Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
File: FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft (raw, json)
Hash identifier: rFhJ1e5+4VXQEUeYxgEhrJzQ+wce2aeMg/6HtP0XCMA=
Subject key identifier: BD:43:95:54:5F:9B:69:9E:2B:24:F7:20:45:4F:17:66:65:23:8D:74
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 01A0ED0BEACACAF036563179C3C34889E5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:56 +0000
Manifest this update: Tue 29 Sep 2026 12:02:56 +0000
Manifest next update: Wed 30 Sep 2026 12:02:56 +0000
Files and hashes: 1: FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl (hash: +bZB2QIODp6uMyj5tt6fWtHtN+73N6r+DzY7r97lVIE=)
2: GDHkLZC4ICOFk1gF37ViWc8G4K8.asa (hash: ShNEg2a4VzZQK89j/BS8Dv4tTFffxAezQPXk3PULYec=)
3: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (hash: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:ea:ca:ca:f0:36:56:31:79:c3:c3:48:89:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Sep 29 12:02:56 2026 GMT
Not After : Sep 30 12:02:56 2026 GMT
Subject: CN=bd4395545f9b699e2b24f720454f176665238d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:d0:8b:f6:82:b9:c2:46:d1:c0:ac:f3:3c:
8f:99:cb:d4:56:85:3f:01:d6:08:66:d7:ea:94:84:
01:dd:81:5e:99:78:36:68:fd:7b:ef:51:7d:71:3d:
d0:16:8a:4a:89:89:47:d3:83:91:de:04:41:4a:3c:
d0:15:d1:3e:d4:b6:ff:68:7e:b4:e2:c8:c7:e6:b0:
c4:d4:85:40:40:8b:67:63:c7:64:d7:65:cf:00:ee:
ca:51:09:13:da:cc:b6:4a:9c:6f:68:09:17:a2:b4:
bf:ca:5f:b7:0e:65:7d:43:f6:a5:0b:94:fc:7a:80:
77:7b:83:da:d2:bc:57:a9:81:ab:65:7e:a2:24:46:
59:70:be:74:62:05:da:90:de:12:6f:d7:4b:d4:03:
1d:0f:ef:66:3d:a3:3b:24:0e:b9:fa:00:3d:e8:b8:
d1:e6:5e:91:2e:7d:b3:61:5f:e7:b5:e4:70:c4:a1:
2b:e9:c9:80:80:b3:58:b9:0e:15:f0:64:3e:bf:15:
f8:1f:7b:c0:af:cb:2e:db:9b:6f:43:5f:91:b5:39:
0c:ee:0c:af:f6:24:8b:d3:27:c4:45:75:ea:30:60:
47:67:c3:b5:0e:21:7e:a0:03:ae:b2:17:a6:a6:15:
3a:12:fd:72:6a:71:7a:a4:d8:3b:d5:97:b6:f4:d5:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:95:54:5F:9B:69:9E:2B:24:F7:20:45:4F:17:66:65:23:8D:74
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7b:94:a8:a0:97:36:1d:b6:98:08:de:36:86:39:25:0f:dc:
50:c1:77:a2:cc:24:cd:13:f1:75:dd:91:ed:d1:5e:85:69:e1:
36:d6:5f:aa:2f:a2:7a:55:e3:1f:53:1f:4f:d2:a2:fe:e1:8d:
7e:0d:bf:99:9d:99:23:3a:63:00:b6:f2:48:b7:1f:67:d6:6d:
d3:08:f5:6b:6f:5e:bd:5c:cc:86:79:17:27:ab:b4:98:ad:1f:
34:18:4d:e6:0d:41:52:df:30:96:e7:92:2a:bc:24:0c:26:fe:
27:f8:5f:1a:3d:56:e9:74:87:2a:82:ce:52:e9:73:70:20:aa:
39:7b:12:34:e0:83:dc:01:2a:4c:82:df:71:f3:60:12:64:f7:
98:4b:9b:a8:ed:db:b5:2d:8f:a7:28:2f:03:c1:db:94:16:6e:
35:19:0f:f6:1e:fe:00:6b:5a:62:2b:e3:85:ad:1b:d1:78:30:
de:50:fe:7b:d2:d4:59:3c:ae:64:b0:d1:3d:3b:53:ee:07:68:
a5:f3:7e:dd:85:3c:2c:22:39:94:b3:7d:3d:42:58:d6:f8:3d:
66:e7:94:36:43:20:fc:b5:e3:1a:39:e8:2b:34:61:78:38:8a:
77:ba:18:f5:c2:33:83:54:71:4f:75:46:85:6d:4f:05:33:6f:
d3:ab:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:26:30 2026 by rpki-client