Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: KtiDu75polydaxQTK2HV6FxKAgu88QkbTvaM+L5O38s=
Subject key identifier: 49:7D:13:55:3F:47:CC:2A:97:BD:C7:C4:3E:B6:DE:35:FE:AB:42:A7
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 01A18D1D235EC48066E2D723D0AB84450B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1A62
Signing time: Fri 30 Oct 2026 14:00:59 +0000
Manifest this update: Fri 30 Oct 2026 14:00:59 +0000
Manifest next update: Sat 31 Oct 2026 14:00:59 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: Y/Sj4Xu9UY08g2oqBwkgQ2o72Q/InCsRDJAPXX0WhQ0=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:23:5e:c4:80:66:e2:d7:23:d0:ab:84:45:0b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Oct 30 14:00:59 2026 GMT
Not After : Oct 31 14:00:59 2026 GMT
Subject: CN=497d13553f47cc2a97bdc7c43eb6de35feab42a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:ff:dd:79:76:6d:59:bc:6e:0c:1c:06:fb:
af:83:e3:70:6c:54:0a:6e:e8:98:4e:a8:f9:4d:11:
5d:c2:b5:8a:06:05:0f:91:46:ef:a8:e7:8d:2b:6b:
41:91:62:14:45:ac:f8:31:c5:f0:f7:ce:f3:49:40:
52:52:b0:fe:96:78:28:73:b8:76:f6:17:0b:dd:e0:
e4:ba:fe:fe:ef:8e:4f:92:b8:1a:e8:9e:66:6e:40:
9c:0d:82:78:e2:0d:69:4d:00:ff:42:a9:90:30:ed:
c5:e1:5e:27:d4:da:24:58:df:2b:1d:db:ef:19:34:
f9:d3:92:ad:95:42:37:ef:f9:e1:8c:9c:b3:6f:3e:
36:67:9d:c7:1e:16:aa:1a:a3:59:3f:3f:5d:ae:8e:
95:0e:eb:27:55:b3:08:40:6a:ae:f4:c0:5a:7d:59:
61:e1:61:1b:ff:4e:ee:7e:e5:9b:3d:b4:24:6a:9f:
fe:74:48:2c:ba:96:bc:cb:f8:48:83:5e:36:60:7f:
71:5e:00:06:ba:03:1c:13:29:39:c7:f8:4b:f5:bb:
94:1a:22:c1:66:94:26:8b:45:30:ee:b9:1a:47:2a:
2d:eb:b5:d1:7a:34:26:ad:fd:da:ce:6f:35:bb:e3:
95:16:68:0a:61:1d:3b:34:66:51:87:f0:16:da:0a:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:13:55:3F:47:CC:2A:97:BD:C7:C4:3E:B6:DE:35:FE:AB:42:A7
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:aa:f5:5c:cb:b3:63:15:85:f4:5f:4b:81:7e:7f:e4:fa:
7b:58:0c:19:ef:90:31:32:0c:f7:0c:e7:15:3c:b1:db:15:d5:
2e:de:05:fc:46:8a:e9:76:2a:f8:dd:74:2c:fd:c3:e3:6b:27:
91:87:6f:3f:90:ac:6d:54:d7:34:99:ab:af:27:71:8f:b7:13:
cd:c1:61:b9:ac:1d:e3:1b:5b:42:df:b3:4c:34:c2:01:50:bf:
87:3c:df:1b:52:dc:fe:07:9b:77:e1:ba:a6:b5:04:fa:ff:37:
0f:e0:c6:7b:77:10:5a:3a:39:1b:5f:78:3c:e8:3f:b5:2c:11:
4f:b0:cf:ef:f0:a7:a5:fa:da:52:21:75:0c:68:77:5f:b0:f0:
a2:87:ac:20:aa:5e:6f:70:5b:f6:84:a6:d6:05:7e:f5:24:b1:
49:49:c1:cc:a3:21:e7:d6:46:71:08:10:ce:ba:2a:7c:61:a1:
b0:28:87:b4:93:7f:fe:19:14:6d:51:44:24:8b:02:d4:bd:40:
c6:97:aa:58:f7:cf:8e:a5:47:7d:18:db:c3:26:82:5a:2a:8c:
7a:4d:2c:a7:c6:c7:93:e2:bb:0e:1a:52:8a:c5:c7:44:57:94:
6d:64:a9:e8:4c:26:dd:05:95:84:f6:c9:32:4f:eb:8b:fa:82:
ce:00:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:25:55 2026 by rpki-client