Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
File: FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json)
Hash identifier: OQZ6JAz4WCsNGPt+aMdHTlM9vQ+DzCG5jZXbv6d2+QE=
Subject key identifier: 13:00:0B:A2:6E:C4:AF:76:93:18:E0:F1:5F:E0:06:82:4B:39:D2:96
Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
Certificate issuer: /CN=14754e863d117ce6210f295461a8c6aa043c6c80
Certificate serial: 01A08A8D0B600DF151806C55B3C08FD43C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 09:01:34 +0000
Manifest this update: Thu 10 Sep 2026 09:01:34 +0000
Manifest next update: Fri 11 Sep 2026 09:01:34 +0000
Files and hashes: 1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: k5Wjy8GIxyqDFgR/OWD6d5rR/GaSOfUidWen32wQGC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0b:60:0d:f1:51:80:6c:55:b3:c0:8f:d4:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80
Validity
Not Before: Sep 10 09:01:34 2026 GMT
Not After : Sep 11 09:01:34 2026 GMT
Subject: CN=13000ba26ec4af769318e0f15fe006824b39d296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:48:a0:66:48:bf:c5:e0:c9:3f:13:ac:07:
7c:72:9a:22:84:76:12:6e:9e:c7:55:70:07:fd:32:
fc:29:e7:90:d3:21:c2:41:c0:c0:1f:69:be:e3:ae:
f0:0d:35:34:64:51:71:08:9f:aa:b1:9e:22:fe:0c:
e6:57:7d:e0:12:98:ff:88:0a:1c:10:2d:b0:5a:0f:
da:67:19:11:1e:44:b1:54:c0:d4:35:0c:6c:6c:32:
33:8a:67:2e:ba:10:83:2a:41:30:be:d4:c8:77:dd:
00:fe:a2:43:83:d0:ac:a8:cd:57:15:60:28:45:d6:
e0:d8:a1:3e:aa:fa:0e:e5:03:ba:f7:1e:9e:8d:9f:
1f:aa:d9:a9:92:ae:37:04:55:1b:d1:88:48:4b:26:
8a:cb:dc:78:5e:4c:f5:1d:73:87:e2:6a:8e:4b:8b:
43:ab:48:10:dd:66:de:94:82:b5:46:2f:77:b6:d1:
c4:35:a5:c0:f8:fb:a7:91:46:fb:3d:24:57:91:2c:
1d:62:e0:d1:ae:c1:e7:51:a7:65:5e:f5:f0:3a:f7:
d3:a1:00:f4:a0:43:40:c0:44:b9:82:93:22:bd:94:
4d:da:0e:92:88:2c:0a:9a:36:dc:54:59:48:4d:55:
a1:4f:86:f8:ff:0a:de:55:ed:c9:af:1b:0b:b1:b9:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:0B:A2:6E:C4:AF:76:93:18:E0:F1:5F:E0:06:82:4B:39:D2:96
X509v3 Authority Key Identifier:
keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:3e:f5:7d:52:0b:93:9e:00:7d:b3:2a:e5:4e:da:1a:5e:
1e:27:eb:6c:f0:43:9b:95:c5:02:84:f1:c1:f9:9f:ae:08:71:
88:9e:0e:20:2a:9d:6e:36:1e:7c:38:cb:0a:f7:67:45:5e:28:
d1:49:c4:1c:43:ee:5d:31:8b:08:77:07:81:69:86:a9:19:d1:
50:92:e5:e1:a0:c8:7b:f4:0f:25:af:ff:7b:aa:dc:07:9e:7f:
c8:86:0f:20:10:5a:5a:fd:bd:d7:d4:b9:2e:cb:df:c7:7a:c9:
1c:ff:dd:f6:38:cd:30:78:c6:ec:c4:31:bd:3e:3f:53:94:9c:
99:ef:31:63:5f:cf:ec:bf:d9:86:60:4f:8d:4c:ff:b9:56:a8:
3e:0c:d7:b6:7b:59:7b:4f:1e:74:53:57:23:52:1f:1a:51:ac:
7e:33:e0:f1:e8:45:83:2a:a0:8e:7f:40:0d:76:7b:84:21:02:
29:2b:66:99:d0:0b:62:20:44:36:6b:dd:42:28:22:5f:4a:92:
d7:65:b3:65:8e:c3:58:6c:e6:11:ea:bd:57:31:52:fd:3a:c5:
6f:fb:d6:bf:63:ef:bc:4a:c1:e6:26:ed:14:b9:47:3e:96:71:
24:e6:e0:53:71:7b:ec:2b:ab:87:27:d1:99:d4:43:04:a2:14:
ff:b1:bb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQtgDfFRgGxVs8CP1DyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz
YzZjODAwHhcNMjYwOTEwMDkwMTM0WhcNMjYwOTExMDkwMTM0WjAzMTEwLwYDVQQD
EygxMzAwMGJhMjZlYzRhZjc2OTMxOGUwZjE1ZmUwMDY4MjRiMzlkMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4hIoGZIv8XgyT8TrAd8cpoihHYS
bp7HVXAH/TL8KeeQ0yHCQcDAH2m+467wDTU0ZFFxCJ+qsZ4i/gzmV33gEpj/iAoc
EC2wWg/aZxkRHkSxVMDUNQxsbDIzimcuuhCDKkEwvtTId90A/qJDg9CsqM1XFWAo
Rdbg2KE+qvoO5QO69x6ejZ8fqtmpkq43BFUb0YhISyaKy9x4Xkz1HXOH4mqOS4tD
q0gQ3WbelIK1Ri93ttHENaXA+PunkUb7PSRXkSwdYuDRrsHnUadlXvXwOvfToQD0
oENAwES5gpMivZRN2g6SiCwKmjbcVFlITVWhT4b4/wreVe3JrxsLsbnLCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMAC6JuxK92kxjg8V/gBoJLOdKWMB8GA1UdIwQY
MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt
YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0
LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoU+9X1S
C5OeAH2zKuVO2hpeHifrbPBDm5XFAoTxwfmfrghxiJ4OICqdbjYefDjLCvdnRV4o
0UnEHEPuXTGLCHcHgWmGqRnRUJLl4aDIe/QPJa//e6rcB55/yIYPIBBaWv2919S5
Lsvfx3rJHP/d9jjNMHjG7MQxvT4/U5Scme8xY1/P7L/ZhmBPjUz/uVaoPgzXtntZ
e08edFNXI1IfGlGsfjPg8ehFgyqgjn9ADXZ7hCECKStmmdALYiBENmvdQigiX0qS
12WzZY7DWGzmEeq9VzFS/TrFb/vWv2PvvErB5ibtFLlHPpZxJObgU3F77CurhyfR
mdRDBKIU/7G7gA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:25 2026 by rpki-client