Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier: n+4EwoIcxHUulN+pAOQ8zpOoY38AahwNr+bl4kfyd+c=
Subject key identifier: C9:82:2D:C4:3E:2A:FB:4A:D4:1E:4D:88:08:84:4C:F4:19:DE:C1:A1
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial: 01A17E4F45AE3F52994AE0A3D2CBE712D97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number: 19B2
Signing time: Tue 27 Oct 2026 17:01:26 +0000
Manifest this update: Tue 27 Oct 2026 17:01:26 +0000
Manifest next update: Wed 28 Oct 2026 17:01:26 +0000
Files and hashes: 1: CmtFVtO9hzZe40i8krBc2erjmj0.roa (hash: zXgMe4Op7B660E2hvvLX+Q3KPKDasJwTTDrEF1VufuM=)
2: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: HSY5S8pdNrZyt6WSAm0xSz2hY+mGyWdmrWta99yJZjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:45:ae:3f:52:99:4a:e0:a3:d2:cb:e7:12:d9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Validity
Not Before: Oct 27 17:01:26 2026 GMT
Not After : Oct 28 17:01:26 2026 GMT
Subject: CN=c9822dc43e2afb4ad41e4d8808844cf419dec1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:17:28:d4:9d:8b:be:2a:20:b0:f2:ae:cb:
12:6e:01:2f:62:64:ca:ac:a9:4d:a0:fb:1d:3c:88:
d0:25:19:e8:22:ec:94:0d:9f:2a:06:55:04:e5:8d:
5d:66:2a:c9:36:fa:94:22:af:57:ac:76:0e:0b:f7:
25:a8:33:ef:54:15:f8:67:fa:4d:35:7b:6f:46:ad:
fe:94:2f:34:69:b3:d0:32:85:27:fe:f9:ce:a1:a5:
b2:29:2e:c4:6c:ba:ad:34:11:8e:19:92:43:31:55:
44:f3:01:de:1f:f4:3a:27:e9:91:f7:1c:31:aa:4a:
cd:12:12:ff:11:1a:b3:5f:16:77:c7:f0:9e:42:78:
61:83:7c:ff:3e:6b:a1:b4:bb:39:ca:e4:c7:82:fd:
2a:87:0f:c9:79:45:45:27:21:51:33:d6:28:7f:bd:
34:43:e1:74:8b:f5:29:8e:f6:a6:03:82:f6:f9:f6:
09:19:ea:04:05:f2:fd:27:c4:3b:b1:fa:e9:12:a1:
9c:47:2e:22:8d:05:b7:76:64:54:2f:55:59:6e:e9:
b9:c9:87:dd:22:3e:a9:83:cf:f8:f3:45:35:49:c5:
b5:cd:18:83:e7:dc:22:75:9a:9b:97:92:a9:0a:7b:
15:aa:c7:61:70:ae:9b:3a:85:96:f7:10:02:83:f0:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:2D:C4:3E:2A:FB:4A:D4:1E:4D:88:08:84:4C:F4:19:DE:C1:A1
X509v3 Authority Key Identifier:
keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:6b:e4:13:d3:9c:a6:46:53:6e:87:87:a6:7c:79:56:b4:
e4:61:8b:0a:9b:1d:f0:32:cb:b6:8c:15:a7:82:d3:28:64:fb:
2e:ef:53:fb:d3:c7:2b:f9:d3:41:a6:0a:1b:d3:f5:d9:8c:46:
ee:c0:0f:11:f5:a9:59:5d:e1:a4:87:27:87:17:c6:d6:ce:01:
19:4c:74:23:f0:40:1a:57:5c:47:6b:fb:08:c1:81:2e:14:b6:
21:1c:3d:8f:a1:fd:9b:f2:cf:e1:81:92:8e:77:23:fa:63:43:
fb:9b:e6:0e:65:f1:8d:90:ce:15:78:6e:03:43:ab:f4:f3:df:
6e:68:75:76:56:e0:6a:6a:45:a4:1b:46:b1:d8:b3:7a:64:96:
6e:5e:b8:ed:3a:f7:d2:28:2b:d6:7e:68:53:e9:19:78:92:2d:
dc:85:67:e0:7d:51:a3:3c:1e:c3:ef:56:27:e2:d6:be:1c:43:
39:39:9f:67:bb:3e:85:22:01:7a:f5:bb:ec:90:81:8b:29:c3:
f6:6a:7e:b7:6e:fb:17:36:85:a1:3b:39:e7:c0:38:cf:d5:0e:
f0:a4:87:b2:78:29:f8:56:b7:ec:f7:45:44:3a:6d:f1:26:ec:
04:9b:32:b7:cc:35:0f:3a:c6:b1:a8:ad:16:ed:a0:7f:6a:26:
e9:5a:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:44:43 2026 by rpki-client