Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
File: FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft (raw, json)
Hash identifier: m9lQGVdzDOYIcYZo0gCupZgWVg7545DiLNkk6sy3La0=
Subject key identifier: EF:83:27:12:86:16:7F:9F:EE:95:73:A8:02:5A:27:92:14:7C:C5:CE
Authority key identifier: 14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
Certificate issuer: /CN=14f33c2e90be26360684afd50d71da54f50a45b8
Certificate serial: 01A0EB1CBEA31C27047411CB9DE6E4367F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:02:04 +0000
Manifest this update: Tue 29 Sep 2026 03:02:04 +0000
Manifest next update: Wed 30 Sep 2026 03:02:04 +0000
Files and hashes: 1: FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl (hash: 5GxJbHHnCgf7zkWxV/Gy1QLGaqLWil5tF364crzd/tE=)
2: GDHkLZC4ICOFk1gF37ViWc8G4K8.asa (hash: ShNEg2a4VzZQK89j/BS8Dv4tTFffxAezQPXk3PULYec=)
3: aq1PVhxdKoO_iDtBxNMm9TZ1q6E.roa (hash: 5ofHUy4EjDyelXgpgqiecAYdkBVetFci1OyzEvf4bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:be:a3:1c:27:04:74:11:cb:9d:e6:e4:36:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f33c2e90be26360684afd50d71da54f50a45b8
Validity
Not Before: Sep 29 03:02:04 2026 GMT
Not After : Sep 30 03:02:04 2026 GMT
Subject: CN=ef83271286167f9fee9573a8025a2792147cc5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:41:8d:9d:d0:67:32:fa:84:ed:13:8f:14:
81:b5:ef:ee:c8:8d:3d:63:e1:57:77:58:9c:98:c5:
75:f0:5a:53:5c:eb:1c:5b:e8:cf:84:56:a4:54:44:
74:4b:3f:31:bb:8e:61:35:06:2d:01:22:ad:28:bc:
b1:5e:8e:f0:fe:02:42:e0:fa:03:73:8a:96:c7:45:
f6:4e:6a:f4:02:c6:9f:62:ab:ff:69:1e:85:08:67:
41:1c:ec:a2:2f:fd:5d:7f:43:f7:9b:03:1d:fb:31:
e7:5c:e1:0e:27:d9:db:df:83:3f:e6:bb:5b:fe:8a:
0b:c8:3c:71:b3:fa:4d:58:5f:9d:15:fc:a3:d6:b8:
33:e6:40:03:c5:98:64:aa:8a:1f:e1:b9:b7:cd:28:
17:24:45:87:7d:36:1d:dd:94:d4:2d:d2:27:d2:2f:
94:24:ac:7b:94:69:f4:f9:4d:f6:de:d1:1d:9c:65:
a2:f3:dd:92:09:00:41:24:13:0b:b5:3f:62:f9:a2:
8a:95:80:f5:76:70:43:8c:88:be:56:79:c6:3b:02:
26:68:83:94:70:bb:4c:42:e2:ab:69:c5:7f:3e:34:
a6:89:75:7d:7b:df:62:6d:17:e7:e5:d6:92:f0:4c:
93:b3:ca:f3:6c:d1:72:fe:b4:53:11:a1:f2:70:52:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:27:12:86:16:7F:9F:EE:95:73:A8:02:5A:27:92:14:7C:C5:CE
X509v3 Authority Key Identifier:
keyid:14:F3:3C:2E:90:BE:26:36:06:84:AF:D5:0D:71:DA:54:F5:0A:45:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPM8LpC-JjYGhK_VDXHaVPUKRbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/FPM8LpC-JjYGhK_VDXHaVPUKRbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:32:e3:fd:83:ff:8f:c5:f2:9f:c5:c9:42:0b:07:fc:08:
