Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: +UYcdb3+je+Si8XElKleIU6faJobZbQhJ3lXdfSkkOc=
Subject key identifier: 4E:D3:32:17:96:F0:7A:BE:80:41:95:39:4E:9F:C2:90:3F:AF:47:AB
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019D389BA7C39C3B82A64116AEE86BEEA976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0CA1
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: clvHagBLVsnf8cfgQTRYyvBemIVjtg8ykN8hIabVIAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a7:c3:9c:3b:82:a6:41:16:ae:e8:6b:ee:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=4ed3321796f07abe804195394e9fc2903faf47ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:e1:1b:3c:3b:b5:dd:5a:49:e3:aa:aa:6b:
48:5b:67:a4:b2:6c:02:04:5b:31:29:ea:ef:11:27:
23:8b:05:52:ab:db:39:61:8a:cf:a2:9e:8b:5d:2f:
67:1c:59:e1:df:f5:1e:a5:62:be:b8:63:58:40:bd:
01:b6:11:9d:dd:cc:2d:03:05:d7:5f:00:f4:1d:9a:
02:35:01:af:42:d9:a7:fc:55:d3:2a:b3:e3:95:03:
d5:2a:16:ed:69:e2:aa:98:a3:7d:e7:23:78:26:4e:
af:be:73:ee:04:44:3e:c0:21:54:0f:10:21:89:1f:
30:d5:40:4e:bc:a1:7d:35:da:7e:7f:38:2b:28:bf:
09:44:b2:b4:5b:7f:c5:4b:75:9e:25:e1:6c:24:d0:
b4:ee:b6:53:2f:80:dd:17:1a:b4:f7:c1:fb:eb:d9:
0a:50:8e:e6:64:30:d9:16:5e:bb:86:e7:50:87:c1:
b1:0f:51:ac:38:b4:d1:36:b3:75:f8:a6:2b:5b:61:
5c:9a:1c:ff:07:2f:94:a7:8c:ad:45:a1:d8:db:d4:
42:82:c3:aa:c0:5d:c3:4b:40:42:63:73:69:02:3f:
7e:a9:97:8d:1a:03:a5:75:b5:82:b9:58:e8:40:3e:
b2:e3:74:c8:4d:7c:6c:8f:f6:2e:0e:ed:67:cf:a5:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:32:17:96:F0:7A:BE:80:41:95:39:4E:9F:C2:90:3F:AF:47:AB
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:82:7d:c1:df:6a:0d:65:b2:48:3e:06:fb:31:76:61:ea:
ba:35:5a:29:bc:99:8f:83:61:f8:86:bf:bd:c0:90:33:b6:2a:
b9:c7:96:38:aa:0b:17:07:82:4f:51:9b:4c:96:d0:f1:40:a3:
10:c9:7d:b3:ae:fa:f7:c2:32:b8:15:42:c4:3d:28:b5:3b:48:
67:90:05:ee:38:84:5e:90:7b:52:c2:48:92:bd:2f:21:c2:f4:
be:0d:21:03:6d:61:30:b1:79:24:b5:c3:2e:28:d8:9a:de:23:
36:08:ef:8b:c7:45:a7:50:2a:c0:a5:84:12:80:90:d2:7d:db:
b3:cd:36:f6:59:9d:98:c1:4c:01:8c:19:66:8e:8d:15:a2:0b:
39:87:be:0a:3e:10:66:63:66:f9:a7:49:77:2a:8a:01:d4:02:
28:5e:64:de:2a:3d:fa:ec:6e:1c:58:cb:7d:65:f9:ba:39:24:
6d:b4:d6:9d:e2:bb:7b:49:c4:50:1d:b6:58:16:a9:43:4f:ba:
e1:8b:d6:e3:2a:50:19:d0:6d:1a:46:01:7c:58:50:07:de:4e:
d3:4c:cc:8c:68:4e:41:fa:fa:c6:f8:02:d3:60:06:91:9b:3e:
ee:7f:3c:30:0b:87:d4:f8:21:6f:55:77:84:3d:d4:f4:8b:cc:
de:2c:cb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6fDnDuCpkEWruhr7ql2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWZkZDliZGZjNjBhYmEwNjJlN2M1NWMyYWUyZTkxOGEz
MjljY2EwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
Eyg0ZWQzMzIxNzk2ZjA3YWJlODA0MTk1Mzk0ZTlmYzI5MDNmYWY0N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqvhGzw7td1aSeOqqmtIW2eksmwC
BFsxKervEScjiwVSq9s5YYrPop6LXS9nHFnh3/UepWK+uGNYQL0BthGd3cwtAwXX
XwD0HZoCNQGvQtmn/FXTKrPjlQPVKhbtaeKqmKN95yN4Jk6vvnPuBEQ+wCFUDxAh
iR8w1UBOvKF9Ndp+fzgrKL8JRLK0W3/FS3WeJeFsJNC07rZTL4DdFxq098H769kK
UI7mZDDZFl67hudQh8GxD1GsOLTRNrN1+KYrW2Fcmhz/By+Up4ytRaHY29RCgsOq
wF3DS0BCY3NpAj9+qZeNGgOldbWCuVjoQD6y43TITXxsj/YuDu1nz6WPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7TMheW8Hq+gEGVOU6fwpA/r0erMB8GA1UdIwQY
MBaAFBSv3Zvfxgq6Bi58VcKuLpGKMpzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUt
ZTY3MDI3MWVlMTQxLzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUtZTY3MDI3MWVlMTQx
LzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7aCfcHf
ag1lskg+BvsxdmHqujVaKbyZj4Nh+Ia/vcCQM7YquceWOKoLFweCT1GbTJbQ8UCj
EMl9s67698IyuBVCxD0otTtIZ5AF7jiEXpB7UsJIkr0vIcL0vg0hA21hMLF5JLXD
LijYmt4jNgjvi8dFp1AqwKWEEoCQ0n3bs8029lmdmMFMAYwZZo6NFaILOYe+Cj4Q
ZmNm+adJdyqKAdQCKF5k3io9+uxuHFjLfWX5ujkkbbTWneK7e0nEUB22WBapQ0+6
4YvW4ypQGdBtGkYBfFhQB95O00zMjGhOQfr6xvgC02AGkZs+7n88MAuH1Pghb1V3
hD3U9IvM3izLYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:20 2026 by rpki-client