:af:66:67:be:1a:16:2d:ec:
a3:2e:9d:6b:9c:45:c7:a8:5b:0e:f3:15:34:e4:8b:
bc:60:df:ee:5c:d0:67:3a:ba:c7:dd:39:08:97:60:
fe:7d:61:4a:b3:ed:ee:b6:49:e3:b8:5a:a9:c1:d1:
02:c0:85:c7:33:4b:9f:cb:96:a7:2c:8c:be:7a:e1:
23:86:cc:d5:34:29:8f:56:94:21:1b:48:99:55:05:
92:70:8e:94:b1:77:ec:b4:e1:97:6d:4b:d1:10:d6:
72:34:2b:59:f1:a5:da:7e:52:30:b5:87:7e:8b:72:
49:ab:72:25:df:e0:ac:7a:f4:20:e6:af:51:52:cb:
83:6e:53:4e:6b:ea:14:57:11:37:a5:8a:85:e3:b9:
62:55:bf:7c:76:7b:29:12:a1:14:15:70:8f:58:19:
df:9a:9a:9c:b7:a6:2f:db:3e:b8:5d:dd:14:86:c9:
40:b1:5e:a6:54:43:ea:fe:19:a2:6e:0e:ee:7c:e8:
eb:09:a8:de:b6:9e:00:b9:af:fe:49:12:5f:45:7c:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:75:43:E8:D9:01:CE:B5:AA:D0:62:7B:A9:0E:C7:33:1C:83:3B:D7
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:44:f5:5b:f3:af:7c:e8:d2:ab:db:79:2c:75:ba:4b:5c:99:
4f:56:88:22:0e:59:4b:a1:10:24:e3:b8:7a:2c:7f:20:5a:95:
dc:9d:c3:7f:fb:6f:34:19:0b:1d:ce:66:25:0e:dc:2c:d7:ff:
98:33:d9:4c:b0:c3:81:7f:8f:b8:28:b3:11:f8:ca:2d:63:d5:
f0:c1:4f:70:7d:a4:bf:9a:2e:56:56:c1:4d:e6:b7:76:53:28:
93:8b:d4:81:bd:5e:86:60:b6:5a:6e:81:e0:21:1a:4e:9d:17:
ce:93:e2:30:66:0b:82:e3:3b:e9:16:2b:09:e8:fa:1e:89:1c:
dc:e5:fa:cb:bb:2e:f0:12:cf:63:f5:22:4e:e2:fa:ae:e6:88:
a6:23:f0:fe:b7:3d:c8:3b:f7:94:37:21:77:75:11:ad:18:34:
7c:cf:eb:02:cd:f6:36:04:10:4f:0a:27:32:ad:e7:3d:f3:32:
29:99:d6:66:d3:c7:26:19:4d:61:3f:1d:54:22:b2:09:a0:73:
8a:73:e5:73:df:51:a3:b4:42:80:33:f1:ac:e5:f5:50:50:ab:
54:28:9e:fc:d8:a3:b4:7f:35:12:83:4c:ff:39:c6:6e:75:58:
ac:ab:5d:f5:e3:19:3d:b1:eb:a5:72:63:56:43:40:7d:8a:b5:
b3:15:da:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFtJJNhT0lewe9C23xo05axMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjYxMDI0MDkwMTE1WhcNMjYxMDI1MDkwMTE1WjAzMTEwLwYDVQQD
EyhhMzc1NDNlOGQ5MDFjZWI1YWFkMDYyN2JhOTBlYzczMzFjODMzYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4UGfnc0978arFGt8jHXAAw9Pxmd
NHv5xwGOrAFGTcE36FO11h5/zY8qKU9am1iif2B1r2ZnvhoWLeyjLp1rnEXHqFsO
8xU05Iu8YN/uXNBnOrrH3TkIl2D+fWFKs+3utknjuFqpwdECwIXHM0ufy5anLIy+
euEjhszVNCmPVpQhG0iZVQWScI6UsXfstOGXbUvRENZyNCtZ8aXaflIwtYd+i3JJ
q3Il3+CsevQg5q9RUsuDblNOa+oUVxE3pYqF47liVb98dnspEqEUFXCPWBnfmpqc
t6Yv2z64Xd0UhslAsV6mVEPq/hmibg7ufOjrCajetp4Aua/+SRJfRXxK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN1Q+jZAc61qtBie6kOxzMcgzvXMB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0T1W/Ov
fOjSq9t5LHW6S1yZT1aIIg5ZS6EQJOO4eix/IFqV3J3Df/tvNBkLHc5mJQ7cLNf/
mDPZTLDDgX+PuCizEfjKLWPV8MFPcH2kv5ouVlbBTea3dlMok4vUgb1ehmC2Wm6B
4CEaTp0XzpPiMGYLguM76RYrCej6Hokc3OX6y7su8BLPY/UiTuL6ruaIpiPw/rc9
yDv3lDchd3URrRg0fM/rAs32NgQQTwonMq3nPfMyKZnWZtPHJhlNYT8dVCKyCaBz
inPlc99Ro7RCgDPxrOX1UFCrVCie/NijtH81EoNM/znGbnVYrKtd9eMZPbHrpXJj
VkNAfYq1sxXaHg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 14:02:36 2026 by rpki-client