5f:c7:70:46:37:30:9a:fb:6b:1a:0e:30:6d:92:ba:97:06:ee:
fd:8b:33:8d:e5:77:ee:ec:c5:c6:bd:8a:46:b4:c0:71:56:31:
43:9e:4d:2d:50:87:c6:ff:57:c2:f3:b7:2a:f3:77:7f:a2:1e:
48:ce:fd:5d:21:b1:8e:74:e9:9a:b2:5f:1d:33:f4:a3:ee:fc:
ad:a7:51:f7:2a:9a:de:3a:27:8e:83:e5:43:89:16:e3:64:9f:
24:0a:4c:86:d2:bf:58:23:93:3f:21:33:79:b8:14:63:9c:fa:
9f:d9:72:2b:b6:ce:59:0a:27:20:6b:82:80:ed:5c:b6:33:0a:
ea:83:f6:76:5c:c0:d3:91:79:48:e7:0e:ca:2d:6e:e2:cd:af:
3e:10:28:c0:4d:80:5d:73:40:b3:b8:9d:94:2a:61:08:53:bf:
ca:84:e2:81:6f:a8:be:a8:00:84:e1:92:09:b2:88:ee:2d:23:
7b:ae:ae:9c:6f:df:33:77:5d:d0:ad:db:85:9f:a6:4b:84:00:
43:9b:d3:dd:1d:2c:85:f3:c5:8d:ac:bf:71:d2:da:66:cc:bd:
9e:9d:27:47:77:99:2b:be:0c:64:cf:1b:ab:ad:3f:08:e3:58:
b7:c8:e1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHL6jHCcEdBHLnebkNn9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZjMzYzJlOTBiZTI2MzYwNjg0YWZkNTBkNzFkYTU0ZjUw
YTQ1YjgwHhcNMjYwOTI5MDMwMjA0WhcNMjYwOTMwMDMwMjA0WjAzMTEwLwYDVQQD
EyhlZjgzMjcxMjg2MTY3ZjlmZWU5NTczYTgwMjVhMjc5MjE0N2NjNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVpBjZ3QZzL6hO0TjxSBte/uyI09
Y+FXd1icmMV18FpTXOscW+jPhFakVER0Sz8xu45hNQYtASKtKLyxXo7w/gJC4PoD
c4qWx0X2Tmr0AsafYqv/aR6FCGdBHOyiL/1df0P3mwMd+zHnXOEOJ9nb34M/5rtb
/ooLyDxxs/pNWF+dFfyj1rgz5kADxZhkqoof4bm3zSgXJEWHfTYd3ZTULdIn0i+U
JKx7lGn0+U323tEdnGWi892SCQBBJBMLtT9i+aKKlYD1dnBDjIi+VnnGOwImaIOU
cLtMQuKracV/PjSmiXV9e99ibRfn5daS8EyTs8rzbNFy/rRTEaHycFK20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+DJxKGFn+f7pVzqAJaJ5IUfMXOMB8GA1UdIwQY
MBaAFBTzPC6QviY2BoSv1Q1x2lT1CkW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlBNOExwQy1KallHaEtfVkRYSGFWUFVLUmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt
NGY4OTAyYmZlMTcyLzEvRlBNOExwQy1KallHaEtfVkRYSGFWUFVLUmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy
LzEvRlBNOExwQy1KallHaEtfVkRYSGFWUFVLUmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0My4/2D
/4/F8p/FyUILB/wIX8dwRjcwmvtrGg4wbZK6lwbu/YszjeV37uzFxr2KRrTAcVYx
Q55NLVCHxv9XwvO3KvN3f6IeSM79XSGxjnTpmrJfHTP0o+78radR9yqa3jonjoPl
Q4kW42SfJApMhtK/WCOTPyEzebgUY5z6n9lyK7bOWQonIGuCgO1ctjMK6oP2dlzA
05F5SOcOyi1u4s2vPhAowE2AXXNAs7idlCphCFO/yoTigW+ovqgAhOGSCbKI7i0j
e66unG/fM3dd0K3bhZ+mS4QAQ5vT3R0shfPFjay/cdLaZsy9np0nR3eZK74MZM8b
q60/CONYt8jhaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:24:12 2026 by rpki-client