Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: /zzGFKFLP0nEQF6fzhb4MmLWNHbyOk10zKBszvMC5TI=
Subject key identifier: F9:AE:98:3D:46:F1:BD:E8:C4:D0:A1:6D:63:2B:F3:97:8C:4F:E2:39
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019E6EACFD07DFC6C7D5E9B1EA03F91B2BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: AB
Signing time: Thu 28 May 2026 13:01:30 +0000
Manifest this update: Thu 28 May 2026 13:01:30 +0000
Manifest next update: Fri 29 May 2026 13:01:30 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: JZmCCgRi0TXtw6P1GanG+v/B31nOYB+W7XSis9bEvIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:ac:fd:07:df:c6:c7:d5:e9:b1:ea:03:f9:1b:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: May 28 13:01:30 2026 GMT
Not After : May 29 13:01:30 2026 GMT
Subject: CN=f9ae983d46f1bde8c4d0a16d632bf3978c4fe239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:51:5f:9e:30:57:ad:b6:0a:44:94:59:76:
73:34:11:35:f8:02:7f:f6:48:b6:3f:6c:cc:30:3d:
77:d6:f1:8d:87:2c:a3:d4:ff:50:9e:07:d4:6b:6b:
7b:6c:4b:5e:b3:c4:c0:30:f2:46:d6:21:9f:41:a3:
ce:ca:3f:d3:31:95:c0:89:96:8d:86:94:d6:81:5c:
e1:16:af:a5:30:a7:31:96:15:5c:1d:a1:aa:56:c0:
47:e1:77:31:90:c9:ba:36:3d:0d:f1:9e:a2:d2:99:
cd:78:35:1f:e8:46:c7:b6:01:bc:14:02:fc:9f:f5:
02:44:b6:a8:8c:90:7d:36:1b:c3:05:fb:ea:aa:b6:
6b:50:bd:0a:9e:54:7c:2e:71:34:1b:13:bc:15:37:
b6:a4:e2:96:09:de:ac:59:ce:1c:ed:4e:b7:b1:2a:
85:d7:81:26:59:e8:5a:53:6a:bc:51:03:7f:63:0c:
82:7e:ef:c2:b4:91:3a:b7:0c:29:0d:0e:c0:8b:e6:
f5:e5:08:de:ce:12:6c:79:bd:a1:d2:3c:c8:e6:f6:
59:b4:ea:14:4e:4f:2e:0c:6f:1c:f6:b2:82:98:f3:
1c:9d:80:78:ee:dc:79:84:ff:09:41:0c:8e:1b:26:
8f:16:99:71:09:f3:8c:3b:d7:ec:3d:18:f4:a0:e9:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:98:3D:46:F1:BD:E8:C4:D0:A1:6D:63:2B:F3:97:8C:4F:E2:39
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2a:1f:8b:a7:91:67:6d:72:dd:56:d8:f8:62:3a:b5:c3:8f:
3d:9a:6c:05:4a:64:59:f7:fa:1c:fe:35:27:1b:ed:fb:9e:48:
c2:d5:54:49:99:2b:fd:18:67:f2:7e:d5:9f:93:f1:08:95:9c:
85:23:16:63:e5:64:99:70:8c:f7:ef:62:a8:38:7c:e0:51:af:
86:1b:6e:a7:f2:1a:9a:bb:8d:8a:19:66:e2:b8:74:8a:d1:48:
5b:1e:36:83:14:77:99:12:47:38:92:40:08:34:31:86:e0:47:
52:a4:1e:76:a8:e1:9a:d1:d1:59:66:94:06:04:3e:6a:dd:04:
94:ef:25:7d:0f:57:df:40:f6:7d:34:63:9c:54:c7:19:29:51:
31:9a:5e:64:22:81:36:27:c1:dd:35:df:21:80:8d:7e:a3:5f:
18:ac:40:77:91:37:0f:66:23:1e:8d:ba:c3:47:e1:0e:9c:96:
c2:8b:b0:e5:83:e2:dd:fd:9e:a1:c9:99:f4:7a:7e:0f:a1:ab:
06:a4:75:22:ef:f1:99:a2:60:59:6f:16:14:51:8f:7e:db:2b:
4e:0c:ff:50:d0:72:a6:19:98:1f:33:f7:2b:07:4f:0d:f6:05:
a8:55:0b:93:08:d4:20:79:bb:83:a3:b5:31:52:98:5c:3d:f6:
df:a9:52:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5urP0H38bH1emx6gP5Gyu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDJhNTZjMjRiZDdiNGMwZjkzNGVmNzI0NDVmMmUzZjJl
ZTQ4MmMwHhcNMjYwNTI4MTMwMTMwWhcNMjYwNTI5MTMwMTMwWjAzMTEwLwYDVQQD
EyhmOWFlOTgzZDQ2ZjFiZGU4YzRkMGExNmQ2MzJiZjM5NzhjNGZlMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7tRX54wV622CkSUWXZzNBE1+AJ/
9ki2P2zMMD131vGNhyyj1P9QngfUa2t7bEtes8TAMPJG1iGfQaPOyj/TMZXAiZaN
hpTWgVzhFq+lMKcxlhVcHaGqVsBH4XcxkMm6Nj0N8Z6i0pnNeDUf6EbHtgG8FAL8
n/UCRLaojJB9NhvDBfvqqrZrUL0KnlR8LnE0GxO8FTe2pOKWCd6sWc4c7U63sSqF
14EmWehaU2q8UQN/YwyCfu/CtJE6twwpDQ7Ai+b15QjezhJseb2h0jzI5vZZtOoU
Tk8uDG8c9rKCmPMcnYB47tx5hP8JQQyOGyaPFplxCfOMO9fsPRj0oOmtqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmumD1G8b3oxNChbWMr85eMT+I5MB8GA1UdIwQY
MBaAFBTSpWwkvXtMD5NO9yRF8uPy7kgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEt
Mzc4MDRlYjc1Mzg2LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEtMzc4MDRlYjc1Mzg2
LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSofi6eR
Z21y3VbY+GI6tcOPPZpsBUpkWff6HP41Jxvt+55IwtVUSZkr/Rhn8n7Vn5PxCJWc
hSMWY+VkmXCM9+9iqDh84FGvhhtup/IamruNihlm4rh0itFIWx42gxR3mRJHOJJA
CDQxhuBHUqQedqjhmtHRWWaUBgQ+at0ElO8lfQ9X30D2fTRjnFTHGSlRMZpeZCKB
NifB3TXfIYCNfqNfGKxAd5E3D2YjHo26w0fhDpyWwouw5YPi3f2eocmZ9Hp+D6Gr
BqR1Iu/xmaJgWW8WFFGPftsrTgz/UNByphmYHzP3KwdPDfYFqFULkwjUIHm7g6O1
MVKYXD3236lStg==
-----END CERTIFICATE-----
Generated at Thu May 28 16:09:19 2026 by rpki-client