
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: aIhwImde5mgPhfq130DW3QdjoKWUUR6AkeaByZ/JzE4=
Subject key identifier: 28:30:11:32:ED:60:05:3A:15:C6:C9:3B:BF:4C:DA:FB:D2:F8:A9:5D
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 019FF86C778AE996A6B9B6DA540709BCA36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 0D1D
Signing time: Thu 13 Aug 2026 00:01:25 +0000
Manifest this update: Thu 13 Aug 2026 00:01:25 +0000
Manifest next update: Fri 14 Aug 2026 00:01:25 +0000
Files and hashes: 1: Afr0mV20pbPHdZnpWYatELuCEvo.asa (hash: owfqUhE14A6UilAazSw974fh+e2NlWVeQw7fmwItRO4=)
2: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: rMSw0jooJO9+KiCxETlALoaKldOO3I9rpNZBnxtcoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:77:8a:e9:96:a6:b9:b6:da:54:07:09:bc:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Aug 13 00:01:25 2026 GMT
Not After : Aug 14 00:01:25 2026 GMT
Subject: CN=28301132ed60053a15c6c93bbf4cdafbd2f8a95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:a2:4b:62:6f:1e:54:2b:2b:aa:ae:55:1b:
5e:c3:16:4d:90:0b:c8:99:be:24:c5:b6:a0:ad:a2:
39:be:8f:67:01:0d:1a:a5:e1:6b:5e:fd:ae:89:4a:
1f:f2:9c:71:ed:b0:0a:ac:74:e6:84:7b:d1:66:e0:
2c:19:9d:06:9e:99:89:c7:59:1c:3d:13:db:94:a3:
9c:71:19:e1:4a:48:78:ed:5d:bb:4c:a0:23:c1:f7:
b2:39:03:0d:c5:76:2d:05:10:ce:42:90:f2:b9:5e:
06:3e:a8:b1:a6:9f:4c:f3:71:d8:98:af:5f:54:99:
78:33:0b:35:a6:6d:23:d1:cb:8d:65:8b:f3:5a:38:
ff:49:78:25:c9:7f:af:31:11:f2:9b:5d:93:0d:8d:
6e:1d:e5:89:3c:f3:84:a1:ce:c8:d4:d7:1a:f6:00:
6e:23:22:0d:be:3d:11:1c:d4:95:05:bb:cb:17:5f:
5b:3d:99:76:3c:28:b8:d9:c3:50:81:5e:4a:d0:5b:
e9:13:6f:2a:4e:cc:5c:c0:ee:b8:b1:c9:68:df:32:
ad:d6:28:b7:dd:d0:08:67:2f:75:ab:b5:1b:41:a9:
c3:03:4d:0a:10:17:d5:20:fa:0b:0e:8d:1c:68:b2:
43:49:3c:bf:3c:8e:2a:ef:d0:ce:3b:bf:99:c0:e5:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:11:32:ED:60:05:3A:15:C6:C9:3B:BF:4C:DA:FB:D2:F8:A9:5D
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0c:1e:dc:1b:da:69:b1:d0:97:ba:43:a0:50:c7:00:96:85:
57:40:44:b8:23:76:41:16:95:d0:16:0e:d9:1c:a2:18:49:e2:
68:b6:d8:0f:de:52:8e:0e:ae:8f:45:3c:52:16:55:e8:40:aa:
4a:2b:fc:8f:0b:1b:4a:e0:cf:54:b6:9d:25:e0:c5:7e:8c:f0:
59:c5:40:f0:a4:c8:b4:9f:91:d5:a9:42:89:12:88:fb:86:7b:
d6:d0:17:c6:65:ee:94:3e:c8:0c:84:70:dc:39:95:0c:38:b6:
ba:5a:03:2d:fa:4a:38:11:a2:45:11:55:f2:61:44:50:1a:c3:
56:83:e5:62:31:33:11:89:8f:28:9e:a2:cf:f9:d9:7f:91:8f:
74:07:f0:58:d6:58:29:55:14:28:fc:88:16:d9:86:f4:97:01:
88:67:eb:10:8a:e3:1c:73:b4:91:07:ac:18:43:10:d4:80:cc:
98:9e:12:46:24:c4:7c:f8:b2:bf:0f:c5:fb:dd:b4:50:da:34:
01:86:9a:7b:1d:7a:b0:6a:7d:fc:9a:f5:db:e6:a5:fa:db:92:
d1:8f:41:ee:79:d4:e9:99:14:2f:fa:fa:88:32:34:77:d3:02:
1a:67:b3:3e:4b:35:f8:cf:33:47:3f:5b:94:ef:e8:22:e0:1a:
69:1f:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:56 2026 by rpki-client