
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: eKnW555T/xp2BuhpX+MQeG3S9mFI0JDu/KbkBsyw0i0=
Subject key identifier: 03:0A:CA:9C:A3:C4:41:1A:0E:94:65:57:95:10:15:1D:CA:7C:5C:82
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 01A125799F35DAEDB46564BA4E2746013173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1A96
Signing time: Sat 10 Oct 2026 11:01:29 +0000
Manifest this update: Sat 10 Oct 2026 11:01:29 +0000
Manifest next update: Sun 11 Oct 2026 11:01:29 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 2a7t8wsJY/JbT2faOuTpopGNA5h9fDs3CQLR/YYRbIo=)
2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:9f:35:da:ed:b4:65:64:ba:4e:27:46:01:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Oct 10 11:01:29 2026 GMT
Not After : Oct 11 11:01:29 2026 GMT
Subject: CN=030aca9ca3c4411a0e9465579510151dca7c5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:38:59:c5:70:64:fd:7c:64:e8:48:22:37:
46:e4:bd:e9:aa:77:d4:5b:52:72:0d:ef:46:1d:de:
b6:7f:38:84:ac:57:7c:bb:13:17:a6:ec:99:30:05:
ad:be:30:a0:17:2f:a9:4b:9b:93:d9:36:f4:47:92:
46:c0:1c:53:e6:50:c2:3e:49:f0:dd:1b:e5:2f:d7:
57:94:a3:99:4d:3a:40:5f:a2:cf:06:d6:b0:60:e1:
e7:b0:fa:16:58:09:a3:e3:0b:83:67:51:0d:ad:3d:
97:16:e1:ed:26:cd:b2:26:5c:23:8d:c0:be:06:b0:
e0:78:be:f7:58:aa:95:23:0c:c8:0b:c6:67:20:9b:
26:98:92:c1:ff:92:26:ff:29:33:e0:69:8e:27:d3:
00:1e:7d:26:ca:a3:f6:3e:a1:ee:0c:f4:70:ce:c1:
39:65:32:c3:33:4f:9c:02:a5:48:3e:b0:95:8a:5e:
d3:6a:aa:a9:38:8e:40:da:0c:6c:45:4e:24:9f:15:
f2:2e:fa:1a:97:76:6c:6b:df:9a:14:ed:65:29:c7:
bf:bf:b4:9b:3a:2b:f0:f0:35:db:64:ae:f4:21:82:
d8:ac:ef:5f:2d:99:a7:3a:d1:f7:2a:34:98:62:1b:
78:d6:d8:3e:8d:5e:0b:26:08:17:fd:10:31:b0:70:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:CA:9C:A3:C4:41:1A:0E:94:65:57:95:10:15:1D:CA:7C:5C:82
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:dd:0f:f4:3a:45:77:12:e7:f7:6c:9b:40:5f:ef:32:3b:
5e:2d:b7:46:53:45:aa:9f:21:56:5e:c1:01:0b:d9:49:8b:f2:
2e:7a:8e:78:a5:de:dd:af:31:b2:b5:10:fe:75:e5:7f:cb:d1:
95:f2:e2:b3:83:bf:0e:0a:e5:1f:0b:63:0d:a4:be:8b:1a:06:
45:b5:aa:17:07:f8:c7:4e:ca:bd:76:ae:ec:ff:2a:47:e1:96:
f6:50:aa:f6:05:5b:e6:7a:21:3f:72:82:a0:7f:9e:45:6a:1d:
90:6f:1b:10:ec:ce:3f:3d:bb:05:13:8d:8a:3f:c7:ee:6b:47:
8f:4f:08:10:d1:72:1f:d3:4a:c9:3c:72:c0:13:88:6d:db:9b:
c8:f8:ea:d5:fb:52:a1:05:f1:43:30:6c:83:75:44:86:a4:63:
c8:05:be:4f:4e:31:43:da:94:c8:b8:4a:d5:a9:61:3e:5b:91:
2e:50:4d:30:0e:f3:95:e9:1c:da:88:53:4e:f3:a1:cd:91:7d:
65:11:53:96:42:ad:b1:0f:0a:fa:d2:21:76:fe:1f:1d:ed:51:
1e:4a:35:04:44:7d:82:70:38:99:5b:9b:8a:3b:6a:d7:09:aa:
76:63:50:0b:81:32:a0:d5:8b:fc:85:5d:02:39:99:71:a2:71:
30:bc:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:24:56 2026 by rpki-client