Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
File: FNKlbCS9e0wPk073JEXy4_LuSCw.mft (raw, json)
Hash identifier: 5Jb3XqkGy9VDAifIEQszJks4eV76yvP2YnrnUUlsINE=
Subject key identifier: 52:D7:A2:38:3D:F6:A0:DF:C0:6D:DB:FB:D9:23:A8:6E:DA:CC:FF:D8
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 01A04017DD09299A9B558F865A929D4568B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
Manifest number: 019C
Signing time: Wed 26 Aug 2026 22:01:40 +0000
Manifest this update: Wed 26 Aug 2026 22:01:40 +0000
Manifest next update: Thu 27 Aug 2026 22:01:40 +0000
Files and hashes: 1: 9sZzRL3aysmgLZzoD2xD_gDptBQ.roa (hash: zN+IwwS3daYZ4qhksXK1kZ18IepjoB72ZOigrVzjKtg=)
2: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (hash: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=)
3: FNKlbCS9e0wPk073JEXy4_LuSCw.crl (hash: a+ld8E1yMgpxYqc6NSaO1KHO1vbPbAaiBRCq+/L/eg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:dd:09:29:9a:9b:55:8f:86:5a:92:9d:45:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Aug 26 22:01:40 2026 GMT
Not After : Aug 27 22:01:40 2026 GMT
Subject: CN=52d7a2383df6a0dfc06ddbfbd923a86edaccffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:e7:bf:4b:6f:05:a3:4a:2d:63:a8:73:88:
68:b4:78:d3:16:a5:6a:3b:84:7e:d0:29:76:f3:67:
a9:1c:fe:33:33:cb:7c:d5:f1:43:ce:3a:d9:d8:bb:
3f:ed:1b:5f:32:ef:44:09:6c:76:62:77:16:0a:90:
6f:ad:cf:15:e2:31:5a:a6:e7:6a:c9:e2:0f:d8:3c:
be:26:f2:13:b4:00:84:3c:43:81:d7:6e:0d:31:04:
1f:3e:28:15:a3:a1:2b:48:1a:04:87:57:f7:e7:2b:
5c:d2:f8:0a:9d:bf:32:ff:26:4d:2c:ba:40:62:e3:
6d:ef:ce:54:3a:cc:80:4f:d2:be:a7:0b:7b:12:be:
a8:f1:3f:93:c4:a2:ba:51:f2:1e:eb:a8:21:b4:86:
d7:13:25:17:2a:6b:8d:f4:c8:ec:63:2d:89:61:d0:
64:1a:12:f6:ac:87:a9:c2:86:7b:d1:9f:20:ed:0e:
03:3f:8b:8a:f6:ab:82:b5:d4:7f:75:c8:07:ea:d5:
ef:5c:3b:d6:67:19:17:c0:43:ab:65:8a:25:2e:dd:
dd:72:96:17:ac:87:d3:b0:eb:8a:dc:d0:8a:39:27:
e4:e6:78:fd:3f:5d:0b:9e:de:ee:ab:a5:35:d4:2b:
90:2c:1e:c1:5e:aa:e6:56:3f:6b:72:4c:ca:03:05:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:A2:38:3D:F6:A0:DF:C0:6D:DB:FB:D9:23:A8:6E:DA:CC:FF:D8
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ff:9a:5b:82:44:c6:af:19:f4:ae:cc:7b:25:dc:e4:c1:6b:
23:97:5f:9e:1a:eb:95:53:ce:f6:7d:4f:c2:9b:e8:89:ec:9c:
37:77:00:c6:0f:81:be:b4:6c:08:90:65:b9:9a:14:3c:6e:24:
71:f3:83:e3:a3:ec:c3:b1:9e:6c:b0:f8:62:dd:d2:8e:bc:3b:
5f:49:d4:46:59:5d:e3:05:5a:26:bc:aa:10:df:ab:11:fc:1d:
bd:b0:f7:6b:04:81:3a:d0:d1:1c:db:24:be:22:24:1c:72:e9:
29:46:d8:af:fa:7a:33:fe:6b:85:c7:a2:5b:a2:c5:ab:64:cb:
48:77:5a:04:d7:4e:92:9f:13:1c:d3:a1:e6:42:9e:f5:c5:1d:
27:31:64:d1:8a:ed:c7:72:1f:e9:05:a8:2f:29:65:ac:24:63:
5d:70:15:18:61:98:7d:3f:d7:87:6b:fc:31:c3:fb:70:66:81:
3e:7f:07:a4:5f:9d:10:ca:75:7b:df:c7:90:d9:1c:40:de:26:
15:60:ff:e0:d0:8f:4e:7b:5a:10:05:14:b2:c4:ae:d1:4f:ed:
49:27:ec:97:3d:f3:6d:af:93:df:10:76:82:61:89:8c:8a:96:
fe:39:f6:71:a7:d5:a5:54:c4:33:67:ed:a4:a1:3d:91:da:17:
34:21:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:44:45 2026 by rpki-client