Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 7PiiaZxzixLsClgEcndqmpxW/MCzVcKrTCw4WKmJ3GI=
Subject key identifier: EC:5E:BD:61:05:4B:DE:41:EC:B3:09:BA:18:B1:17:E3:09:40:F2:ED
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 01A0F042630CBC64916ADB1F7083810A7DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 03:01:17 +0000
Manifest this update: Wed 30 Sep 2026 03:01:17 +0000
Manifest next update: Thu 01 Oct 2026 03:01:17 +0000
Files and hashes: 1: 0bOGjfX8rCaFK1EFr_iCf9m9E2s.roa (hash: cuAwT7O+fNr0dZzRVxu32quxhPqTENg6uOwyovOP9iI=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: icOXuz75WaBtoSoxYZPyXxAYVCdcyX+ym9Xs0dD8aak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:63:0c:bc:64:91:6a:db:1f:70:83:81:0a:7d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Sep 30 03:01:17 2026 GMT
Not After : Oct 1 03:01:17 2026 GMT
Subject: CN=ec5ebd61054bde41ecb309ba18b117e30940f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:21:55:87:12:8d:8e:6a:25:93:33:ed:2b:
3e:48:6f:d9:9c:a1:73:0b:0c:de:7c:6b:3b:dd:69:
62:c0:31:35:5e:b3:db:ef:1a:1b:54:6f:f5:b7:e6:
67:9a:e4:3d:3a:f5:46:fd:07:a8:c0:90:3b:96:bc:
23:e9:59:3d:42:c9:f1:d0:89:e6:92:fe:6f:21:f1:
50:0d:a7:af:b8:6a:07:33:4b:f3:bc:a0:bf:34:3a:
1f:80:3b:93:f0:9e:8a:b2:de:20:3c:a5:e4:91:39:
45:62:74:60:cd:1a:ee:1a:d3:af:82:c3:c4:f7:11:
46:59:0f:d0:9e:c4:3d:a1:be:8e:0e:5c:9e:46:87:
af:94:5b:eb:47:ff:ca:2e:1b:fb:d4:9b:21:1c:3c:
d0:f1:b2:60:83:04:08:bc:b1:aa:50:ac:00:b2:b0:
9f:df:e3:71:aa:53:ef:a3:df:97:3b:7b:48:97:62:
3d:7b:2c:86:83:e3:98:5a:ff:28:e6:90:9f:2e:c1:
1b:40:b8:5d:e0:da:91:9e:88:e0:46:02:59:19:a0:
9b:5e:9f:8e:f3:d0:fa:00:3b:71:46:b3:92:66:d5:
60:c9:52:a6:d6:31:8c:75:a6:ff:e7:fd:6d:09:4e:
41:60:d3:9c:31:72:5a:19:8f:03:ab:27:cd:24:90:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:BD:61:05:4B:DE:41:EC:B3:09:BA:18:B1:17:E3:09:40:F2:ED
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:0f:c8:1d:77:30:2b:e2:0b:5a:1e:e1:f5:85:d4:0f:5c:
f5:e8:7f:b5:37:10:2a:18:20:e5:bd:5b:08:51:4d:05:8d:6b:
df:ae:b0:36:06:87:50:56:1d:f8:64:b5:3a:9c:61:a8:94:e3:
61:40:41:aa:81:73:25:32:9c:dc:7d:05:34:61:bb:a3:99:1f:
61:13:3f:5e:59:5b:71:4f:19:c9:15:d5:df:3d:0f:23:9c:ae:
3a:e1:7d:d2:24:13:a4:93:a2:4d:8f:74:e7:28:aa:7d:da:98:
c4:04:b0:34:75:ec:7f:f6:e5:85:e3:66:a4:ef:18:91:03:9f:
4c:9f:6d:8b:63:08:78:83:dd:19:81:21:2a:0c:c7:7c:2a:f3:
10:54:01:a9:c5:ad:a0:25:82:45:37:b1:bb:68:be:98:9d:c5:
04:d5:48:45:71:b5:53:b0:bf:f5:d5:02:b9:33:55:09:26:e1:
38:15:70:1e:9f:50:9d:a3:0e:f9:59:bf:43:b5:7b:5f:c9:6a:
95:91:4e:28:02:82:c6:ab:26:05:ea:fd:0b:f1:8f:71:c2:95:
90:0d:6b:29:ee:ce:01:7b:0c:1b:a7:89:27:36:81:ac:7b:21:
3b:33:38:31:7e:be:dd:8b:1c:ab:a8:ce:79:ec:4f:79:af:3f:
4e:d7:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:07:14 2026 by rpki-client