Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: f5o9f9ONnj0fi4VQAnVxAHy2tUf+P2TBCNtjxgPnjlA=
Subject key identifier: 80:62:CC:EC:52:25:97:B6:FE:3D:72:80:46:C6:5E:DF:AC:49:5A:13
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 019D3B9D2CBE640FBFF7BD3638BDE1BCF391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 22:00:49 +0000
Manifest this update: Sun 29 Mar 2026 22:00:49 +0000
Manifest next update: Mon 30 Mar 2026 22:00:49 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: v4IJQto5NWU6wqT+y6GsRtz/yfBn6rd66gL4aFNe6fM=)
2: wZYLGJBlCTJUsX-eSFhRzVh3OJs.roa (hash: eKqFE/Zg8siqql4lhjgWwbmByQIzTXxNcXcT1aXdcZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:9d:2c:be:64:0f:bf:f7:bd:36:38:bd:e1:bc:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Mar 29 22:00:49 2026 GMT
Not After : Mar 30 22:00:49 2026 GMT
Subject: CN=8062ccec522597b6fe3d728046c65edfac495a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:9d:8b:ab:8c:f4:b1:1f:31:58:1b:0d:29:
a4:b0:93:c3:85:24:fa:93:d1:c9:6d:fe:75:6c:e6:
47:5d:75:f1:2e:13:88:51:b8:a7:ca:86:a6:28:15:
33:73:f2:7a:99:14:ef:61:13:f3:f7:14:6a:9b:b9:
58:e8:2b:03:ba:ae:23:44:58:d9:27:d3:3c:4a:56:
30:20:5f:f2:ed:e8:03:a1:b5:61:60:1c:67:52:21:
e5:5a:1d:2e:52:36:85:dd:04:6c:9b:41:9e:db:27:
24:04:05:45:58:b7:5f:ef:72:20:86:bd:f3:1e:97:
30:ba:0b:54:fd:7c:80:d8:1f:65:6b:e0:c4:fe:ff:
b8:92:bf:7f:a1:70:61:f8:0c:1c:1c:c1:8d:0d:a4:
f1:d3:7b:57:ec:1d:ce:43:4a:c7:71:ea:5b:70:e6:
5e:27:7e:57:66:4c:d3:87:21:3e:d2:b1:31:06:8f:
b4:a5:e4:c9:4c:1f:d0:09:06:d7:2a:52:f1:2d:bd:
1d:53:20:9a:da:0c:95:e1:93:70:37:c6:c5:f2:f7:
8e:1c:f7:35:14:6c:bd:62:a3:06:f3:3f:35:ca:07:
60:4f:00:3e:a4:a9:46:f2:1d:26:25:49:1b:a8:d4:
fb:40:01:b4:a7:52:63:6b:23:c5:ae:92:e4:a1:c9:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:CC:EC:52:25:97:B6:FE:3D:72:80:46:C6:5E:DF:AC:49:5A:13
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ab:92:05:7b:58:11:8a:b2:77:f8:96:5f:af:62:3d:2d:74:
64:10:79:12:5e:af:0a:4e:c6:19:dc:c6:82:99:d6:23:63:a2:
3a:0e:02:8f:23:a4:b3:7d:60:c5:c0:90:77:ae:86:86:7b:b6:
a5:69:b9:4e:75:f0:22:47:09:6e:fd:d8:90:d0:89:4e:1e:56:
31:b0:28:57:f1:7b:72:30:a8:ee:e4:71:4a:15:7d:92:92:ec:
b9:d2:83:5b:8e:df:ce:7b:98:d0:de:c6:6f:1a:ba:64:79:c5:
4b:c2:91:66:20:e2:26:c0:78:c7:4e:dc:28:a7:2c:ca:1b:4c:
7c:1a:7c:66:4c:0a:45:05:57:7f:7c:fe:50:16:c7:35:70:bb:
03:ec:d9:02:58:f1:05:85:a0:fa:35:a5:b7:73:9f:f9:7e:93:
87:5e:bd:e6:73:4c:29:39:4c:5e:ed:d4:3b:8c:24:7e:55:23:
9e:3a:3a:55:f3:6c:b7:45:f6:07:4c:34:30:7d:55:34:98:83:
cb:3d:15:56:e2:a2:47:89:72:b7:0a:f5:d3:5e:e3:1e:23:02:
93:08:c6:de:e8:02:a4:07:9f:47:d4:eb:4a:dc:aa:23:ad:50:
a0:96:77:f1:d4:37:80:f9:ca:5f:a0:6c:54:10:d5:3a:01:e2:
a8:1e:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:42:28 2026 by rpki-client