Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: rQhBSEq6aPdMW0Sp7KoizcsCkcAHvOZz0u+YoaRujIo=
Subject key identifier: B8:79:D2:B5:A4:3C:3F:52:99:0C:0A:15:43:D8:A0:8E:4E:DB:F7:30
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019D38D2B30075C990074F83CD52F22658C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
2: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: FKKbLCF7pL58ToN0LyRehXAECLjCHF8dntSiIgGCbYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:00:75:c9:90:07:4f:83:cd:52:f2:26:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=b879d2b5a43c3f52990c0a1543d8a08e4edbf730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:34:e5:df:31:c9:99:b4:84:3a:06:cd:91:
f1:9d:16:47:19:79:7c:7a:9e:6e:61:52:14:b9:fb:
93:a4:67:0c:bf:15:78:0f:91:c8:3f:43:97:36:f1:
3d:73:66:75:36:d5:e6:9c:06:5e:01:22:e6:f1:d9:
d0:ba:d8:bb:c8:2b:54:2d:81:23:82:5f:51:9b:9b:
37:9f:e2:82:df:bd:0f:7a:e3:fd:ab:d1:b3:7b:3b:
04:ed:fc:3f:ba:3e:10:14:ce:77:38:3a:a9:b2:44:
fa:ba:24:41:37:33:9b:8b:88:aa:2f:82:5c:90:be:
a6:27:7c:bd:0a:a8:a3:31:3a:16:18:ec:2d:bf:6a:
b4:58:e5:7e:5d:0c:8b:32:8a:7b:6c:46:70:66:de:
e7:c7:e4:ee:4e:3c:f4:ec:96:23:ac:89:2d:04:d9:
0a:13:26:7a:ad:89:0b:2b:36:c4:05:00:e7:3b:27:
9e:7d:e7:1d:42:41:a1:10:2b:28:2a:5e:30:0b:ee:
b2:3e:d7:69:10:4c:65:c9:0b:1b:94:c7:8e:f2:58:
45:ed:fe:c0:ac:1f:e2:f9:44:8e:b0:e6:97:f8:23:
62:76:07:e1:7a:cc:0a:d8:a3:0b:f2:8e:2a:53:63:
fe:02:d4:b3:f5:17:bf:28:88:ed:49:c3:61:8f:49:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:D2:B5:A4:3C:3F:52:99:0C:0A:15:43:D8:A0:8E:4E:DB:F7:30
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:db:03:07:b8:c1:9c:55:54:43:47:74:f9:fd:c4:31:76:
63:71:df:a6:53:6f:06:1a:1e:1a:54:24:75:ad:c8:58:13:c1:
71:c4:41:fb:f1:ee:5c:f0:8c:fe:37:dd:86:cc:b1:22:9a:d4:
6f:fc:ac:51:19:74:fd:3d:b4:4b:fc:83:2e:a3:1f:d0:27:bd:
6e:c3:cc:34:7f:9e:a5:ee:0e:e2:5f:9a:c4:79:78:8f:f8:f7:
5d:3a:6c:69:6a:63:27:9f:58:c7:dd:38:2e:9b:56:c5:ef:ae:
45:61:5d:8a:51:43:10:62:f2:6d:3d:3a:8d:0c:4f:e4:61:76:
46:42:e6:4b:01:01:cc:ad:d2:57:9d:00:ac:f1:86:32:77:81:
a8:da:cb:4b:14:bf:23:c7:06:96:92:7f:7f:c2:31:19:35:dc:
ad:30:00:21:f0:13:e0:fe:6c:f3:87:70:54:fa:ae:3c:65:a0:
f0:1b:aa:92:5e:84:fb:c3:75:3f:99:26:0c:cd:13:67:46:9e:
37:40:44:76:ad:b1:85:00:fe:9d:78:50:d0:24:0e:91:04:60:
00:cd:84:0b:d7:7b:a2:67:69:ff:b8:71:c8:b5:05:0e:f3:08:
ae:ce:bc:8b:e1:b5:76:6a:fc:b5:6c:77:fe:ef:80:cc:18:b8:
fc:e0:0e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rMAdcmQB0+DzVLyJljIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDJhNTZjMjRiZDdiNGMwZjkzNGVmNzI0NDVmMmUzZjJl
ZTQ4MmMwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD
EyhiODc5ZDJiNWE0M2MzZjUyOTkwYzBhMTU0M2Q4YTA4ZTRlZGJmNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLo05d8xyZm0hDoGzZHxnRZHGXl8
ep5uYVIUufuTpGcMvxV4D5HIP0OXNvE9c2Z1NtXmnAZeASLm8dnQuti7yCtULYEj
gl9Rm5s3n+KC370PeuP9q9GzezsE7fw/uj4QFM53ODqpskT6uiRBNzObi4iqL4Jc
kL6mJ3y9CqijMToWGOwtv2q0WOV+XQyLMop7bEZwZt7nx+TuTjz07JYjrIktBNkK
EyZ6rYkLKzbEBQDnOyeefecdQkGhECsoKl4wC+6yPtdpEExlyQsblMeO8lhF7f7A
rB/i+USOsOaX+CNidgfheswK2KML8o4qU2P+AtSz9Re/KIjtScNhj0lHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh50rWkPD9SmQwKFUPYoI5O2/cwMB8GA1UdIwQY
MBaAFBTSpWwkvXtMD5NO9yRF8uPy7kgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEt
Mzc4MDRlYjc1Mzg2LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC80MWQ5M2MtNzBmZi00MGZlLTk1ODEtMzc4MDRlYjc1Mzg2
LzEvRk5LbGJDUzllMHdQazA3M0pFWHk0X0x1U0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH/bAwe4
wZxVVENHdPn9xDF2Y3HfplNvBhoeGlQkda3IWBPBccRB+/HuXPCM/jfdhsyxIprU
b/ysURl0/T20S/yDLqMf0Ce9bsPMNH+epe4O4l+axHl4j/j3XTpsaWpjJ59Yx904
LptWxe+uRWFdilFDEGLybT06jQxP5GF2RkLmSwEBzK3SV50ArPGGMneBqNrLSxS/
I8cGlpJ/f8IxGTXcrTAAIfAT4P5s84dwVPquPGWg8Buqkl6E+8N1P5kmDM0TZ0ae
N0BEdq2xhQD+nXhQ0CQOkQRgAM2EC9d7omdp/7hxyLUFDvMIrs68i+G1dmr8tWx3
/u+AzBi4/OAO7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:36 2026 by rpki-client