Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: j8iW3jPwBcnELoF/vKDev/ozlbxvSl8Bgmzb3iyG05M=
Subject key identifier: E4:9E:28:54:73:16:20:81:9F:C8:A2:A1:CB:4E:AA:D8:B1:C8:20:56
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 01A1A3DBD9EBA6C1E81984DF0E95C9551EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 0C5D
Signing time: Wed 04 Nov 2026 00:00:56 +0000
Manifest this update: Wed 04 Nov 2026 00:00:56 +0000
Manifest next update: Thu 05 Nov 2026 00:00:56 +0000
Files and hashes: 1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: zhOM9N5SYIPC05eukdp2yNeHlwVe6pfrMQkBlfv9Ea4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:db:d9:eb:a6:c1:e8:19:84:df:0e:95:c9:55:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Nov 4 00:00:56 2026 GMT
Not After : Nov 5 00:00:56 2026 GMT
Subject: CN=e49e2854731620819fc8a2a1cb4eaad8b1c82056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:24:62:74:ba:83:b0:36:92:bd:11:e0:12:
3e:8b:e4:2d:a8:00:e0:ca:71:9c:03:16:74:6d:6e:
17:03:81:31:16:2f:2a:f4:78:1b:15:90:9e:a8:31:
f6:cb:37:23:15:94:f4:00:45:ea:3b:fe:ec:6e:f2:
5b:cc:32:7f:d0:84:84:60:78:5e:76:7d:e7:d4:d8:
22:94:19:3a:27:86:0a:cc:e3:95:04:c0:00:ae:d5:
66:cb:a5:cf:bf:e4:16:14:99:84:90:e7:5e:96:ab:
e2:5c:64:ad:7b:7f:c3:a5:93:08:e1:a5:dc:2a:75:
1b:63:b0:25:69:91:3d:11:fa:bf:cb:65:99:00:ad:
eb:19:f6:92:ec:27:d4:53:82:17:58:77:da:99:84:
8c:46:2a:1b:be:ac:74:71:16:01:c6:4f:e7:97:04:
5e:62:33:f0:39:c4:98:e2:97:a5:74:f9:9e:b9:44:
38:27:d2:e1:48:ee:88:9e:ab:80:f2:c0:4b:95:a8:
39:3b:94:c6:fa:36:9e:fa:92:a2:b4:15:5a:22:a0:
24:2d:bb:57:09:a7:b4:05:23:9e:74:e2:23:23:0f:
fd:d4:a5:4d:ca:54:ad:0d:f2:d5:03:05:30:16:9b:
07:08:63:2e:9b:c8:42:b4:b9:3a:85:30:50:c8:ab:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:28:54:73:16:20:81:9F:C8:A2:A1:CB:4E:AA:D8:B1:C8:20:56
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:df:e4:32:44:47:b3:41:51:38:c5:51:3c:36:ab:47:e6:
e6:24:32:90:c4:d8:e3:8b:e4:30:eb:e3:32:38:6a:9a:1c:6a:
ef:c9:81:cf:0c:2f:b3:5b:d2:b4:43:26:99:b2:ef:73:ac:5c:
90:7e:ff:3c:e8:00:1b:bc:75:5a:68:2a:61:00:45:06:f5:64:
75:91:c5:ea:2a:29:d0:68:77:d5:32:d3:11:c2:24:b8:28:58:
39:a9:f9:11:2d:6b:03:6a:c1:d4:5d:dd:86:05:72:e1:d7:b4:
bc:4a:23:57:4f:6e:08:8c:c9:d9:81:d5:51:66:49:62:77:e6:
50:b3:20:d2:df:67:78:a8:2c:c0:95:a0:b1:9f:83:4c:f4:43:
bd:c9:4f:c7:d7:50:ca:54:e3:1f:69:c1:c7:b7:7a:99:bf:34:
8d:33:ee:eb:a1:7e:a1:52:81:05:3f:30:9a:78:7c:66:04:90:
83:15:9b:0c:5b:6f:7a:de:58:a8:e0:9a:b8:43:86:b8:11:30:
d6:31:07:60:7a:29:d3:21:98:38:b0:4a:95:9a:b8:58:48:3f:
ab:19:05:04:c6:c1:62:37:80:fd:9d:ee:d6:96:32:0f:fb:fe:
b7:e3:65:28:33:ba:cd:f5:84:5c:47:63:74:2d:1e:ef:c6:27:
00:d5:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:44:35 2026 by rpki-client