Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
File: FDOvfHMrNzBikL15lfodb8PcqMk.mft (raw, json)
Hash identifier: ISCD7+aFubfA+wqfhi5DDou6U3bpJJ4dPVWLbHKoRAo=
Subject key identifier: 1C:F9:AF:3C:6F:8C:CC:F7:CA:EB:76:10:F2:50:F5:64:BC:34:CB:7E
Authority key identifier: 14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
Certificate issuer: /CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Certificate serial: 01A176276A1DB5B7A71EE7ACA49828DE6117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:56 +0000
Manifest this update: Mon 26 Oct 2026 03:00:56 +0000
Manifest next update: Tue 27 Oct 2026 03:00:56 +0000
Files and hashes: 1: FDOvfHMrNzBikL15lfodb8PcqMk.crl (hash: jEu9uTgnYJHnC5sTAiH9ndjhq9HQ4Rf9lzTL5FcDfmk=)
2: XPAo9csIakgnxL1vkDoDw7OBqQY.roa (hash: /BzxC1mTgVHXG35cXVsO81Ky1QleogI+28Bk2r4rk5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:6a:1d:b5:b7:a7:1e:e7:ac:a4:98:28:de:61:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Validity
Not Before: Oct 26 03:00:56 2026 GMT
Not After : Oct 27 03:00:56 2026 GMT
Subject: CN=1cf9af3c6f8cccf7caeb7610f250f564bc34cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:71:b9:7e:52:38:93:0e:f0:f9:88:3a:5b:
ab:7c:26:3f:9e:dd:fb:07:79:0b:6d:3e:ba:ed:a6:
68:d9:ac:b2:01:6d:81:0a:22:ac:9a:ba:3a:5b:b3:
b2:f5:18:18:d9:17:6a:90:93:23:0d:bd:e1:22:cc:
99:99:de:04:0f:e6:7f:80:ef:d4:b1:10:3d:d8:30:
7d:af:b8:3d:32:ce:77:3f:93:01:a8:0d:6d:33:32:
23:b4:2a:18:07:1b:08:b5:4b:cb:34:06:68:3b:5b:
ec:02:b2:cd:13:65:7e:88:0c:28:9f:ad:da:58:97:
40:7d:95:fb:b7:17:1d:34:b0:54:74:8a:9c:ec:8b:
c4:8e:e7:1a:b3:d3:c2:d9:41:28:b2:2a:18:ba:35:
d1:0a:8b:50:fe:6c:fe:8b:72:52:3a:70:e9:50:52:
35:b1:9a:45:88:cc:8f:67:54:40:74:5f:bc:4f:d1:
a9:1b:53:cf:e4:6e:a0:c2:f9:10:33:31:9c:85:92:
97:15:89:e1:12:11:a1:b7:98:15:44:f4:16:a5:ff:
72:0a:64:c7:44:c4:78:41:e5:ff:55:ed:f9:d3:2a:
1b:13:51:a8:0e:97:d4:79:41:1a:3c:82:38:12:a9:
3e:92:cd:96:ea:ac:a8:3e:d8:88:c7:3b:33:12:ec:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:AF:3C:6F:8C:CC:F7:CA:EB:76:10:F2:50:F5:64:BC:34:CB:7E
X509v3 Authority Key Identifier:
keyid:14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:af:e2:09:7a:e9:4a:64:e7:db:b7:8d:be:19:b5:5f:92:
c4:4d:d2:4f:80:c1:de:0a:e0:9c:61:27:01:14:b1:a1:e2:88:
06:49:33:eb:4b:32:8b:c2:29:90:48:24:44:a4:31:94:7a:f2:
8a:74:ee:5f:01:a3:f3:3e:34:c9:54:b9:52:b0:6b:73:0f:a0:
73:db:04:12:58:ed:7a:6a:ee:a6:f2:ac:ce:36:42:f6:57:e1:
04:55:45:39:cb:10:8e:59:b9:54:5d:8b:67:7c:c8:38:a9:63:
32:fd:9b:dd:30:4a:8c:be:80:1e:7c:74:5d:69:43:25:85:7b:
82:67:76:3a:a5:ff:d7:7b:86:5b:e1:70:95:d1:4c:4b:e1:55:
6f:9f:4d:b4:62:60:2d:92:51:de:2d:a4:aa:ae:26:8b:3d:08:
0c:59:cf:9e:10:63:67:3b:5c:d4:3b:6c:be:54:7f:7f:d2:db:
45:fa:cc:ae:fe:47:0a:ce:27:8d:7e:af:c0:54:94:b1:f1:4d:
41:b7:de:1d:83:99:53:72:1e:ed:94:4c:bc:eb:00:7d:08:9a:
c7:23:70:57:db:b5:40:02:51:93:ce:bb:35:50:37:ad:8d:d9:
6c:a2:ec:7d:dc:60:c4:2c:8b:65:37:80:c1:c8:07:48:e6:40:
e4:66:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:57:28 2026 by rpki-client