Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: GGnUGY0OfWK8cC8OcxcbfYrBGIIE+1kPI13Q2qFu9Lc=
Subject key identifier: B9:84:0F:0E:ED:68:DD:44:9A:0C:47:AD:BC:24:40:88:5F:48:E2:6C
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019EB8EAB758FD2463D0BBEB4B23167AB153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 23:00:50 +0000
Manifest this update: Thu 11 Jun 2026 23:00:50 +0000
Manifest next update: Fri 12 Jun 2026 23:00:50 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: HhxGIPdi9kCFzq7B6jVNWuee6Q9wDaosukjeOnjzC7s=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:b7:58:fd:24:63:d0:bb:eb:4b:23:16:7a:b1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Jun 11 23:00:50 2026 GMT
Not After : Jun 12 23:00:50 2026 GMT
Subject: CN=b9840f0eed68dd449a0c47adbc2440885f48e26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:3e:6d:44:f0:68:bd:26:e0:37:63:c9:88:
a1:92:8b:9a:92:fb:4b:c7:85:7b:2f:98:b4:af:ea:
aa:0b:e8:db:2c:95:b5:38:98:1e:db:83:46:94:1c:
11:78:95:15:63:1a:eb:b9:f2:74:42:c5:12:d8:0f:
9d:da:95:c7:b6:48:4b:81:80:ae:b5:a6:7c:d3:a6:
f3:e9:6d:e1:8a:5c:a3:01:cd:ed:ce:c0:dd:b4:01:
1b:41:a4:4b:e4:fc:1b:8b:7d:63:e5:2f:96:76:60:
56:fa:fd:8d:4c:61:30:7a:7c:77:2c:56:ce:c5:db:
c4:0f:c5:39:63:bc:88:e5:97:e8:04:76:6a:7c:8e:
79:d4:a9:fc:c6:ef:ee:68:53:70:79:24:d9:e1:ec:
ee:b7:65:e7:a3:c3:f0:6d:6d:1c:ea:50:5a:59:3f:
c2:8c:20:5c:63:57:e1:d2:a4:19:59:46:72:1e:0d:
12:bc:4f:50:06:d3:6a:5b:b2:d6:f5:6d:2e:d1:ad:
7c:a3:30:32:bf:11:17:cb:92:77:30:52:91:59:71:
14:9c:d1:09:7e:d3:1b:ba:6a:73:88:c7:1c:91:b2:
5d:2f:86:27:47:e5:6b:17:e5:84:3e:2c:55:32:04:
a5:4c:32:d8:67:41:4b:40:7f:4b:2f:81:60:17:68:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:0F:0E:ED:68:DD:44:9A:0C:47:AD:BC:24:40:88:5F:48:E2:6C
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e5:55:43:f7:1f:66:69:92:0a:5c:c3:53:be:98:6b:75:5c:
1a:4a:5b:78:ac:9f:f3:6f:bf:34:93:7f:30:90:dd:42:29:75:
e1:c1:6d:57:3a:45:e0:8e:b4:07:ec:5d:d4:9f:23:9b:44:8f:
32:71:68:17:4f:40:ba:ca:cc:ce:3a:65:2d:b8:12:42:4d:92:
98:13:c3:73:fe:0b:c5:9c:80:8c:4b:2a:48:33:d1:87:02:05:
bd:f8:34:e7:26:33:25:d0:c7:2b:a2:d8:30:7a:0c:cb:a1:b9:
0f:9b:e8:3c:1e:6e:5d:fc:00:0f:38:d3:da:20:9f:30:c5:29:
22:ab:24:eb:7c:86:97:ee:f6:db:27:1f:bc:ea:dd:6e:8d:04:
0b:58:88:13:2c:0c:2e:d5:5b:d4:ac:f2:b9:8f:f4:94:fb:c1:
44:c5:2f:88:45:36:85:b8:63:70:b8:01:12:02:45:ef:73:5b:
15:74:d5:22:0a:e2:15:90:79:96:0e:a4:43:07:be:56:43:33:
b0:ff:aa:62:d8:73:55:07:a8:a1:cf:27:72:75:d5:b2:ce:8b:
c7:9d:ff:d7:c0:8e:ed:9c:86:f4:02:d2:97:1b:f7:89:08:08:
da:54:c2:b2:9f:6a:cb:35:d2:12:c9:51:ba:11:a0:fe:97:11:
9e:93:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:27:18 2026 by rpki-client