Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
File: FNEUZbrci_3-hbWKrm_H3MNtkUs.mft (raw, json)
Hash identifier: aZ2DwAly/KHIs6HkCYuBpLC72vTrCYiNDcMxIZuJKD4=
Subject key identifier: 5A:AC:13:86:03:83:E0:8C:77:3B:DC:06:A1:D7:FE:74:89:39:24:26
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019DCDBD67874F1769D2D2395EF085E60F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
Manifest number: BB
Signing time: Mon 27 Apr 2026 07:00:35 +0000
Manifest this update: Mon 27 Apr 2026 07:00:35 +0000
Manifest next update: Tue 28 Apr 2026 07:00:35 +0000
Files and hashes: 1: FNEUZbrci_3-hbWKrm_H3MNtkUs.crl (hash: Kpgv1yE41dISws5HfEqhky/4g7VBSz467i5CqLyXCVg=)
2: qH7c24JmkVBMYbJmi0p4XVjkvrA.roa (hash: +CSYNI9p5H8qPtanDM1P4+I8bU0tiGoJi7imMK4J3uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:67:87:4f:17:69:d2:d2:39:5e:f0:85:e6:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Apr 27 07:00:35 2026 GMT
Not After : Apr 28 07:00:35 2026 GMT
Subject: CN=5aac13860383e08c773bdc06a1d7fe7489392426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:e1:d9:1d:ce:a7:46:58:9a:2d:19:9d:a0:
e6:8b:46:12:cd:d3:54:04:8f:df:55:3c:66:1e:7a:
f8:45:a2:2d:94:8c:07:91:45:c4:d6:7d:6b:2e:e9:
d3:32:47:82:7c:3e:73:c9:df:ed:aa:74:14:8e:a2:
b6:64:63:a0:59:91:e5:c7:7a:26:2a:d6:31:2a:1f:
07:f6:00:3d:c8:fa:b5:46:3b:2f:f2:6d:0b:20:05:
cf:9d:df:56:46:5c:90:ea:1b:32:2f:b4:09:04:2e:
b1:db:4f:95:22:3c:c8:6b:f7:cd:94:39:5e:f9:cd:
ba:a6:77:9b:2c:d0:3b:73:8a:8e:fb:3a:11:5b:da:
14:d1:37:43:bc:7b:f0:fc:ab:25:98:61:36:9a:48:
f2:f9:0e:62:e4:38:7f:cb:af:e7:e4:78:44:4c:93:
4a:c8:a0:7e:2b:f8:5f:76:5c:27:fa:5c:a2:70:d4:
a7:95:bb:e5:59:f2:d4:87:94:59:57:20:50:02:ec:
fe:15:17:7d:12:2f:80:b1:bf:72:ee:42:dc:f6:54:
e8:b5:6b:e3:9b:85:a1:4b:1d:7c:96:0c:45:35:34:
f9:a8:31:75:0a:43:f0:a1:50:19:62:b0:cb:27:c7:
aa:a4:7c:55:d3:eb:e7:02:09:2e:30:35:db:d9:ab:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:13:86:03:83:E0:8C:77:3B:DC:06:A1:D7:FE:74:89:39:24:26
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:9f:7b:ce:66:5a:5c:68:35:22:98:14:59:f5:4a:a7:62:
db:8e:d3:83:92:79:36:80:65:9c:a0:1e:42:11:0c:2c:51:68:
99:2c:b1:8c:e0:9d:ff:7f:c7:78:15:21:cc:bf:c5:77:72:7b:
48:4b:40:5c:b2:ea:01:ee:87:e2:ee:76:01:6f:54:9c:96:5f:
