Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: Vd4ItvJ1HeXMohwafWmiiAt3n7tGavM7ZV9VMhXltGs=
Subject key identifier: 4B:0C:F3:20:5A:2C:DC:F6:B3:F5:6C:31:D6:3C:B6:9D:AB:7E:80:DA
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019CEA816ED9DA52F3A482515EF27988685E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 14FB
Signing time: Sat 14 Mar 2026 04:01:16 +0000
Manifest this update: Sat 14 Mar 2026 04:01:16 +0000
Manifest next update: Sun 15 Mar 2026 04:01:16 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: T4BxjBFM8AK+4Y4PhRwEh4TOw0gN9ibpoU7H2F/t1n0=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:81:6e:d9:da:52:f3:a4:82:51:5e:f2:79:88:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Mar 14 04:01:16 2026 GMT
Not After : Mar 15 04:01:16 2026 GMT
Subject: CN=4b0cf3205a2cdcf6b3f56c31d63cb69dab7e80da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:86:e3:08:c6:a5:9d:0d:c0:4b:fa:09:63:
2b:98:5d:d5:bf:37:48:22:c8:6a:b9:44:84:f9:8f:
ed:08:21:5c:13:df:73:8f:87:f1:14:a0:83:5d:74:
15:f1:18:d2:a0:3d:99:ad:c8:cb:92:97:87:5c:69:
9f:e1:7f:5e:75:89:f7:28:00:ad:49:3f:eb:ac:71:
94:98:79:29:45:27:bf:76:25:d2:5a:2d:37:e3:9a:
d7:be:2d:ae:63:b6:ef:33:ef:9a:9d:4b:8b:85:d9:
ed:f0:0c:b7:94:0a:c9:55:85:d5:67:f0:c7:29:dc:
c9:23:af:88:71:58:35:46:85:f1:4f:21:f2:4a:f0:
3a:95:81:7a:ec:dd:64:50:ef:f1:9e:1b:1c:00:c8:
f1:78:d7:18:61:5f:52:2e:53:1a:75:a7:88:72:de:
3a:aa:ad:c6:90:7b:e1:59:ec:ab:ff:de:77:ef:fd:
c9:fd:b0:85:24:43:21:c6:48:40:74:0b:09:91:c1:
a6:4b:cf:4c:59:e8:0a:e4:f7:8c:2f:f5:aa:1c:35:
09:69:09:27:c9:0a:36:b0:c2:3a:6b:bd:84:f8:81:
07:21:cb:c1:2c:e9:14:ea:ba:7d:1d:b3:af:45:2c:
89:89:28:51:5b:91:f1:96:9b:31:3c:d7:50:ac:8c:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:F3:20:5A:2C:DC:F6:B3:F5:6C:31:D6:3C:B6:9D:AB:7E:80:DA
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:ea:53:2a:a7:8a:f5:96:28:32:03:f3:1c:0a:3e:f8:82:
fe:a9:15:d8:37:50:d6:68:6b:d9:14:98:6a:0e:50:57:43:bc:
4c:cf:77:f5:5b:bc:d8:10:0c:26:51:78:de:13:c4:71:4c:5a:
63:23:4b:61:17:2b:a7:92:f6:55:13:eb:d7:1f:fa:c3:77:32:
fb:bb:61:27:cc:0b:d6:98:da:fd:9d:9e:b6:13:ed:42:a4:57:
78:e5:df:fd:84:9c:3f:d2:ad:51:0a:26:f1:03:45:ed:65:d0:
9d:11:ed:9d:69:08:df:1b:28:cb:87:4f:05:a7:a6:f4:11:7f:
06:0e:45:4a:96:24:b2:25:ae:26:cf:9f:1a:34:54:90:7c:10:
e2:cd:b1:0d:1f:c4:6a:0d:68:1a:b4:b6:07:4d:04:f8:84:c2:
29:e3:d1:2a:2b:21:ee:ec:08:df:1e:94:b0:2e:9b:ed:2a:3a:
7a:63:8a:15:e0:a3:35:ce:1b:4a:91:94:6c:e8:d1:1c:58:06:
f6:6f:e1:69:65:01:a7:d1:20:2f:dd:1a:73:d0:bd:52:a9:18:
a6:7d:99:7a:03:27:63:c9:f7:81:39:cc:43:dd:f1:37:43:57:
d3:f2:da:b5:66:66:d7:a7:14:d4:03:f3:d1:3b:bf:9a:81:66:
7b:53:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:29:23 2026 by rpki-client