Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: uh/pC8UGQ1l3x49tBKK+4yCSnuXYg+Sh0tQmw0WIejQ=
Subject key identifier: 49:95:A5:67:77:CA:F1:14:F8:8A:95:2C:6B:E8:A9:09:14:8E:22:70
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 01A0024AE866CA9BF7D3625DAB61561D5E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 22:00:58 +0000
Manifest this update: Fri 14 Aug 2026 22:00:58 +0000
Manifest next update: Sat 15 Aug 2026 22:00:58 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: xM71U4iWbfdyqA6XwG9OeemrBIHIGoRD+HuaATKPoKA=)
2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:e8:66:ca:9b:f7:d3:62:5d:ab:61:56:1d:5e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Aug 14 22:00:58 2026 GMT
Not After : Aug 15 22:00:58 2026 GMT
Subject: CN=4995a56777caf114f88a952c6be8a909148e2270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:53:79:f9:4b:3e:67:4b:f0:3a:b9:53:2e:
88:e3:9d:46:06:8d:7d:ee:9d:8c:25:35:ef:90:20:
c7:89:94:55:0c:25:ef:0c:ef:72:b1:eb:ae:bd:e4:
e6:72:f9:ce:23:68:d0:9f:fa:7f:c5:10:f2:8b:52:
7b:0d:63:8e:82:a0:90:43:e5:8b:0e:4e:ab:86:25:
6c:37:d1:26:e2:b3:f6:8f:29:73:8a:d6:67:e3:18:
9a:dc:86:72:85:7d:e2:d8:ef:65:5c:e9:ce:41:2f:
be:74:cc:63:b7:d9:e7:28:8c:56:28:ca:9c:fa:c2:
bb:89:1e:79:8f:aa:13:c2:74:d0:87:fe:20:26:af:
8f:1c:ea:3a:07:75:db:79:2a:ea:1d:12:9c:6a:7a:
0f:ad:c3:99:ad:f3:82:fa:3b:69:c8:4c:0a:33:d8:
e9:d1:11:5a:12:25:6d:58:32:12:86:e3:54:b1:a1:
f4:e6:50:0e:15:8a:14:a9:91:5c:3f:ac:a1:11:26:
81:66:0f:b7:95:22:52:3a:52:83:f9:4c:a6:be:9a:
1a:56:d0:ea:0d:90:22:f7:80:e8:4e:e2:93:2b:8e:
aa:58:9a:91:ec:69:59:68:ba:b7:f2:f8:5b:98:76:
1f:07:f1:b2:e7:2e:21:a7:3c:0d:fe:f3:79:59:a5:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:A5:67:77:CA:F1:14:F8:8A:95:2C:6B:E8:A9:09:14:8E:22:70
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:16:aa:ae:b9:94:57:42:5c:f9:88:23:9a:7a:c6:ee:fa:
42:36:49:d8:e9:bd:c7:79:02:b9:6b:c6:c0:11:9d:4d:ad:92:
89:c8:1e:4f:f7:3d:6b:de:c7:8e:34:be:77:9f:1f:5c:31:00:
9f:ad:2f:47:44:0f:77:99:59:68:23:aa:e6:e8:cc:21:59:ae:
d7:c9:11:55:80:05:0d:c9:5b:87:4b:f2:61:90:cf:98:04:3a:
8f:bc:90:4d:ee:6f:9c:92:dc:ad:0c:0e:a2:11:ae:4a:ed:46:
43:01:f5:ea:54:3b:22:36:6e:89:2e:c9:f7:8e:b9:ec:d6:ca:
18:28:af:f4:6e:a2:26:41:96:6f:2d:26:e3:01:53:94:2d:10:
f8:01:84:3e:70:c7:06:d8:c7:8c:75:21:b0:3c:d1:57:f1:88:
32:a4:3e:07:0f:05:76:ce:e5:57:56:c7:36:2a:2b:2b:9a:72:
3d:99:33:73:44:29:3c:f6:fe:83:d9:4a:e3:73:44:cc:4e:aa:
d6:72:80:e9:40:72:6e:66:45:65:e0:0a:48:cb:d3:2f:ea:77:
ed:30:86:22:8e:08:22:c7:10:49:96:f5:29:0e:b3:05:0f:13:
e6:99:c1:a4:37:e4:25:f3:a9:81:43:c0:70:9b:ea:d5:0d:45:
bf:af:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:13:52 2026 by rpki-client