Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: r6iDE8IMESFyv2DSJAp1oDWzRQikAHwMl94QXFf4+zE=
Subject key identifier: DC:AC:1E:47:10:02:FB:E9:2C:34:01:DC:64:E5:B9:11:02:CD:C9:46
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 019D382E742BC54D25AB6E245986B099F40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 0A13
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: GtFjAJsfzfUZf7St4sv7OdUyq+gMxAnmxBxnHcZFKEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:74:2b:c5:4d:25:ab:6e:24:59:86:b0:99:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=dcac1e471002fbe92c3401dc64e5b91102cdc946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:e8:45:5f:39:c3:16:47:d1:39:0d:2a:7a:
1d:7f:91:e2:cb:a9:eb:fd:06:3a:e2:b6:4c:5f:8c:
59:80:33:36:ce:f1:4f:e9:d4:25:17:b7:d2:f1:9b:
58:70:d5:35:85:e4:4c:7c:73:c8:8e:e2:c6:1b:ce:
2e:e8:5f:cf:ff:76:56:5a:25:83:f5:8c:2d:03:39:
80:87:de:3c:19:59:d4:55:dd:8a:e5:8a:01:de:d0:
4e:40:f7:9d:64:b1:ed:d9:64:54:7c:9e:29:96:b8:
5f:98:b0:2e:49:83:bd:50:62:29:78:44:cc:86:e8:
00:3a:fd:72:cb:94:5e:da:74:1c:20:06:a2:83:65:
ed:41:14:27:d9:bc:df:84:40:66:c9:99:b9:e2:af:
81:3c:cd:b8:6f:e7:28:e7:04:f0:b2:9c:2a:fe:8f:
78:31:27:79:f8:8a:be:a5:52:39:3f:ce:aa:47:d3:
5e:a8:56:5e:f8:c2:70:64:90:fc:f0:18:72:0c:f2:
75:6c:37:ff:1f:bb:45:2f:fb:14:4c:0b:61:dd:ed:
0b:66:d3:aa:78:9d:fb:9d:f5:2b:00:ae:9a:9c:00:
f2:e2:ca:57:e3:3d:7b:20:de:19:6e:b0:23:95:2d:
04:3a:79:fd:07:60:8e:25:b7:d0:3e:66:20:f3:9b:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:1E:47:10:02:FB:E9:2C:34:01:DC:64:E5:B9:11:02:CD:C9:46
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2f:b7:cc:bf:6f:5b:d9:06:17:ce:4e:82:5b:a8:4e:62:ca:
1c:f9:f4:f9:67:f5:31:11:0f:f5:01:17:b8:45:73:43:8d:8c:
fb:6b:ed:67:30:f0:5e:0c:bc:e6:8b:90:2d:9a:c7:75:ad:dd:
91:99:8f:6f:4a:cb:54:a1:c0:90:d4:a6:55:b6:c5:3d:86:93:
4f:4f:b6:7d:04:5b:4c:c3:d2:24:91:6e:d7:77:87:c6:43:c4:
96:a7:44:a1:47:32:5b:8a:a1:12:8e:a3:84:9a:71:66:be:3a:
9c:d4:21:f0:6b:11:a4:32:58:43:a3:76:3e:1d:16:0d:7b:ff:
1b:01:4d:55:b6:2d:a3:c3:1b:ec:a3:8f:14:79:8d:a6:49:ef:
9f:e2:76:5f:16:9d:49:01:6e:22:3f:76:7f:6a:b9:22:e7:87:
4a:44:f9:c0:21:85:8a:24:a3:56:73:8f:b7:eb:09:b5:93:1e:
d4:39:6f:dc:15:f0:07:d6:61:b6:dc:b1:e5:50:7d:d8:a6:42:
cf:19:cb:86:87:2a:95:4c:e5:8b:01:2e:b3:5d:21:e3:5f:9f:
68:ff:8a:04:30:13:a7:a2:90:fb:23:d6:26:45:48:ff:ae:70:
bb:02:68:82:00:96:2c:90:c1:23:f5:69:2a:0e:bf:59:b7:05:
f8:e9:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client