Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: UfL6szly1LBlA1A9Mtn1qb+Su2UiAEv0DedXKEYRV64=
Subject key identifier: 1B:3B:BD:54:00:E6:C2:96:66:DE:5F:12:B1:81:60:19:9A:E1:B1:13
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019D382E55B92BC02B76C6B88E0B947738CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 0B1E
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: BwQVQ_CjJfdcPm0-S87mGB0Ours.roa (hash: Ta3LRpNzq0lEJK2G/WE3LSjK7WYr/aPEY/T1lVk/51A=)
2: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: oP8afvPj2CupbYO5WRcda84gDIzNyrXTrCB2P087u6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:55:b9:2b:c0:2b:76:c6:b8:8e:0b:94:77:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=1b3bbd5400e6c29666de5f12b18160199ae1b113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:e6:b4:78:aa:67:bb:bb:e9:97:cb:0c:79:
b0:47:86:ca:ae:00:5f:75:5b:a8:c2:5e:c5:f0:bc:
c9:3c:f5:8f:b1:3e:9e:29:52:6d:84:b8:a8:86:0c:
5c:95:60:c7:c8:71:17:c0:a8:b1:bb:e9:d7:9f:26:
e0:c6:74:37:ca:35:7d:ba:ed:37:e8:36:7f:02:c0:
ca:13:9b:01:a9:e8:50:24:57:d3:29:ac:c0:37:50:
89:3d:85:e1:2f:c6:55:30:16:5f:dc:f1:f7:a8:a0:
b8:ab:c6:1e:dd:e0:8b:a6:84:8b:05:7a:61:7d:be:
a1:13:71:8c:8c:10:71:1a:4f:cb:68:b0:9b:b7:bf:
b0:90:9e:d9:be:bd:7b:61:8f:fa:ec:0b:4f:89:7a:
95:8e:80:20:11:f2:90:d3:1b:d2:3a:ba:b4:97:86:
f6:6c:d7:92:6c:ec:ea:f5:b0:12:97:d3:1c:15:38:
fe:02:a7:48:c7:7b:06:9c:97:66:d5:7a:81:95:d3:
3c:d5:17:9c:c5:d5:56:97:be:13:e1:70:d8:7e:ac:
72:69:24:c2:ba:89:9e:16:de:c9:d1:71:d9:50:97:
9d:45:9c:71:f9:4f:85:c2:72:47:0d:48:b4:de:f9:
0a:46:ff:d4:e7:cc:3d:30:5e:92:35:a2:35:61:bb:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:BD:54:00:E6:C2:96:66:DE:5F:12:B1:81:60:19:9A:E1:B1:13
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:37:1c:f7:28:85:6a:b3:12:9f:03:43:e0:61:6f:d0:1a:2e:
99:95:22:8a:af:e7:55:b6:85:87:ce:24:e6:62:0d:03:44:01:
b4:9e:27:3a:15:d6:74:2d:22:c8:70:55:9e:3b:ff:17:f2:7b:
c5:74:a1:1e:0a:27:51:ac:5f:b2:ea:b0:40:01:7e:c4:f7:da:
c0:07:00:0f:95:55:e6:e8:67:4e:98:90:1f:fa:54:15:ec:3e:
2a:0a:03:98:f1:1f:62:dc:95:9c:14:84:6f:87:77:9a:6c:61:
2c:ec:29:9e:f6:ce:87:c2:2b:35:ad:5e:d4:82:c6:fd:52:bd:
91:25:14:ea:df:ff:ac:7e:cf:89:73:a3:83:7a:68:90:90:48:
47:36:3d:c4:d2:6a:2d:77:0e:6d:ff:9c:0d:f7:15:4a:3d:c6:
7c:f5:f8:9f:aa:8c:b1:44:16:71:c5:54:d5:20:53:4c:d9:35:
97:c4:94:ac:fa:f2:4b:f3:d8:4e:33:cb:4e:a0:eb:cd:df:07:
1d:b3:18:8c:4d:60:94:9f:1d:0b:67:30:43:c0:04:0f:81:f8:
cf:e8:60:c6:4f:df:70:0b:9b:ef:f0:3f:3a:7d:eb:22:24:98:
a0:68:e1:6f:72:8b:5b:21:df:97:b6:38:b4:2e:43:bd:8d:30:
f2:99:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:38 2026 by rpki-client