Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: +wUtFeG0fpG2V9KgPlOxbQkS5ZKnfP7SJBoYF1lJxrk=
Subject key identifier: D1:5C:4B:98:32:08:A8:37:C2:16:FF:86:7A:5B:F3:16:FD:2C:94:8B
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019CEC38A22A472CD94C18BE3DAED053FBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0FCB
Signing time: Sat 14 Mar 2026 12:01:00 +0000
Manifest this update: Sat 14 Mar 2026 12:01:00 +0000
Manifest next update: Sun 15 Mar 2026 12:01:00 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: jRDwx8xxE/uYuBa6BugVN72v0Hamn1foMIBR+fk5I3o=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:a2:2a:47:2c:d9:4c:18:be:3d:ae:d0:53:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Mar 14 12:01:00 2026 GMT
Not After : Mar 15 12:01:00 2026 GMT
Subject: CN=d15c4b983208a837c216ff867a5bf316fd2c948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:8b:f5:47:6f:3b:0e:82:49:4f:ef:14:39:
12:67:5b:2d:66:ec:25:83:2a:aa:d1:b7:09:ab:d8:
e5:62:aa:4c:0e:69:a5:50:06:00:8c:0a:a0:44:79:
2d:19:28:5c:c6:96:23:d9:0f:c8:87:3b:c5:b2:29:
10:92:e8:f9:71:87:e9:1c:67:6f:aa:79:f6:49:45:
53:21:b9:85:94:ff:9c:fc:6c:7a:4c:fa:2f:8b:cf:
e1:bd:7b:fa:31:5f:5c:94:b5:36:80:d1:0c:90:01:
e6:e9:47:6d:da:a6:86:56:f0:e9:48:a2:f8:f0:d0:
d6:4f:5c:4f:8c:a7:a6:2c:6b:ec:83:03:35:a0:25:
fa:ef:45:87:f7:5b:8e:f7:bf:69:2a:03:79:d7:e0:
8c:3b:f6:32:c5:e4:af:a4:89:4b:78:01:6f:bc:dc:
d8:34:ec:12:5f:f2:4a:4b:6b:56:c9:6c:6e:67:86:
2e:65:b0:8e:67:d2:91:ad:01:ac:c5:52:95:46:1f:
58:4b:ae:fe:88:0d:5c:39:c6:a9:a5:9c:f6:01:45:
36:27:4d:b9:1d:5b:3e:84:a4:03:80:6d:89:47:e7:
58:2b:0d:1e:53:de:1c:2a:26:af:8d:6a:dd:49:e5:
90:f9:d5:4d:36:73:71:30:70:c7:af:22:1e:78:3d:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:4B:98:32:08:A8:37:C2:16:FF:86:7A:5B:F3:16:FD:2C:94:8B
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:22:cb:2f:d0:20:5c:87:c2:ca:75:e7:15:ef:b4:86:9c:9c:
3a:d6:8d:db:42:ab:57:37:fb:51:5e:de:13:fa:53:c9:bf:bf:
02:4e:cd:86:14:ba:77:12:e5:c6:ee:75:eb:46:41:39:21:ae:
9e:8b:c7:21:bb:c4:16:87:16:91:c8:5c:ce:21:7e:90:60:ba:
cc:2e:76:5c:ff:1b:f8:f4:19:01:9d:f3:1e:7c:48:1b:c1:13:
49:17:ba:3f:a4:91:6f:30:ea:86:bd:9d:53:8e:14:49:98:d8:
84:1d:c6:4a:a0:af:ea:96:6c:50:04:40:bf:56:30:b5:ef:5b:
5a:5d:71:55:1f:00:29:72:19:a2:e5:6e:2b:c9:dd:04:75:55:
66:c0:9f:ae:45:1a:5f:a6:d9:35:02:a6:d4:54:fb:0c:f2:8a:
4e:87:84:01:c0:6c:49:3e:c1:8b:80:18:f9:c5:b9:5a:90:b9:
7f:23:eb:10:36:6d:61:58:ae:7a:ab:8e:9c:c4:71:94:35:28:
14:48:9c:91:9c:a7:61:13:97:64:cd:5a:f5:3b:b2:07:b9:89:
6a:d9:bd:cb:a8:4a:0d:91:12:9f:cd:0e:5d:1d:29:6d:15:37:
f6:62:67:ec:71:ca:77:34:df:9a:7d:8f:7b:0e:07:1c:0a:9f:
c8:33:8a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsOKIqRyzZTBi+Pa7QU/vbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjYwMzE0MTIwMTAwWhcNMjYwMzE1MTIwMTAwWjAzMTEwLwYDVQQD
EyhkMTVjNGI5ODMyMDhhODM3YzIxNmZmODY3YTViZjMxNmZkMmM5NDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ+L9UdvOw6CSU/vFDkSZ1stZuwl
gyqq0bcJq9jlYqpMDmmlUAYAjAqgRHktGShcxpYj2Q/IhzvFsikQkuj5cYfpHGdv
qnn2SUVTIbmFlP+c/Gx6TPovi8/hvXv6MV9clLU2gNEMkAHm6Udt2qaGVvDpSKL4
8NDWT1xPjKemLGvsgwM1oCX670WH91uO979pKgN51+CMO/YyxeSvpIlLeAFvvNzY
NOwSX/JKS2tWyWxuZ4YuZbCOZ9KRrQGsxVKVRh9YS67+iA1cOcappZz2AUU2J025
HVs+hKQDgG2JR+dYKw0eU94cKiavjWrdSeWQ+dVNNnNxMHDHryIeeD2Y1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFcS5gyCKg3whb/hnpb8xb9LJSLMB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiLLL9Ag
XIfCynXnFe+0hpycOtaN20KrVzf7UV7eE/pTyb+/Ak7NhhS6dxLlxu5160ZBOSGu
novHIbvEFocWkchcziF+kGC6zC52XP8b+PQZAZ3zHnxIG8ETSRe6P6SRbzDqhr2d
U44USZjYhB3GSqCv6pZsUARAv1Ywte9bWl1xVR8AKXIZouVuK8ndBHVVZsCfrkUa
X6bZNQKm1FT7DPKKToeEAcBsST7Bi4AY+cW5WpC5fyPrEDZtYViuequOnMRxlDUo
FEickZynYROXZM1a9TuyB7mJatm9y6hKDZESn80OXR0pbRU39mJn7HHKdzTfmn2P
ew4HHAqfyDOKbQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:15:15 2026 by rpki-client