Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier: wr85K56pW1hMibQmhcx4l3TIqWAVhG8op6wiEN8d+Ag=
Subject key identifier: 29:DE:42:70:2C:8B:66:07:17:93:EE:B6:7C:17:86:AA:35:8C:DA:68
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 019CAAFD775E72EF6B33BF78C6325B474647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number: 15C2
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: 1dFeN9nRCc8RwdqveLKw5UDcf2Or7hdZbt0HPeYqzqc=)
2: Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa (hash: SCSIsdEZbyMjuC8DKEAv4wcXnrW/bCbmZfUciq6h+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:77:5e:72:ef:6b:33:bf:78:c6:32:5b:47:46:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=29de42702c8b66071793eeb67c1786aa358cda68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:d4:1d:db:06:8f:f3:a4:54:fb:a7:f8:f9:
cd:a2:89:ce:6c:49:13:1b:b0:8f:fd:fd:d0:f7:29:
b1:bf:7b:8c:8d:99:c6:73:83:9d:60:13:5b:a5:22:
f0:0e:41:68:32:20:b0:8f:3d:ac:a8:a9:44:c3:2e:
0d:29:1c:67:6f:a4:78:d0:60:34:27:ba:b2:b5:4d:
7c:fa:6d:09:5b:0a:27:7f:11:5a:d2:4e:05:a6:a3:
f5:75:bc:a1:dc:24:4c:61:66:3b:2c:0e:df:98:46:
27:d8:ad:e2:ca:90:9d:cc:d1:17:52:4a:a7:1d:5b:
8e:9f:6c:36:b8:2a:a2:a3:06:ff:0b:03:98:30:fc:
77:46:c0:b6:83:1d:41:e7:19:66:73:d0:a4:77:f4:
59:06:85:b4:55:f9:6a:6a:1c:39:95:dd:49:00:61:
fa:d1:24:03:5d:ec:d2:92:11:fe:d0:9f:cd:e4:1a:
a0:c9:49:ab:de:08:c4:b9:20:7e:91:79:6b:a0:c9:
8d:22:75:b3:eb:8e:61:cb:f9:49:42:9b:f0:36:dc:
ff:5d:b6:78:ee:a9:64:78:ee:3d:ff:ad:06:e3:f5:
25:2f:e1:64:d8:3e:11:40:dc:eb:67:a0:9f:c9:f6:
89:52:2c:1e:b8:05:fb:30:84:96:d1:05:fb:f9:92:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:42:70:2C:8B:66:07:17:93:EE:B6:7C:17:86:AA:35:8C:DA:68
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:bd:0d:b8:e8:47:96:70:f8:64:4a:3f:a8:c8:44:53:18:
a4:9c:c7:0b:8b:6c:12:96:fe:05:24:4d:d9:f8:3b:e0:64:c6:
c5:59:77:32:18:d3:03:ec:54:42:5e:21:03:85:50:41:7d:58:
0b:d7:6d:82:63:33:8b:50:d8:9f:ac:0f:5e:7d:3a:5b:a4:ce:
07:0d:4d:da:78:5b:12:2e:e3:82:6d:81:5f:a7:91:57:94:08:
a4:b6:dd:d7:c8:9d:e6:cf:c9:d4:69:94:6a:10:71:2f:0e:c9:
51:09:cb:55:38:1d:59:73:d2:28:e6:3c:7d:56:9f:67:02:07:
89:47:84:1d:a3:a0:7f:80:be:a9:dd:e2:b0:89:c0:23:5f:f8:
90:fa:09:2b:eb:54:cd:5a:01:a2:80:67:5f:fe:b0:73:be:eb:
80:dd:d0:00:bc:96:df:08:10:10:ee:12:17:16:58:db:06:03:
ed:90:ef:e5:7d:03:27:1f:f6:5a:96:4a:a6:3f:19:df:ea:5b:
55:30:39:c7:7d:f0:36:ee:7e:6d:12:71:4e:32:30:f1:77:d9:
7b:19:41:f5:e8:8d:4c:bc:11:8f:76:56:6b:60:27:41:48:0a:
4b:f8:0b:43:a0:98:eb:d7:67:2d:52:aa:21:4b:25:72:9e:72:
80:38:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:25 2026 by rpki-client