Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
File: FNEUZbrci_3-hbWKrm_H3MNtkUs.mft (raw, json)
Hash identifier: KFqe+mHZAZ1Es1DN1g96gAgF/oByKzy4zXnv0XVlPZM=
Subject key identifier: A4:EB:CB:5F:B3:85:FD:49:38:E2:1B:CC:E6:8F:B1:EA:84:D2:FF:CE
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019CE222D24FC879EF1CD4580BFDDC80CFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
Manifest number: 41
Signing time: Thu 12 Mar 2026 13:00:58 +0000
Manifest this update: Thu 12 Mar 2026 13:00:58 +0000
Manifest next update: Fri 13 Mar 2026 13:00:58 +0000
Files and hashes: 1: FNEUZbrci_3-hbWKrm_H3MNtkUs.crl (hash: zQNBdKhTK/xY383VUjnFBF8DGAe9hwAB+kDMT7nQuP4=)
2: qH7c24JmkVBMYbJmi0p4XVjkvrA.roa (hash: +CSYNI9p5H8qPtanDM1P4+I8bU0tiGoJi7imMK4J3uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:d2:4f:c8:79:ef:1c:d4:58:0b:fd:dc:80:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Mar 12 13:00:58 2026 GMT
Not After : Mar 13 13:00:58 2026 GMT
Subject: CN=a4ebcb5fb385fd4938e21bcce68fb1ea84d2ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:bb:a9:8f:4a:d3:d8:6c:55:26:91:47:d7:
64:7d:8f:10:21:3b:c1:e7:2a:89:cf:d2:0b:43:a8:
82:e7:f5:29:13:c0:7a:fd:29:80:81:f0:7d:44:57:
89:1f:3f:c1:a1:fd:c7:7e:d5:95:c3:21:d2:87:24:
4d:f2:75:6c:19:0f:ea:ec:eb:00:0d:42:2f:fa:f6:
c5:b0:31:4d:d2:f2:76:dd:8d:08:57:02:fc:38:9c:
86:c7:6e:22:95:1b:13:e1:bd:a0:1e:f0:be:e6:0d:
2a:8a:b4:bb:cf:4d:0b:c6:75:d5:59:3b:c2:bd:f9:
39:cf:f1:20:43:59:67:fa:32:60:6c:f9:e0:df:57:
ba:f6:fa:89:d9:a6:45:4e:f7:27:1f:3b:94:49:29:
8f:1b:98:ea:00:fc:87:8f:87:db:80:65:43:3e:5e:
41:3d:ff:26:22:db:93:92:2b:c9:97:24:5c:fc:c9:
61:df:b7:b9:17:84:5e:5b:ae:9e:2e:99:f7:0f:c4:
91:66:fb:4d:93:78:c6:c2:25:0c:b7:d2:77:ad:bd:
04:33:9c:09:66:ed:64:61:a6:b5:74:e9:4a:dd:34:
78:82:c7:16:e8:4e:35:fc:b5:78:02:d1:5d:07:61:
e6:78:73:1a:0f:88:69:c4:fd:79:d5:77:6e:6a:a9:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:CB:5F:B3:85:FD:49:38:E2:1B:CC:E6:8F:B1:EA:84:D2:FF:CE
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:dc:78:6b:82:87:cd:ac:03:65:f7:dc:90:f9:f2:ff:6c:
c2:d9:ac:6f:83:e6:49:46:da:aa:0f:5f:b8:48:0d:ce:ab:d5:
cb:28:3f:d9:0a:d9:72:98:63:26:c7:2c:f2:d9:26:34:67:e8:
94:fb:cf:14:0e:26:d2:07:ac:d3:a0:17:23:9f:50:7d:73:8e:
cb:cf:95:ad:0e:e0:f0:15:1b:7d:cc:e2:44:fa:f9:94:13:e5:
45:7f:34:71:e0:39:dd:9d:43:be:e5:c8:52:dd:67:69:61:ce:
51:4e:ee:35:b3:da:86:e1:ca:50:c9:66:40:a5:ac:97:4b:f5:
b0:0b:41:a6:96:8c:38:d5:7d:12:f9:1e:6a:bc:32:94:f0:8c:
66:f4:ea:ea:89:79:fe:18:e2:80:89:f4:99:1a:b4:3f:d4:9a:
49:7b:db:01:c4:fd:25:b6:de:0d:ab:76:7a:0c:b0:5d:ee:81:
bb:e6:c0:9c:60:57:f6:94:38:f8:dc:aa:67:9a:bf:d8:84:93:
05:38:28:87:70:d0:ec:18:32:36:9d:55:e5:3e:63:4c:4e:63:
1c:7e:51:ed:99:30:0f:1a:d2:59:4a:67:b3:ed:b5:36:39:36:
ac:f5:ed:2e:d0:46:f7:02:d5:1b:a2:28:f8:3f:ec:f0:84:a0:
fc:72:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:05:50 2026 by rpki-client