Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: ukvWkVSmQPMF3s6x+t04Qf5FdNZDwKwqi9417qTFnV0=
Subject key identifier: F8:D4:45:5D:0F:68:69:68:CB:6E:FC:25:30:AF:B2:02:A6:41:88:DA
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 019D389C0224602D20C8B473F59B4E723485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0D08
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: 5eYoWBE1cFXRPLjPN7r1GmoPJYj76DqU6Ju44ur+slg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:24:60:2d:20:c8:b4:73:f5:9b:4e:72:34:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=f8d4455d0f686968cb6efc2530afb202a64188da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:43:48:de:4e:ec:f0:ab:01:83:cb:ec:d3:
9d:22:3a:e1:1f:4a:27:bf:0d:71:89:bf:82:7d:81:
24:f1:b0:73:65:be:82:bf:05:b0:de:0d:3d:36:e8:
2e:2c:8a:48:1a:74:52:a7:d3:07:9a:ed:b0:2e:fb:
26:20:7d:ae:e4:f1:8c:76:4d:30:79:83:a5:38:7a:
e3:e8:ae:05:a9:ce:99:54:d6:ff:d0:30:dc:c0:35:
68:31:ee:99:31:e9:ec:1e:94:b2:69:30:a8:e5:e6:
f3:cb:d0:b7:db:4a:fc:e5:8a:61:2c:c5:71:69:8d:
dd:8f:f5:09:b9:03:e3:b1:8f:43:11:21:0e:06:20:
86:3f:cd:2e:47:44:53:f6:1b:2a:59:a3:c5:32:3f:
e3:cd:86:1b:e2:7d:1b:68:fa:09:e5:86:64:2b:ff:
75:ea:3b:60:72:07:b3:91:87:58:64:1a:93:46:28:
16:7f:ba:e3:c6:86:c1:19:d3:19:4e:91:82:3f:ce:
f0:2d:9d:13:9e:89:7b:59:a0:10:5d:94:64:95:e5:
6b:d0:80:3f:8e:20:6d:77:43:6d:cc:ef:6e:a7:06:
9b:af:3c:9d:d6:d6:ad:15:4a:ea:2a:0c:81:01:3d:
ac:62:35:1f:c2:e3:f2:1d:bf:61:b9:6b:d3:b1:04:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:45:5D:0F:68:69:68:CB:6E:FC:25:30:AF:B2:02:A6:41:88:DA
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:4c:c5:f1:e4:ea:77:e8:e7:1c:21:eb:86:ad:11:c2:9b:
ea:2a:79:b9:a7:76:49:28:d7:b3:f1:40:e2:7b:f0:54:62:45:
90:15:12:77:3a:77:ea:6f:0a:4d:ec:2a:b0:11:67:19:ee:97:
40:28:ae:2c:3a:cf:58:1a:f3:dd:a5:35:70:76:5f:de:10:92:
40:2e:24:2b:50:e8:81:73:f4:51:3c:15:a0:c2:f6:f8:69:91:
cb:fb:b2:4d:09:7c:c4:0e:ae:e4:85:00:bc:37:b9:ab:c9:f5:
8c:06:ce:93:11:ed:a6:df:26:84:42:0e:20:6f:b7:ea:34:15:
c6:f7:83:27:46:a1:a0:26:d5:fd:b2:18:e8:08:2f:fa:0c:3d:
3b:be:6a:69:1b:ba:92:fa:18:d0:10:ac:d4:3e:20:a2:a1:34:
ce:be:5b:df:bd:a4:11:c2:6f:37:94:64:91:09:ec:67:13:97:
eb:3d:ba:69:d3:70:e4:dd:2f:b5:bb:15:9f:ac:d5:33:e3:86:
fa:05:ec:ca:5b:c4:1e:2b:17:b1:2a:5d:16:5e:81:19:78:48:
29:7a:a2:b6:83:62:37:9c:b0:c6:86:86:63:85:69:c1:d8:30:
b3:23:bd:dc:7f:41:17:b2:1b:8b:f6:19:5d:2a:e0:9d:78:4c:
d1:de:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client