Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: qicqaUY8qNYBUe2icwqcMSvBqEL1dhK5n8C/xCsBkls=
Subject key identifier: 31:DC:B6:63:33:B1:F4:06:D5:81:9B:22:99:3E:F1:FE:D2:C9:6C:33
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 01A08BD62183FD4905F9A8CDF03DCC414F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 15:01:01 +0000
Manifest this update: Thu 10 Sep 2026 15:01:01 +0000
Manifest next update: Fri 11 Sep 2026 15:01:01 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: U7vlbSZiPOMBf60Z+yG5PsKLf1+oo2Tcfj3QQI6/fwY=)
2: tpgO__8JIWwf0K5I2LYCZrVrikM.roa (hash: f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=)
3: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (hash: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:21:83:fd:49:05:f9:a8:cd:f0:3d:cc:41:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Sep 10 15:01:01 2026 GMT
Not After : Sep 11 15:01:01 2026 GMT
Subject: CN=31dcb66333b1f406d5819b22993ef1fed2c96c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:fb:cf:52:2f:e4:dd:bb:45:e1:c2:e3:50:
a5:70:fd:4b:c4:2b:b6:96:d9:6c:13:99:9e:2a:b6:
5f:8d:e6:a6:16:7d:81:48:80:42:76:6d:cd:d5:4d:
2b:83:88:13:af:fa:af:db:91:d2:f9:51:c4:dc:cd:
5e:66:f3:4e:44:a5:07:15:2f:9f:f5:b1:48:d9:34:
c4:fa:a7:d2:c9:16:9c:12:fd:bf:f3:8e:1f:a1:7a:
1f:98:8b:b9:be:e4:7d:5a:e2:71:ed:bd:7e:cd:74:
89:3a:ac:79:88:a5:52:67:ca:3c:15:d3:e8:88:a3:
46:5b:07:db:a3:2a:f3:e9:e2:39:db:78:e1:cd:31:
9e:e0:25:13:bf:81:06:c1:e6:2f:18:e9:21:ae:85:
60:03:98:ed:d1:89:a9:97:56:a8:e9:1a:d2:a7:95:
7f:f6:b0:cc:3a:6f:4c:9d:84:db:4c:b7:bd:32:3e:
7c:4f:1a:9a:c8:cf:74:61:01:48:6c:23:81:64:9d:
54:c4:37:6b:d7:57:87:a9:ec:36:99:42:b6:cd:e5:
dc:6c:e3:a8:d3:1e:f5:87:97:9b:06:6f:46:34:2b:
b5:88:d9:d3:37:fd:92:74:61:47:29:1d:51:74:c8:
e4:0d:4c:d6:bd:b3:54:e5:47:b0:0c:d8:ac:cb:84:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:B6:63:33:B1:F4:06:D5:81:9B:22:99:3E:F1:FE:D2:C9:6C:33
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:4b:1a:a1:74:9f:ac:20:0d:e3:ce:3e:3d:f5:7c:30:9f:
c4:8e:3a:af:99:31:2b:24:48:44:4d:3c:77:47:9c:ac:16:e0:
0c:13:98:8d:eb:72:d6:07:4e:e7:4c:d0:c5:54:26:99:e7:48:
65:2c:68:d5:28:4b:87:b4:92:38:b1:8b:36:50:f8:9d:ce:8d:
42:1f:fa:29:70:b8:d8:d9:2e:8d:42:4b:7c:d8:48:60:c1:bf:
fc:0a:ba:2d:cb:44:e8:56:6b:f4:b6:e5:48:f4:4a:94:c3:20:
cb:0d:7d:e7:33:49:a0:f3:51:a6:d0:66:17:0e:17:96:4d:6a:
0e:a8:f7:7d:fb:8d:41:a8:23:60:12:16:06:e4:be:ce:3e:17:
a3:07:17:6c:e4:97:ee:9c:1d:43:24:f4:b1:fa:fe:7a:ff:38:
0a:f7:65:81:6d:a3:c8:84:25:9a:93:f6:94:d4:73:72:cd:1a:
a8:2b:51:5c:b2:20:5a:7f:c0:48:ca:ed:74:ae:70:2f:c5:54:
51:c2:05:5b:30:bd:71:c9:cd:e2:a5:72:c3:a5:00:41:9e:74:
34:69:25:05:ea:72:43:00:7a:06:7c:8d:c9:ef:78:33:b2:80:
67:b9:9b:6f:58:94:dc:6a:9f:28:42:24:3f:75:65:dc:a0:8b:
7d:d0:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:55:09 2026 by rpki-client