Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: ZcRUNpXSN94h+x8mRX4d3kuN+0xDfKHwQoKqPEb8LfU=
Subject key identifier: 01:A6:9C:BD:65:0B:0A:76:F9:99:C0:63:F7:55:5F:A5:D1:8D:1E:5E
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 01A17F988345BE5E63957428A6F6D6AA8558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 23:01:03 +0000
Manifest this update: Tue 27 Oct 2026 23:01:03 +0000
Manifest next update: Wed 28 Oct 2026 23:01:03 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: lJptmRIfG9Q2SLL/Sr4Fl5N6/tsdiC8LPabEBQ/E8Zk=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:83:45:be:5e:63:95:74:28:a6:f6:d6:aa:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Oct 27 23:01:03 2026 GMT
Not After : Oct 28 23:01:03 2026 GMT
Subject: CN=01a69cbd650b0a76f999c063f7555fa5d18d1e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:ee:97:4e:76:5e:8c:3f:27:aa:1d:86:fe:
0c:8a:cd:76:94:77:2f:41:f3:f6:f4:07:3d:6c:e4:
fe:67:fd:83:c6:9f:db:ce:52:e2:5b:6a:af:99:7b:
c2:96:d1:8b:a7:5f:f4:f9:db:64:96:b5:f2:49:38:
33:37:da:36:b7:46:b2:58:f2:d3:c5:f3:2b:9c:7c:
d9:ef:85:25:c9:34:46:47:89:d3:fb:63:db:2a:5b:
3a:84:a5:86:24:5e:2e:5b:42:82:ce:8b:86:bc:d2:
7e:2a:7a:09:23:5b:81:19:9b:1d:b6:75:9c:e7:15:
60:37:ec:02:f9:fe:7e:72:02:48:23:4c:d0:2c:df:
c3:a2:28:12:60:fe:04:e1:f6:39:bd:39:77:ed:c0:
93:e2:f6:73:3f:50:46:82:f1:a1:2d:4f:d3:09:0c:
11:c5:08:c1:dd:c2:88:4e:8b:d7:69:62:99:9b:d7:
37:62:2b:6f:b6:cc:84:23:36:5c:ad:7f:15:b9:b8:
58:35:72:a5:f8:3f:70:d0:b5:77:48:2e:8f:f7:ee:
ae:62:39:20:64:af:ac:5e:89:61:e3:cb:22:b7:56:
fe:2b:7c:f5:e1:76:f9:f0:e9:84:9b:61:48:cc:bc:
35:ae:cc:be:23:89:96:26:8d:00:66:35:62:66:46:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A6:9C:BD:65:0B:0A:76:F9:99:C0:63:F7:55:5F:A5:D1:8D:1E:5E
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b1:ae:6c:83:fe:a9:bd:38:48:36:05:d1:2c:fd:ae:c6:5a:
af:bf:72:e5:64:e2:aa:b8:0e:90:43:2c:21:2c:52:ec:3f:3c:
f8:c6:e8:d4:14:e8:7d:1e:2d:28:14:2f:bb:24:8d:64:34:b1:
06:7c:19:86:3f:98:12:63:3d:1f:cb:82:81:93:a7:cb:cd:cb:
c2:36:5e:6c:6f:a0:c2:04:49:3a:c3:be:4b:7e:60:cd:3a:ee:
a1:02:cf:36:91:c9:c1:16:12:6b:66:54:e2:c8:d5:4a:1e:ff:
be:cd:b0:c4:b5:77:89:f7:03:3f:1f:89:31:ab:dd:e4:93:8c:
14:1b:64:58:21:d0:b0:70:c3:85:35:12:ca:67:cc:e0:00:2e:
3e:60:01:f7:4f:0f:e6:a6:b9:1a:05:29:c6:81:b9:c3:39:44:
0d:0f:9a:29:88:66:3a:e2:2c:8b:32:e1:e3:a0:c6:86:7f:9b:
c5:97:3b:2d:77:df:05:2e:59:17:3a:3d:97:22:af:65:e1:49:
6b:60:31:1e:88:3d:d8:04:0b:76:21:c1:04:bb:9a:67:f9:75:
74:6c:27:81:2b:dd:e3:bc:96:e1:0b:30:0d:32:92:59:f6:97:
02:b7:f8:09:91:d5:ee:63:73:17:b0:d0:ea:25:b3:5d:76:bd:
3c:07:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:59 2026 by rpki-client