Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: LFxqeDEdVFZFMxCME71rKGZWsYye+Tx42y8KfS+P//4=
Subject key identifier: E1:7E:8F:53:9A:0E:C0:2B:D7:42:33:40:05:82:E5:FB:68:0A:6B:1C
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019D3A1D02D6A0426EA5F193978CC985B66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:01:12 +0000
Manifest this update: Sun 29 Mar 2026 15:01:12 +0000
Manifest next update: Mon 30 Mar 2026 15:01:12 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: A/KWv79RD5cnbrAiEmuxVsCRZ8dZSXNjfv2WMOLOhEw=)
2: tpgO__8JIWwf0K5I2LYCZrVrikM.roa (hash: f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=)
3: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (hash: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:02:d6:a0:42:6e:a5:f1:93:97:8c:c9:85:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Mar 29 15:01:12 2026 GMT
Not After : Mar 30 15:01:12 2026 GMT
Subject: CN=e17e8f539a0ec02bd74233400582e5fb680a6b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:54:a9:c9:08:b6:ba:5e:ee:41:24:1d:20:
bf:ce:b7:a9:fc:0d:d2:b2:ec:55:3f:c6:39:8b:2e:
4b:5c:71:31:7d:0b:f3:fd:d0:ad:b0:4d:84:36:72:
b8:8d:6f:f3:33:46:39:cd:4b:a3:b9:d8:f7:5e:4e:
78:23:91:45:2e:fb:64:ae:38:c0:99:33:4b:10:f9:
b7:50:6b:fc:53:18:a7:97:84:98:1d:af:fc:8b:ff:
23:06:d6:df:58:38:2b:00:e0:7a:c3:9b:d2:f0:9d:
92:77:cc:89:70:77:3d:aa:7c:ed:1a:37:2b:e5:7e:
2d:10:7c:1b:89:4a:2e:6e:7a:14:f5:2c:e2:49:2a:
ab:83:87:a7:96:f6:7b:0a:0c:f8:fb:45:a6:4c:e3:
e0:db:de:71:08:10:cb:61:3b:12:d2:ac:2f:aa:c2:
1a:ee:07:e0:ab:0c:97:29:f0:79:37:df:80:ef:ec:
a9:e2:cc:cb:43:52:b9:38:58:f8:e4:b7:e8:2a:9d:
7f:6f:7f:ff:cc:b0:f7:42:29:94:1c:8a:a1:6f:20:
81:9c:f1:7c:e0:7a:b7:b0:c8:dc:3b:0b:fb:f9:e2:
5d:05:2d:d1:94:ae:8c:7d:0a:f5:b3:30:76:f0:8c:
73:5e:7b:f9:fc:c8:39:ef:a4:ed:50:84:93:85:5e:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:8F:53:9A:0E:C0:2B:D7:42:33:40:05:82:E5:FB:68:0A:6B:1C
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ac:dd:e0:03:67:68:3d:d4:60:b7:9b:a4:8f:26:a5:21:81:
01:ef:db:be:15:96:ce:c7:87:f8:63:23:30:3e:13:7f:35:4a:
a6:69:52:f7:e3:d8:69:84:36:00:64:32:73:ed:dd:f6:fa:92:
eb:34:36:1b:c1:a6:66:ae:bf:08:b0:16:1b:e7:b4:68:38:3a:
ae:7f:5c:72:f2:a3:19:e4:7c:1a:8a:e2:65:1f:09:19:a9:40:
54:d9:5d:60:e9:91:f5:5e:c7:d5:9c:9c:b5:38:93:cb:de:41:
ce:ec:d9:36:1d:b0:a6:88:82:59:60:2f:ef:45:ba:00:a4:50:
7b:5f:14:84:c4:8c:cb:c4:ed:e2:17:55:e2:25:91:d3:2f:57:
35:cc:55:13:08:23:0e:73:dc:7f:79:20:90:84:b9:2e:52:6a:
63:20:1d:7f:22:32:39:1b:e1:f4:ea:6f:07:c6:8a:0f:1a:44:
bf:22:b5:11:3b:95:82:06:76:d3:7c:08:a8:70:bc:f1:f2:f0:
9a:ae:17:0d:6d:7d:bd:b8:07:0a:24:c1:62:1a:8b:35:6d:f1:
52:eb:e1:f0:98:7e:5b:5b:48:61:80:82:57:97:02:ea:a6:f6:
29:eb:a7:7b:b0:c8:26:0c:ad:c3:67:59:23:ea:ba:b5:8c:7c:
67:b8:42:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HQLWoEJupfGTl4zJhbZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjYwMzI5MTUwMTEyWhcNMjYwMzMwMTUwMTEyWjAzMTEwLwYDVQQD
EyhlMTdlOGY1MzlhMGVjMDJiZDc0MjMzNDAwNTgyZTVmYjY4MGE2YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUZUqckItrpe7kEkHSC/zrep/A3S
suxVP8Y5iy5LXHExfQvz/dCtsE2ENnK4jW/zM0Y5zUujudj3Xk54I5FFLvtkrjjA
mTNLEPm3UGv8Uxinl4SYHa/8i/8jBtbfWDgrAOB6w5vS8J2Sd8yJcHc9qnztGjcr
5X4tEHwbiUoubnoU9SziSSqrg4enlvZ7Cgz4+0WmTOPg295xCBDLYTsS0qwvqsIa
7gfgqwyXKfB5N9+A7+yp4szLQ1K5OFj45LfoKp1/b3//zLD3QimUHIqhbyCBnPF8
4Hq3sMjcOwv7+eJdBS3RlK6MfQr1szB28IxzXnv5/Mg576TtUISThV4TCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF+j1OaDsAr10IzQAWC5ftoCmscMB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6zd4ANn
aD3UYLebpI8mpSGBAe/bvhWWzseH+GMjMD4TfzVKpmlS9+PYaYQ2AGQyc+3d9vqS
6zQ2G8GmZq6/CLAWG+e0aDg6rn9ccvKjGeR8GoriZR8JGalAVNldYOmR9V7H1Zyc
tTiTy95BzuzZNh2wpoiCWWAv70W6AKRQe18UhMSMy8Tt4hdV4iWR0y9XNcxVEwgj
DnPcf3kgkIS5LlJqYyAdfyIyORvh9OpvB8aKDxpEvyK1ETuVggZ203wIqHC88fLw
mq4XDW19vbgHCiTBYhqLNW3xUuvh8Jh+W1tIYYCCV5cC6qb2Keune7DIJgytw2dZ
I+q6tYx8Z7hCRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:17 2026 by rpki-client