Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
File: FClngBLZAqCTDjRcEuCVNWoC4A0.mft (raw, json)
Hash identifier: 4qW5TKMkP/wvziIcPMm9qrkDZ6fDfk82S8xZFBO08/k=
Subject key identifier: 8C:D0:8E:05:97:91:3E:68:B0:11:3B:87:4C:63:BD:32:AC:59:E5:5A
Authority key identifier: 14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D
Certificate issuer: /CN=1429678012d902a0930e345c12e095356a02e00d
Certificate serial: 01A0FAFCF49A489D5D417DD2AC33F3384D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
Manifest number: 0149
Signing time: Fri 02 Oct 2026 05:01:16 +0000
Manifest this update: Fri 02 Oct 2026 05:01:16 +0000
Manifest next update: Sat 03 Oct 2026 05:01:16 +0000
Files and hashes: 1: B6Z0xcok0iiRihknudVJheKo3Os.asa (hash: bIM6WYFOdNzyb9nsyhBNXD2CIFhvQMqptK0lGeaX93M=)
2: FClngBLZAqCTDjRcEuCVNWoC4A0.crl (hash: YgxavBYK3O5JDgLmaAl/RXqhpGHCjjHY21n5hwLz+xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fc:f4:9a:48:9d:5d:41:7d:d2:ac:33:f3:38:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1429678012d902a0930e345c12e095356a02e00d
Validity
Not Before: Oct 2 05:01:16 2026 GMT
Not After : Oct 3 05:01:16 2026 GMT
Subject: CN=8cd08e0597913e68b0113b874c63bd32ac59e55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:ae:5c:46:28:9c:9a:2b:e0:68:97:d4:e0:
72:58:ad:46:2c:f2:68:2e:e8:47:9f:8a:c7:22:31:
6e:43:02:fa:d9:bc:89:85:fb:33:dc:71:fb:ea:3b:
ed:a6:22:e7:71:e2:63:7a:32:d2:9d:1d:83:db:f2:
d0:cd:51:68:8b:d6:66:72:dd:76:52:9b:76:58:87:
29:23:b7:35:6b:5d:ee:04:2a:af:6a:70:e9:cc:5d:
66:56:96:e0:c1:8e:fa:d8:8f:0e:87:db:37:ee:db:
6a:a7:cb:62:e2:11:aa:50:4a:c1:99:a6:4d:c9:a3:
6d:52:44:0b:3d:3d:0d:74:60:91:99:6d:ba:ea:61:
a1:68:52:95:4b:2f:07:cd:1f:7e:18:81:00:2b:40:
4b:3c:a9:b0:c9:e7:8f:d7:26:36:bf:41:6f:c9:65:
d7:d2:8a:41:db:8f:2d:86:cf:7c:16:44:53:05:ad:
8e:d5:ff:36:e6:ac:bf:e2:9c:31:51:96:b8:dc:8e:
2f:f2:fe:bd:d4:72:79:ec:62:5e:fa:2d:a1:57:c0:
32:03:19:d8:12:c5:17:a4:c3:0d:45:82:f6:f1:ec:
6b:d5:64:b6:68:81:5f:a5:53:bb:af:32:a4:12:52:
d1:bb:62:8f:f8:a1:09:03:50:86:73:0e:4e:2f:00:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:8E:05:97:91:3E:68:B0:11:3B:87:4C:63:BD:32:AC:59:E5:5A
X509v3 Authority Key Identifier:
keyid:14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:71:33:a2:93:a1:44:5b:db:be:f8:f8:86:a8:c0:e8:16:
06:d9:73:f6:2f:14:2d:38:f9:35:b9:6a:2c:84:51:6d:a3:64:
95:31:69:4f:6a:d0:4c:73:3f:e3:dd:97:16:28:fb:bb:3e:36:
56:c5:52:c6:d8:43:83:c2:c4:b6:2b:93:54:e6:5a:bd:8e:24:
35:8c:aa:25:ac:11:43:42:27:35:c1:a3:d6:da:06:54:cc:1a:
0a:42:05:d7:16:28:5f:cc:ff:98:4d:5f:e1:7f:dc:c4:a2:a9:
89:1b:06:9f:79:6d:cf:cf:d1:53:df:0c:0a:4f:7e:13:c0:15:
17:0f:71:8a:5e:d5:51:e1:fd:a7:f3:14:1c:8e:80:2d:a1:fa:
6b:f9:94:4c:59:0c:9d:e7:c1:06:48:fa:d6:aa:9d:19:00:bf:
bf:54:98:e5:a7:f1:48:23:ae:f7:f0:23:7b:a3:63:3b:6c:d2:
51:66:45:e8:c8:ef:9e:c3:57:79:59:7c:3f:7e:3e:ce:51:aa:
0e:40:55:dc:69:12:2d:ac:bc:81:d0:c8:ec:08:cc:17:b7:47:
bb:d8:b3:5a:05:ea:8f:f7:55:91:b8:bb:bc:77:f1:95:d0:ba:
d7:82:04:aa:b1:c0:fa:33:b8:31:32:96:ad:bf:2c:99:26:89:
3b:12:9e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6/PSaSJ1dQX3SrDPzOE2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0Mjk2NzgwMTJkOTAyYTA5MzBlMzQ1YzEyZTA5NTM1NmEw
MmUwMGQwHhcNMjYxMDAyMDUwMTE2WhcNMjYxMDAzMDUwMTE2WjAzMTEwLwYDVQQD
Eyg4Y2QwOGUwNTk3OTEzZTY4YjAxMTNiODc0YzYzYmQzMmFjNTllNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPquXEYonJor4GiX1OByWK1GLPJo
LuhHn4rHIjFuQwL62byJhfsz3HH76jvtpiLnceJjejLSnR2D2/LQzVFoi9Zmct12
Upt2WIcpI7c1a13uBCqvanDpzF1mVpbgwY762I8Oh9s37ttqp8ti4hGqUErBmaZN
yaNtUkQLPT0NdGCRmW266mGhaFKVSy8HzR9+GIEAK0BLPKmwyeeP1yY2v0FvyWXX
0opB248ths98FkRTBa2O1f825qy/4pwxUZa43I4v8v691HJ57GJe+i2hV8AyAxnY
EsUXpMMNRYL28exr1WS2aIFfpVO7rzKkElLRu2KP+KEJA1CGcw5OLwCjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzQjgWXkT5osBE7h0xjvTKsWeVaMB8GA1UdIwQY
MBaAFBQpZ4AS2QKgkw40XBLglTVqAuANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JmNTMtOGMwZC00YmYyLWFlOTgt
NzAyZTQwMTYwMjc5LzEvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yN2JmNTMtOGMwZC00YmYyLWFlOTgtNzAyZTQwMTYwMjc5
LzEvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/lxM6KT
oURb2774+IaowOgWBtlz9i8ULTj5NblqLIRRbaNklTFpT2rQTHM/492XFij7uz42
VsVSxthDg8LEtiuTVOZavY4kNYyqJawRQ0InNcGj1toGVMwaCkIF1xYoX8z/mE1f
4X/cxKKpiRsGn3ltz8/RU98MCk9+E8AVFw9xil7VUeH9p/MUHI6ALaH6a/mUTFkM
nefBBkj61qqdGQC/v1SY5afxSCOu9/Aje6NjO2zSUWZF6MjvnsNXeVl8P34+zlGq
DkBV3GkSLay8gdDI7AjMF7dHu9izWgXqj/dVkbi7vHfxldC614IEqrHA+jO4MTKW
rb8smSaJOxKe2g==
-----END CERTIFICATE-----
Generated at Fri Oct 2 14:58:15 2026 by rpki-client