Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 95feyFbDybs5vnwhpVzBKi5PlfcFaE9c+oINl8cYg0o=
Subject key identifier: F6:FF:D7:EF:52:84:51:11:49:50:62:E0:58:6D:57:FB:AC:64:EE:4D
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019D30E294EC9C978AF11B5B5FF45C4318E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 188D
Signing time: Fri 27 Mar 2026 20:00:48 +0000
Manifest this update: Fri 27 Mar 2026 20:00:48 +0000
Manifest next update: Sat 28 Mar 2026 20:00:48 +0000
Files and hashes: 1: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: hIMz/I+0DIK2HOMnIhKkt9596aEUx+OnRROZYbO7FXY=)
2: sct50ors-JAGFuKrDKCEczrCwZg.roa (hash: 4H40k4wD5tya3FMuPK36WamPaWB4B0t6QhSmDBo+9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:e2:94:ec:9c:97:8a:f1:1b:5b:5f:f4:5c:43:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Mar 27 20:00:48 2026 GMT
Not After : Mar 28 20:00:48 2026 GMT
Subject: CN=f6ffd7ef52845111495062e0586d57fbac64ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:33:7d:53:35:c2:e7:1c:9b:bb:6d:77:98:
e0:3a:62:c3:4b:d7:ec:90:eb:80:3d:98:5e:81:55:
3f:31:67:82:22:72:bb:02:1b:ec:bf:7f:12:77:26:
b3:f6:44:e7:59:fc:3f:c9:7f:c6:00:92:77:b8:bf:
88:6b:c6:3b:b1:71:d1:6b:60:b5:fa:ad:01:f9:d7:
2c:b5:1a:98:4a:ad:aa:5d:2f:e0:0e:b6:c9:1b:24:
6e:ee:31:3b:17:f2:fc:99:cb:93:e0:63:f7:1a:68:
35:7a:dc:b2:cb:83:11:f4:c0:48:51:84:b7:2a:8b:
26:9e:2d:21:9f:4c:23:74:cd:4d:d2:6c:4a:43:68:
35:b8:be:9e:0c:bb:81:7f:9b:37:14:79:7b:27:71:
ac:26:87:2e:a7:2a:57:5b:75:24:2c:d4:ca:b6:48:
e2:9a:0d:17:39:41:ec:fe:a8:06:42:c5:20:08:1a:
af:4a:cf:04:c5:e6:e5:78:8a:10:ed:7e:f1:01:39:
4b:d8:6c:f3:e0:e4:37:65:1d:b5:ea:df:ca:78:4f:
6d:d8:45:ee:da:5d:41:4c:e6:81:d6:2e:8a:0c:56:
cb:24:fa:f3:28:b4:67:46:51:d2:da:ef:07:04:4e:
9a:00:7b:f5:56:70:a9:3b:df:96:cf:03:73:d6:04:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:D7:EF:52:84:51:11:49:50:62:E0:58:6D:57:FB:AC:64:EE:4D
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:06:fd:a6:df:f6:55:e0:bd:9b:15:84:41:20:7b:f3:3d:b9:
fa:8f:34:4b:10:e7:47:62:7f:05:7a:6f:14:a7:cd:6d:25:2b:
53:7a:31:e6:c5:59:f4:04:cd:16:9d:00:15:01:73:56:db:72:
53:39:de:0f:ff:8a:43:a0:03:80:35:ee:45:2d:b2:cc:12:4d:
a3:d6:d9:55:9b:67:bc:e5:75:61:a9:13:d5:65:2d:49:87:c4:
16:1f:22:6b:93:c9:7f:84:f5:e7:fa:73:6c:08:30:29:df:27:
89:bb:b0:e8:49:57:e3:09:77:40:0c:d7:71:48:e0:30:92:f9:
9c:67:1e:ab:76:8d:2c:2e:12:55:b8:64:0d:44:4d:a1:f3:84:
b2:eb:d3:48:22:d9:45:5e:f1:cb:51:e4:17:95:1b:25:af:68:
d6:ba:f9:b6:d2:c0:63:30:90:5c:ca:c8:93:41:2f:a2:12:5a:
d2:c4:d4:38:a1:7c:58:60:f5:da:b0:bd:d3:5b:fc:0f:0f:9d:
c1:55:8b:32:a9:97:bf:b6:14:e3:8c:63:56:12:e2:79:33:8b:
01:e1:89:03:17:3d:ac:bd:af:37:09:92:d2:8d:e5:6a:99:68:
9d:e4:f6:9e:9f:60:8e:33:48:8e:0c:41:79:f1:06:54:44:85:
ec:ab:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:13:09 2026 by rpki-client