Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: lefqgDhdqH6nK/k58rKgSujvbBgl+0gZXsE/BidziaI=
Subject key identifier: 45:49:0A:30:CC:76:3E:06:85:FE:C6:AB:A5:23:E3:83:2F:FA:9F:11
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 019CAB33FB198A0394F42955FFD1E31BBBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: Der6FTM0zFNBcUHHMY71MrqTmEc.roa (hash: 15RROQNtC1R+TRcA+13wCXLiC5eJf1QCPFeKw8n24YU=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: /JIz9FaIqLnj4WHqL6mwOY1g/6F8eE8hpEseo4d4IRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fb:19:8a:03:94:f4:29:55:ff:d1:e3:1b:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=45490a30cc763e0685fec6aba523e3832ffa9f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:a2:b7:3b:7b:35:cc:f1:e1:3c:38:46:28:
4e:9c:63:dd:fc:ca:b2:de:91:0b:93:9c:7e:ee:26:
e5:11:53:d4:f8:e2:c2:3e:57:35:cd:a0:6f:42:8d:
ac:91:93:64:65:7c:6d:ab:d7:06:1b:4e:ba:6c:c5:
fd:7f:57:89:72:bd:79:da:16:d6:ed:de:ef:e3:5b:
99:70:d6:33:41:5b:d6:ec:99:ce:ef:58:ba:1b:30:
17:eb:37:d3:7c:66:2e:49:c9:f9:6e:ea:ec:3f:18:
87:6e:ea:2f:db:10:03:c3:41:93:29:65:83:46:09:
b8:ef:7e:90:41:32:91:d6:8b:