Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: 3Q9St6GsRhCTZgUGNBjUvPwihTI/SF0Bx8F8Wj7yu4E=
Subject key identifier: 32:68:B3:C2:75:13:82:54:FC:52:58:B4:93:8C:00:08:29:2C:37:D5
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 019D39410696F2D37A47B92E2EF1C53451C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 10CF
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: 7UgOfAryKR6nH4u4WXIH/4k+p+FavbMRVeEwoYBbVaQ=)
2: uqh5vzYZR8kX59fW4ktNNDTjJJM.roa (hash: Q1Pg0MQt19v7W47q/hykMRMDeFtrQ4HcqUWfZqD3sPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:06:96:f2:d3:7a:47:b9:2e:2e:f1:c5:34:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=3268b3c275138254fc5258b4938c0008292c37d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:af:86:19:e6:77:7c:bd:a2:98:97:74:74:
f5:8d:84:7a:21:2c:f2:a1:64:51:7e:09:e8:ff:5e:
86:2f:66:ef:71:57:fe:24:6f:a2:b3:22:06:9a:c7:
b8:db:d4:a4:b9:4b:d3:d2:8d:b2:41:c8:2e:5e:ac:
ba:a0:1b:6e:11:ca:81:a5:c7:5e:8d:38:04:89:c4:
b4:be:04:87:3e:1f:81:a3:95:25:99:ea:fb:a6:f2:
d5:45:9c:09:8c:35:5d:cc:d5:52:44:aa:76:5e:c0:
3e:82:ab:a9:b2:e2:fa:6c:a6:00:ef:39:0a:8b:20:
7b:1a:99:31:73:8e:4a:20:20:09:c6:7e:b6:16:b6:
69:5e:6e:dc:73:5c:45:50:52:e0:c6:f7:9c:d8:75:
1e:f0:4f:a8:d4:55:86:55:95:2d:ca:cd:8a:9a:c4:
65:61:5e:de:98:e1:80:8e:14:60:10:8e:1a:9b:e0:
aa:2b:10:a3:3d:7e:21:bc:5c:c6:23:29:95:f5:f2:
4f:04:f5:09:66:a0:59:1a:a5:c5:5f:ac:f2:81:9a:
0e:54:06:f8:87:56:03:e7:ed:c1:88:e7:e3:ab:26:
e5:50:a1:19:ed:13:1f:27:e3:f8:48:0c:f5:08:93:
8c:2a:05:56:fa:80:aa:5d:ba:3d:b9:91:4b:96:02:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:B3:C2:75:13:82:54:FC:52:58:B4:93:8C:00:08:29:2C:37:D5
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:1e:e6:18:36:68:d5:07:27:de:fa:97:39:03:1d:e8:e4:
1f:bb:92:42:68:f3:b2:c5:88:19:a2:2b:48:bb:8f:15:8c:41:
fc:06:03:58:4d:a9:19:a1:22:ab:0e:93:fe:ff:7d:70:b4:6c:
70:f1:70:70:4f:3a:ea:a1:1b:6b:8d:ad:22:06:96:e5:f8:57:
22:e2:87:e7:bc:d9:87:f7:3c:a9:a2:e6:d2:c3:41:04:fd:94:
17:e8:d6:3e:41:3b:38:c9:5d:48:6d:86:22:02:f3:14:87:b2:
92:0d:5c:6c:59:ee:15:aa:1d:7e:94:9c:93:c0:76:e9:96:ca:
d0:c8:75:98:cd:c3:2c:d6:99:81:f0:b0:ee:ae:c3:1d:dd:b4:
60:da:f1:51:a2:7e:07:6d:87:ea:19:e0:c2:7d:15:09:33:f7:
fe:4a:14:b2:b2:0c:a9:03:d1:83:74:bc:ee:b1:29:59:7b:5b:
ec:83:d0:7e:a4:d4:7e:06:bb:20:59:ab:f5:89:76:5a:53:b2:
e4:0a:ba:68:67:f7:1e:d5:dd:34:65:f6:96:aa:c2:48:17:61:
c4:b1:22:a6:26:dc:f8:d8:e5:b3:05:14:8f:d8:3d:73:7d:73:
ef:79:bb:5a:24:e7:c0:99:37:cf:36:11:fd:79:57:a1:f8:58:
43:99:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:02 2026 by rpki-client