Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: vt22HiLzufjtZpVJ6rCZP7xxZPX1o8sSsE/qnLcr89s=
Subject key identifier: 6A:13:E7:36:FE:A2:5D:5C:0A:97:91:57:79:13:B8:87:51:CF:26:DD
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 019D37F762A55D2ADD3911B788548F026F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1395
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: znw7g5rGQ3JM6msnZZqE1yB5RdCF2G3HIQ9pd3Krmxo=)
2: J4YLrLdwYgPSyWf3TDtozKJGYDA.roa (hash: oD8qfrXmhU5eXPYgfnLW4FbZh7wYxDBRIu7McpM1mGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:62:a5:5d:2a:dd:39:11:b7:88:54:8f:02:6f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=6a13e736fea25d5c0a9791577913b88751cf26dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:77:8b:45:1c:94:d5:b1:d2:b3:39:75:a8:
3b:51:3b:ae:19:64:d4:c2:b1:0c:c9:e5:34:30:07:
3f:79:63:b8:b8:6a:86:a9:fc:07:f5:f4:d9:ac:10:
2f:11:aa:15:56:53:d7:70:3c:f7:95:50:67:09:a0:
87:22:71:a9:b8:b4:7f:d5:02:5b:48:9d:82:a1:49:
b9:45:a6:16:ca:1a:de:97:06:01:93:51:d0:68:a8:
f2:6a:ac:9f:98:3b:48:0f:64:7f:0f:a1:14:29:33:
55:f1:d7:fc:b4:7a:31:f0:7c:c6:52:0a:bd:77:10:
79:11:e4:22:e1:31:a7:ad:39:78:64:54:1e:c2:1c:
5b:43:5c:d2:da:7c:a3:8e:07:ae:b7:bf:2c:be:35:
4e:9d:09:98:7c:d8:32:6f:fe:31:85:ec:f5:f8:d1:
31:39:5a:0f:b4:82:ba:16:d2:fd:64:a2:a9:60:f0:
ff:28:fb:1c:08:9b:b2:15:24:45:10:16:ca:8e:9f:
95:3a:6b:03:7c:67:81:c6:15:67:8c:fe:bc:98:5d:
6d:0d:d6:11:ba:b4:d3:25:77:f6:e3:b1:98:53:3d:
dd:4b:a8:d5:d4:b8:65:5f:b6:4b:e4:b7:2c:19:ca:
42:c5:ab:62:7d:4d:bd:78:9a:6d:5d:cd:d3:2a:21:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:E7:36:FE:A2:5D:5C:0A:97:91:57:79:13:B8:87:51:CF:26:DD
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1c:8c:fe:34:89:20:6b:49:20:db:52:3c:eb:08:64:1e:97:
1f:e0:f8:b8:74:a9:3a:3e:ed:8c:20:9a:7d:a6:be:e6:49:67:
3d:62:b0:28:27:88:3e:7d:18:5e:18:fc:f1:d7:ee:9b:d6:8c:
f5:d6:40:50:36:48:6a:89:40:b0:99:5c:f9:e8:e4:01:ef:d9:
e3:1b:12:47:3e:e6:d0:e9:7d:fc:15:71:01:45:41:3e:31:44:
e1:1d:77:9c:7d:22:bd:da:db:cf:e7:a4:c4:67:67:df:e5:9c:
11:41:0f:56:b5:79:dc:81:09:c2:df:56:6e:e9:e6:df:f4:21:
14:2c:1a:63:4e:db:e6:d7:7f:5f:d3:b2:4a:d7:c1:75:5e:b4:
94:d3:ca:cf:89:be:78:87:94:54:74:70:f0:86:96:83:63:2e:
04:1d:07:f1:56:09:9c:84:09:93:5c:f7:b0:e9:5e:e7:c4:e2:
a2:13:51:ee:00:6f:ed:6b:34:68:42:95:f5:ea:80:80:df:4a:
57:90:e5:62:46:c3:cf:eb:81:0d:f7:cf:11:e6:2d:53:71:72:
03:79:ea:1b:f4:a4:23:15:67:f8:85:e1:dd:8d:5d:9e:3b:1e:
c7:2d:17:17:7e:75:44:56:2b:70:29:14:fe:73:7a:70:84:fa:
5e:01:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:48 2026 by rpki-client