Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: PKWLOm5tA+4RmeSpbSsf2bZNcEoF40gIGdXFeWONRl0=
Subject key identifier: CC:07:8A:BB:5A:30:94:EF:85:7F:CA:A1:75:06:62:54:B6:86:04:B2
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 01A1784C7A1B40052FA8C5A9F39ABE2E16F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 13:00:40 +0000
Manifest this update: Mon 26 Oct 2026 13:00:40 +0000
Manifest next update: Tue 27 Oct 2026 13:00:40 +0000
Files and hashes: 1: 6MT8gBwfYHWN7Sq2KVrJZlNQ-Ps.roa (hash: DvaijMExSYKtFCkDw2S7VYWVS8RZwCohsUuXaIZZ+u0=)
2: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: cO5RYK/RekNYvqxbhjwJR+pwrste7AinjJiPiIoHRw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:7a:1b:40:05:2f:a8:c5:a9:f3:9a:be:2e:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Oct 26 13:00:40 2026 GMT
Not After : Oct 27 13:00:40 2026 GMT
Subject: CN=cc078abb5a3094ef857fcaa175066254b68604b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:fc:ee:11:03:1e:77:1d:ac:df:83:b5:89:
5b:8b:6e:2e:ab:2a:93:6b:5c:6c:b7:fc:5d:76:23:
ec:a1:40:e8:57:7f:0b:dc:d9:3b:2a:ee:00:73:2e:
45:e7:35:ea:04:03:b4:52:13:8a:fe:fc:5e:43:ff:
55:a0:93:6c:e5:36:90:dd:f4:53:05:61:e6:96:3b:
14:44:0a:d2:72:6e:0d:a6:05:95:2e:96:8b:0f:3c:
d4:e3:a9:bd:a0:60:9e:21:3c:c0:f4:60:3d:56:f6:
a7:43:8c:b5:02:ab:63:cf:67:d8:d1:62:e3:5b:4d:
06:f7:ed:15:4b:7a:b6:29:7d:d1:1d:b1:97:fb:2a:
0b:5a:c3:a0:0c:16:7c:22:ee:3b:41:1f:53:12:e4:
ff:7d:08:f7:dc:9d:6f:b1:81:2a:f3:17:ed:ff:d9:
4b:74:63:57:16:ef:3c:1f:5b:e5:fa:18:21:22:29:
3a:c1:c4:9b:bc:84:bd:4e:63:d4:c3:7f:77:8c:df:
43:5e:a2:40:d7:2b:6b:4f:d0:91:c5:26:78:d7:ed:
da:b4:ad:6a:71:1d:5e:d2:c5:2a:7a:9c:24:d1:aa:
28:3c:8c:40:35:cf:8d:a0:93:6f:e7:fc:30:9d:35:
72:72:87:b0:b6:1e:bb:98:a7:15:8b:e5:4d:9e:3f:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:8A:BB:5A:30:94:EF:85:7F:CA:A1:75:06:62:54:B6:86:04:B2
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:11:61:e5:b4:d6:d6:5a:82:b9:4d:b8:8d:77:29:1d:3c:
06:34:96:f7:30:b3:ba:11:ad:e8:a1:6d:70:8d:d7:90:18:11:
ce:aa:76:f4:40:8c:69:87:83:29:c0:bc:fe:a2:55:38:6f:e9:
d8:ed:d9:ad:df:5e:90:0c:03:eb:33:6f:62:20:65:87:12:f1:
8c:74:24:44:c0:45:1c:e3:62:54:a2:fe:1c:6b:1f:19:41:99:
ff:b1:43:e4:a7:9a:f7:55:26:17:52:e7:67:71:02:e9:1c:19:
80:5b:f3:e1:94:0e:66:85:a8:e8:4b:8a:c7:b5:b1:2d:20:62:
62:20:66:c2:d8:21:68:01:de:f1:47:59:fe:1c:79:c6:46:60:
a7:04:ab:35:09:d7:53:b8:fa:d2:95:51:3e:48:1f:93:8d:7d:
e4:74:7e:d3:4e:13:85:61:b5:ec:3f:31:0f:67:fa:25:42:1c:
d6:c2:a8:2b:81:2d:8f:48:bb:25:e4:e7:fd:5b:21:34:22:24:
35:bb:ba:0e:2b:bd:57:30:a6:5d:96:51:ec:ef:fd:8c:5f:aa:
e7:2d:d0:fc:9d:b2:08:d2:15:8c:32:d0:4e:15:c7:51:22:16:
c2:c3:b9:44:e8:bb:41:c9:41:90:55:e7:6b:6f:35:0f:b8:03:
7f:96:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:36 2026 by rpki-client