Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: oa9+cKJrqhuMtzIK3xoSZ7w4KSeLnxAki9TY3UaL3oo=
Subject key identifier: FA:5C:51:52:C2:44:3E:7C:DD:34:04:DD:28:DE:FC:0D:B8:6A:91:24
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019FF722FDE8B53F8F09536A6269045A4726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 19FD
Signing time: Wed 12 Aug 2026 18:01:33 +0000
Manifest this update: Wed 12 Aug 2026 18:01:33 +0000
Manifest next update: Thu 13 Aug 2026 18:01:33 +0000
Files and hashes: 1: 0bOGjfX8rCaFK1EFr_iCf9m9E2s.roa (hash: cuAwT7O+fNr0dZzRVxu32quxhPqTENg6uOwyovOP9iI=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: kDbBiT8jxPQKsPIc8RfvmZIBA73otFuKZCBJMwOPUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:22:fd:e8:b5:3f:8f:09:53:6a:62:69:04:5a:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Aug 12 18:01:33 2026 GMT
Not After : Aug 13 18:01:33 2026 GMT
Subject: CN=fa5c5152c2443e7cdd3404dd28defc0db86a9124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:5f:29:a2:57:58:49:50:e5:46:c2:93:39:
1e:ac:c8:0d:d3:20:17:b4:90:dc:ff:65:ed:cb:ec:
c3:dd:47:bf:f4:6a:d0:dd:2e:f1:5c:21:db:76:29:
a7:fa:3b:2d:a7:b7:57:3c:55:55:c8:14:ca:fe:50:
65:0a:a2:da:be:8b:5c:51:76:8f:ae:49:0c:c7:fb:
1e:63:0a:40:70:12:03:1c:c3:d5:49:21:3d:26:6d:
11:41:2f:ad:16:4f:8f:7d:12:ee:6e:30:c9:45:e1:
fd:7f:63:8e:0b:cc:3f:3f:20:92:ac:99:fb:3f:19:
e5:50:ad:2f:01:ff:ec:58:ea:8e:8d:72:2d:f2:0b:
59:93:32:e8:52:e2:71:59:89:fd:bf:00:8b:5f:1f:
64:8b:3b:95:0a:b3:fb:42:74:a5:b2:37:c7:04:fd:
22:80:32:ed:5c:d5:d9:dc:fd:b4:1f:5e:c7:3b:8d:
66:01:92:87:a5:e0:67:e2:e5:bc:96:6e:68:33:9b:
74:2e:d0:60:f9:b4:02:c7:d2:57:19:af:1c:c1:69:
04:1f:ca:26:f6:8b:af:9c:80:f0:4e:cb:2a:38:98:
e2:6c:4e:02:a0:31:67:f3:01:a6:15:b3:59:6b:fa:
90:f8:bd:d5:81:df:e1:c6:af:20:8d:3f:bc:a2:73:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:51:52:C2:44:3E:7C:DD:34:04:DD:28:DE:FC:0D:B8:6A:91:24
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:27:20:91:27:6f:5d:26:70:00:b4:69:95:da:84:66:cd:
c5:95:a5:89:e0:50:b2:51:1c:8e:f4:28:0c:29:0e:0e:f9:d9:
b6:b8:08:32:e7:c5:92:a8:85:8d:2c:19:83:44:79:04:cb:e0:
de:90:61:bb:a3:d5:f2:95:ac:a8:c8:4a:b7:47:8c:28:ae:b9:
4a:5a:3e:25:54:a9:17:ef:b7:73:e5:0f:ad:8c:0d:95:2b:6e:
12:20:95:68:e5:80:45:ab:97:6c:e6:28:c1:ff:fa:d0:4f:93:
ea:e8:68:09:4d:53:45:49:d8:ec:db:78:58:f3:16:e2:d1:f0:
2f:aa:c6:02:90:12:7c:c4:ca:15:8d:e4:f6:7d:11:9c:35:1b:
25:e8:b1:43:3c:9d:4b:8d:a3:70:83:7e:1d:23:35:15:ce:15:
c6:fb:84:0f:e5:12:37:ec:ab:63:ec:0f:82:4a:34:dc:f5:df:
3b:c9:ee:4f:50:8a:63:82:8d:5f:8a:7f:31:10:68:e0:5f:a2:
e4:c4:0a:19:74:c5:b1:fb:d5:18:9d:18:71:6e:87:06:b0:f8:
c2:38:2d:c4:b5:c0:9a:39:47:ac:e2:f9:bf:df:55:0f:ae:ac:
6b:de:a9:1f:72:54:f5:c7:eb:f0:3a:41:c1:02:b8:98:13:55:
5d:e0:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:03:19 2026 by rpki-client