Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: M9YKBHpvdCDk8jI5Si/8xUznvwewgbggUIFffusIUV4=
Subject key identifier: 23:83:AE:63:29:FC:C1:86:3F:2D:AA:D8:73:C3:D1:6D:BD:FA:4F:02
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 019DCED000D45E1A93D4BFDC644C0A157AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 0392
Signing time: Mon 27 Apr 2026 12:00:31 +0000
Manifest this update: Mon 27 Apr 2026 12:00:31 +0000
Manifest next update: Tue 28 Apr 2026 12:00:31 +0000
Files and hashes: 1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: dkNxrTXfIAD6hcl9ftz9AM1vspSOgTT2jWeyvheXr7M=)
2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:00:d4:5e:1a:93:d4:bf:dc:64:4c:0a:15:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Apr 27 12:00:31 2026 GMT
Not After : Apr 28 12:00:31 2026 GMT
Subject: CN=2383ae6329fcc1863f2daad873c3d16dbdfa4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:66:4c:60:1a:14:88:b8:e7:ce:68:7b:f0:
05:33:c6:25:3a:8e:26:df:3d:ba:92:fc:dc:0f:9f:
2b:cd:cb:b4:19:0c:7c:ac:81:bd:3e:1a:cb:67:4a:
62:82:28:0e:dc:12:4d:39:1f:70:82:a3:e0:80:62:
d6:34:3f:c0:b7:0b:d1:6b:8b:ea:27:d7:5e:56:e9:
c4:53:ec:fe:b8:e7:b5:62:d5:2f:56:44:f9:d1:45:
98:4a:c1:d9:dd:56:00:7b:5e:ad:20:52:60:9f:9f:
ad:8b:16:57:1c:3d:1e:8b:50:50:fe:b1:d3:b6:05:
e3:b4:bd:e6:4a:13:04:9f:1a:0d:4c:2a:f5:af:20:
05:f6:e0:24:50:db:88:b4:b2:e2:24:85:df:b2:67:
24:17:8d:63:dd:35:1f:ff:46:54:28:61:7e:3d:97:
27:e3:fe:ac:3e:ee:28:d1:d6:33:cf:6e:f4:9d:d6:
8a:a8:7f:47:5f:6e:a2:ad:8a:3c:bc:d0:8f:0d:b3:
48:2b:18:ab:cc:58:45:3a:ff:8d:85:72:b0:4b:dd:
d5:d6:a8:90:45:8f:b9:4e:98:9a:44:2f:44:14:dc:
c0:3e:88:87:9d:d0:91:ae:45:a0:71:f9:b7:84:cf:
cf:6c:88:83:25:cc:f0:da:44:46:7d:c6:8d:01:fa:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:AE:63:29:FC:C1:86:3F:2D:AA:D8:73:C3:D1:6D:BD:FA:4F:02
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b5:98:25:d6:65:d1:0a:06:e0:67:d1:f2:02:ce:4f:ef:79:
10:4c:8f:23:21:89:d3:fe:dd:90:a7:f9:36:17:b7:0a:0d:01:
f7:ca:dc:b7:59:b0:51:b5:5a:c7:3d:9d:1c:7f:19:40:f1:97:
88:86:dd:41:1b:67:4e:6f:b6:4a:d9:7f:46:d3:33:fd:45:c9:
0d:cd:95:c5:2d:72:10:de:17:dd:6c:76:3c:76:7c:c6:0f:08:
74:c3:4a:71:01:74:c2:32:27:c3:52:de:88:6e:16:54:47:e2:
0d:fa:cc:18:0e:bd:69:ef:f3:33:08:a5:56:dc:3c:b1:98:35:
f3:71:49:80:b0:9c:08:57:fb:44:37:32:e8:3d:d3:15:c3:31:
84:26:10:9a:7d:ff:3a:5c:92:51:39:f0:44:c1:b5:22:ff:ae:
10:ac:ab:57:45:de:4d:03:09:de:3d:3d:40:1c:8f:f2:b4:b5:
0b:cb:fa:55:44:24:0e:77:e3:d1:08:02:0a:d2:3d:ca:13:ee:
d3:bd:24:ab:c6:a9:b3:8d:54:03:e2:74:36:90:40:87:bd:ec:
32:a2:d8:e2:40:7c:c6:0c:03:21:ef:55:a3:17:f6:9a:92:47:
dd:55:3c:10:72:30:81:c6:88:28:f0:9b:ed:4a:62:8f:8e:2c:
2b:a6:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:44 2026 by rpki-client