Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: U180jiAFFGjHr0GOoBDDg10QCQkeXQ/w7r5KUO9keVg=
Subject key identifier: B0:9E:BA:5A:4C:99:15:B7:36:2E:A9:3E:45:82:04:09:0B:42:89:FC
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 01A12BB1D45AA5BAEAC63AB60836F8442EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 0216
Signing time: Sun 11 Oct 2026 16:00:36 +0000
Manifest this update: Sun 11 Oct 2026 16:00:36 +0000
Manifest next update: Mon 12 Oct 2026 16:00:36 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: CBNgPqFKZ0LldHJ62wlHu+AoblsVtxC6yXnBsK6PRsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:d4:5a:a5:ba:ea:c6:3a:b6:08:36:f8:44:2e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Oct 11 16:00:36 2026 GMT
Not After : Oct 12 16:00:36 2026 GMT
Subject: CN=b09eba5a4c9915b7362ea93e458204090b4289fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:1f:df:dc:c7:e0:94:14:dd:a7:54:45:69:
a0:cf:4f:3e:2d:42:ee:a1:36:64:b6:df:7c:ad:6f:
14:c0:9b:92:3e:fe:1d:33:a6:58:e9:f1:04:d4:07:
c5:a1:73:59:2a:a0:03:bb:ff:4a:db:0d:4e:49:4c:
2e:96:14:88:35:11:bd:6c:6f:fa:30:b5:aa:a4:65:
d0:a9:5e:6b:93:ab:fa:35:d5:56:e9:3b:12:bd:2d:
dd:7b:ca:4b:60:d4:fb:05:ba:e2:9c:75:62:72:6d:
0e:06:99:a4:e3:78:c2:67:f3:23:b6:15:dd:93:6f:
c6:6c:fe:69:8b:6e:9e:fd:42:72:58:de:bc:b4:53:
df:9a:25:4f:2c:9b:76:6e:e1:cb:65:c8:94:6c:b1:
56:e3:b2:60:36:da:ba:37:36:74:8b:f0:72:a3:ca:
25:b7:e2:5a:bd:e8:03:fa:d9:4e:f6:2c:b6:5e:cb:
1e:ac:39:a7:ac:a0:f3:fa:fb:fe:0d:98:6a:81:55:
02:e2:30:07:40:41:70:c0:0c:0b:d5:f3:32:43:19:
e1:1c:4f:5f:d4:51:20:b2:75:ff:80:2c:01:c6:bb:
29:87:14:90:05:57:31:f9:57:fe:4b:8b:36:35:c6:
a8:8d:7d:de:7d:82:55:8a:48:95:f4:56:0a:c1:58:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:BA:5A:4C:99:15:B7:36:2E:A9:3E:45:82:04:09:0B:42:89:FC
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:7e:05:57:ec:86:d1:00:aa:d2:a1:a4:9b:8a:0b:7b:39:
b6:44:f3:9b:fc:c2:49:c9:36:25:94:78:c3:46:94:bc:5b:73:
a9:9c:c9:41:d0:e5:1e:ae:5a:fe:6a:a8:3b:1f:8d:56:f6:95:
29:c7:aa:0a:9f:b7:64:90:c5:30:13:cf:18:cf:e3:5f:a4:f4:
9d:c4:97:6a:d9:29:d1:65:52:90:71:d5:26:15:df:74:6e:b0:
b2:08:02:fa:07:68:91:2d:8b:f5:9b:17:1c:a6:ad:57:4f:ea:
a9:aa:c0:aa:a9:66:9f:74:30:86:d5:ed:60:97:75:03:d0:ff:
07:28:47:ac:49:78:83:e1:69:64:bd:54:84:bf:8e:6d:6d:c0:
11:fa:28:c4:b9:14:c4:2f:48:d8:bc:8e:3f:79:7f:fa:ab:f4:
a6:3d:77:fd:01:10:ae:49:a2:39:4e:a1:44:10:5a:a1:7b:6d:
10:41:c8:4c:3f:ca:fb:a5:e4:82:01:9c:ca:b4:20:03:da:d8:
7d:7a:4d:c9:b4:3e:f5:0c:2d:2f:d2:a3:a8:ef:45:8a:46:7f:
62:e9:ef:a0:5b:c5:87:9d:79:13:ff:5a:a4:0a:64:73:79:6c:
c2:b1:87:6a:73:c8:78:14:1f:95:c2:9c:b2:ed:02:2f:7f:7b:
e1:0f:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:35:10 2026 by rpki-client