fa:85:e0:6a:d5:58:79:9e:e6:72:9a:b2:d1:10:c9:6b:3c:c0:
55:3d:d7:3a:a7:78:61:1b:b2:c7:e1:f9:4d:93:a4:de:bf:fa:
45:18:f6:84:b5:cc:93:68:d5:ff:35:a8:af:f0:d2:1c:46:a2:
32:4f:df:98:66:32:d3:be:cb:74:33:92:42:7a:48:e7:f7:a1:
bc:ab:e2:d1:f0:a5:10:85:05:b5:df:21:46:fa:7e:08:f7:0b:
2a:00:fe:28:db:4a:27:a7:50:63:27:83:60:fb:50:45:8f:98:
62:cd:e0:b4:03:bd:a8:4c:cc:b4:02:0d:ac:00:e6:44:69:bc:
65:44:e2:5a:3f:cb:d5:cd:45:33:fe:c7:29:b9:91:ea:c8:13:
5f:a8:f5:b2:2d:8c:6f:fc:0e:09:e3:e8:54:f6:7a:47:98:50:
1f:3e:21:31:6c:46:8e:9a:22:eb:64:a1:66:f5:3b:57:d3:90:
a6:1c:14:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvWeHTxdp0tI5XvCF5g8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDExNDY1YmFkYzhiZmRmZTg1YjU4YWFlNmZjN2RjYzM2
ZDkxNGIwHhcNMjYwNDI3MDcwMDM1WhcNMjYwNDI4MDcwMDM1WjAzMTEwLwYDVQQD
Eyg1YWFjMTM4NjAzODNlMDhjNzczYmRjMDZhMWQ3ZmU3NDg5MzkyNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjh2R3Op0ZYmi0ZnaDmi0YSzdNU
BI/fVTxmHnr4RaItlIwHkUXE1n1rLunTMkeCfD5zyd/tqnQUjqK2ZGOgWZHlx3om
KtYxKh8H9gA9yPq1Rjsv8m0LIAXPnd9WRlyQ6hsyL7QJBC6x20+VIjzIa/fNlDle
+c26pnebLNA7c4qO+zoRW9oU0TdDvHvw/KslmGE2mkjy+Q5i5Dh/y6/n5HhETJNK
yKB+K/hfdlwn+lyicNSnlbvlWfLUh5RZVyBQAuz+FRd9Ei+Asb9y7kLc9lTotWvj
m4WhSx18lgxFNTT5qDF1CkPwoVAZYrDLJ8eqpHxV0+vnAgkuMDXb2avlMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqsE4YDg+CMdzvcBqHX/nSJOSQmMB8GA1UdIwQY
MBaAFBTRFGW63Iv9/oW1iq5vx9zDbZFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5FVVpicmNpXzMtaGJXS3JtX0gzTU50a1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yYjkzMTktOGE1ZS00N2Y3LWFhNWUt
NWMyNmFkY2Q5NmE0LzEvRk5FVVpicmNpXzMtaGJXS3JtX0gzTU50a1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yYjkzMTktOGE1ZS00N2Y3LWFhNWUtNWMyNmFkY2Q5NmE0
LzEvRk5FVVpicmNpXzMtaGJXS3JtX0gzTU50a1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7afe85m
WlxoNSKYFFn1Sqdi247Tg5J5NoBlnKAeQhEMLFFomSyxjOCd/3/HeBUhzL/Fd3J7
SEtAXLLqAe6H4u52AW9UnJZf+oXgatVYeZ7mcpqy0RDJazzAVT3XOqd4YRuyx+H5
TZOk3r/6RRj2hLXMk2jV/zWor/DSHEaiMk/fmGYy077LdDOSQnpI5/ehvKvi0fCl
EIUFtd8hRvp+CPcLKgD+KNtKJ6dQYyeDYPtQRY+YYs3gtAO9qEzMtAINrADmRGm8
ZUTiWj/L1c1FM/7HKbmR6sgTX6j1si2Mb/wOCePoVPZ6R5hQHz4hMWxGjpoi62Sh
ZvU7V9OQphwUfg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:28:18 2026 by rpki-client