Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: X8AYedVTi22Cm0MZ8FI7DOs4sJzoBdKrl2Z8ps7R224=
Subject key identifier: AB:E3:71:D2:71:6B:78:D7:5E:5F:9F:F0:1D:6D:BE:BB:79:1E:87:AF
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019D39E55964BF8CD028C59F25B2838A048F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:24 +0000
Manifest this update: Sun 29 Mar 2026 14:00:24 +0000
Manifest next update: Mon 30 Mar 2026 14:00:24 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: XebVlP6Z2Z6yjPksv5YIMLrgaQkm4IYz0L2nvVH5NzU=)
2: JmBNmBKIgqKO_ZhjRd9uDlu62G4.roa (hash: BFiumCe31FgvogRmYhZXe4XUH4NFOPl+f+uzimA8KGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:59:64:bf:8c:d0:28:c5:9f:25:b2:83:8a:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Mar 29 14:00:24 2026 GMT
Not After : Mar 30 14:00:24 2026 GMT
Subject: CN=abe371d2716b78d75e5f9ff01d6dbebb791e87af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:8c:66:e6:79:93:3a:6d:91:97:fa:a4:74:
1d:22:af:e7:14:c3:f2:04:8f:f9:da:e7:4f:9c:27:
b7:48:9e:11:7f:fd:b1:da:a6:68:b9:02:99:62:ce:
d6:1d:37:0c:42:35:cc:31:35:08:25:30:35:79:f3:
b9:b2:60:4c:0e:5e:56:53:b1:18:d2:32:16:d8:e0:
47:38:38:0b:18:12:a0:75:67:cc:f5:6c:49:79:7d:
9e:e5:3f:82:ce:34:7e:14:a4:6e:13:e6:dd:5f:00:
2b:f3:b6:72:d0:c6:db:84:34:6e:92:7f:c4:a1:cd:
6e:12:aa:20:89:4d:7e:fd:6b:07:29:5c:01:43:85:
20:54:55:da:9f:65:96:d1:35:a6:c8:58:76:ad:de:
32:90:fe:be:c9:5b:9d:1b:f5:67:35:96:b5:71:4e:
e7:7a:f1:68:00:d0:c1:63:be:29:8e:91:8d:95:46:
42:b8:e5:57:fd:48:1a:ba:3d:c8:a4:7f:b0:ee:61:
ee:e2:4c:be:2e:99:b8:9d:81:a9:c9:05:03:0b:4b:
cf:60:d5:e8:95:ba:ec:72:2c:09:9a:ed:fc:df:f1:
f9:9b:06:f9:89:f0:96:9e:d0:95:2b:0d:a4:0a:c8:
d4:ce:cf:2c:6c:29:c7:8e:63:0e:a1:61:04:1c:d1:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E3:71:D2:71:6B:78:D7:5E:5F:9F:F0:1D:6D:BE:BB:79:1E:87:AF
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:50:be:0f:27:24:5f:f3:b0:b1:80:86:33:3f:aa:e3:f5:
cc:e4:f8:f4:fc:e9:74:71:24:c8:5e:5e:d6:6d:4a:e0:9e:b8:
37:01:fd:36:18:9b:8e:b2:d8:9c:3d:88:81:1a:73:c9:01:5c:
47:9d:fc:5b:a1:09:a1:ec:fd:8e:61:ca:ad:e1:28:0d:8c:a2:
cd:e0:2e:bd:97:d3:ad:95:6a:ec:13:f9:e9:e7:2c:e6:dd:10:
93:4a:75:35:5c:7f:83:6f:7e:c8:ff:4d:b3:f1:31:e0:32:70:
14:44:cf:44:8a:bc:2b:a5:d3:51:d3:28:01:5b:00:fc:80:ad:
fb:ee:93:39:b9:e8:2e:44:9b:4d:ca:1e:ae:e9:30:bc:28:fe:
69:2c:8a:7b:ae:3b:3e:68:bc:93:84:0d:44:cc:58:a0:e8:9e:
15:d1:f7:16:5c:08:66:ad:24:1b:45:6e:a8:f2:ce:40:4d:ae:
d5:e1:7f:81:de:e1:40:53:ba:bb:c3:81:31:4d:d1:8b:5c:a2:
3f:3b:78:10:ee:20:0a:b2:6e:34:cd:d3:78:2f:bd:22:e0:1e:
f4:f3:29:72:6c:db:71:c9:51:49:e4:05:83:7f:de:69:1d:55:
1b:49:17:bd:0a:47:0e:4a:27:40:7f:f3:0b:9d:6a:b1:55:c8:
f8:24:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:52 2026 by rpki-client