Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: bC08P4N/uItf2cLt/idJ/4O0Pgjfnjk2+IYJqlWaaTI=
Subject key identifier: CB:C2:F1:9B:90:1E:60:81:C6:F1:B0:1F:D5:E8:AA:E0:E2:FD:C3:FB
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 019F1A1F842DDF7FC0B14A71F7CE7FD60493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 20:01:40 +0000
Manifest this update: Tue 30 Jun 2026 20:01:40 +0000
Manifest next update: Wed 01 Jul 2026 20:01:40 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 5Nb09RI+d7q3qr4NIs6iRkYwp9fVcevwiiE8R5xnfRo=)
2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:84:2d:df:7f:c0:b1:4a:71:f7:ce:7f:d6:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Jun 30 20:01:40 2026 GMT
Not After : Jul 1 20:01:40 2026 GMT
Subject: CN=cbc2f19b901e6081c6f1b01fd5e8aae0e2fdc3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:d7:e8:b1:80:96:32:0c:34:4e:04:14:dd:
0c:8b:be:eb:d7:e7:57:29:63:a5:e2:56:ca:5c:07:
4a:48:4f:eb:f2:82:d5:71:3d:e1:53:85:0d:fe:17:
1b:dc:88:e9:71:0b:c9:55:aa:75:19:4c:e7:94:e7:
5a:a8:a6:88:79:63:71:5d:d2:8a:3b:e9:54:9b:22:
2f:6e:9a:f8:db:96:68:7a:d2:07:d2:c6:96:b1:c0:
02:58:fc:a8:6e:19:62:33:99:4c:e5:e8:bf:c0:05:
81:13:cd:99:60:67:c0:32:a4:a8:80:d0:69:c1:ad:
1b:53:19:5a:cf:6e:38:4b:60:6c:d3:2c:d8:dd:57:
b6:e8:53:19:fe:7e:d0:fd:01:5f:96:10:db:71:09:
bf:9b:22:9d:7a:6e:5d:58:49:29:44:8f:99:5b:c3:
f9:ab:75:dc:37:81:11:1d:fd:51:e7:b6:87:fb:aa:
e1:c3:f5:27:03:dc:d3:18:40:ee:b6:00:a3:bb:d2:
47:13:72:10:45:e5:08:14:fa:b2:90:9c:ff:e9:51:
db:95:5d:cd:00:e5:6e:bb:2c:27:26:77:4b:f4:91:
2c:90:2a:95:94:44:9c:d4:e2:39:38:03:27:99:7f:
13:66:dc:01:1c:dd:93:31:5a:c3:ea:ad:69:39:f6:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:F1:9B:90:1E:60:81:C6:F1:B0:1F:D5:E8:AA:E0:E2:FD:C3:FB
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:1e:f3:0d:f6:20:86:2f:3c:9b:6b:87:e8:47:3c:40:e4:
18:9e:c2:b9:51:3c:56:ab:40:25:c7:87:60:8b:c2:48:31:84:
89:2c:f8:31:3c:f1:58:01:87:7c:c1:a1:84:bb:d6:b8:5b:e0:
e7:78:bc:ea:9e:c2:7e:18:55:83:f7:cf:ef:ad:99:c0:92:f1:
f3:d4:b9:8f:77:7b:d4:02:1c:b9:e5:12:be:31:0a:6e:62:4b:
60:82:9b:9d:5a:2d:72:63:f9:8a:a9:8e:1c:d3:f5:09:62:20:
21:11:35:6d:74:7f:40:1d:ef:b9:d1:16:c9:14:d1:9c:18:c0:
b0:70:ca:4a:93:3d:8f:0b:d5:52:5b:87:f1:a5:d9:b5:0c:0c:
c3:86:e4:6b:1d:93:73:9e:74:9d:b8:33:3f:1d:63:61:f3:06:
62:16:54:92:75:3b:48:f1:fd:97:f9:f9:49:92:35:bd:5c:aa:
93:c5:ab:e4:cd:78:33:c6:d7:26:38:b3:f5:85:d5:da:a4:01:
40:5e:4d:f0:14:0b:5f:30:95:2f:3b:2a:2c:76:28:5a:6a:c4:
c3:92:67:46:fe:7f:bb:62:b5:f8:c3:68:2f:7a:c8:67:04:fc:
b2:12:78:15:b9:12:ea:a4:26:65:05:ce:c0:f0:5d:df:31:b9:
a7:ba:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:35:32 2026 by rpki-client