Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: XdhJd6QOiIKOTnSELj32NkHbeU/XbQ9TxNUM1OEipes=
Subject key identifier: 29:0A:B7:0A:13:70:55:B3:5F:E5:4E:6C:3E:BB:8A:48:5A:42:4C:12
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019CAAC715767AC29C54E51AEF084A0B8173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 15EA
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: dZmHDNBg/cqu24M0LyTB6dyhH8Or73BRtWXcg9vh19k=)
2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:15:76:7a:c2:9c:54:e5:1a:ef:08:4a:0b:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=290ab70a137055b35fe54e6c3ebb8a485a424c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:7a:6a:f5:97:12:c8:3c:10:99:d7:25:d4:
27:36:6c:8b:c7:9c:e4:b6:23:0d:78:3d:15:0c:1e:
d4:d7:49:4b:79:05:e7:92:50:93:30:c8:b8:09:75:
43:a0:a8:26:c0:55:51:b1:98:bf:95:a8:b3:aa:50:
8d:da:cd:e0:a7:73:69:5d:9d:8e:7d:7f:fd:e8:63:
7c:0d:b4:66:c3:dd:8f:5f:06:8d:dd:81:08:85:9d:
27:90:bb:51:47:22:c1:11:7b:cd:5a:a0:cc:d0:34:
3a:8e:73:f3:e0:cf:31:9c:74:40:77:6c:fa:bb:6a:
d7:97:90:cb:d2:9a:10:e2:72:98:29:4e:81:9a:ed:
3e:a4:1a:5f:2b:e4:13:25:c9:f3:60:37:b6:7d:b1:
41:13:63:b4:fd:06:1c:e8:7e:50:6b:aa:60:d6:ce:
5a:32:41:b5:a0:d2:39:8f:30:c3:24:80:17:6e:12:
20:99:15:7f:55:ec:7d:18:dc:0d:e8:02:4b:48:d4:
ba:dd:00:e4:1a:80:01:23:f1:ae:d8:6e:79:a3:61:
af:a9:70:f5:eb:9a:8f:9d:51:43:dc:2e:91:8e:48:
a0:23:42:cf:8a:9b:0a:c5:a5:3e:b6:63:0f:cd:24:
83:ce:ef:0c:83:76:a7:ed:03:9f:0f:d3:c3:43:b3:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:B7:0A:13:70:55:B3:5F:E5:4E:6C:3E:BB:8A:48:5A:42:4C:12
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:57:41:d7:86:1c:18:97:da:db:55:f7:c4:ef:f0:33:c0:0a:
01:2a:53:0d:2a:87:be:49:de:60:d3:fb:5a:d7:27:12:86:71:
f5:83:0f:4d:cd:7f:f1:c7:bc:b9:3d:04:87:75:37:16:f5:6e:
0d:1f:8d:98:9e:cc:ee:f7:79:18:2d:a0:1e:9f:92:14:38:30:
a1:35:43:79:48:0a:b7:a3:c0:8e:4b:a9:d7:06:c3:91:3e:68:
5e:04:69:91:33:c8:06:f5:88:c4:f0:97:f8:3d:d0:ee:cf:d9:
fa:77:80:41:02:25:75:ba:c1:30:c8:86:d1:91:17:7d:e5:21:
c4:33:35:f4:11:c1:b0:6e:82:6b:14:f7:a3:b3:2f:71:e1:99:
e5:85:53:0b:87:14:e3:ec:3a:5e:d7:cc:95:06:05:97:56:30:
88:12:d1:56:a8:50:1d:de:33:5a:2d:c0:46:7f:d6:b6:87:70:
8b:f5:03:6e:6e:0a:1d:13:85:3f:4d:1e:7b:80:ef:16:8b:26:
a4:86:42:84:09:00:8d:11:e7:21:60:35:df:d5:83:ca:ca:54:
b0:20:97:f9:7a:36:ed:79:eb:b4:4a:1d:28:7c:51:00:b1:bd:
62:15:47:7d:9d:28:55:4b:99:54:b8:a6:f8:28:98:2c:1c:2f:
a5:a9:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:31 2026 by rpki-client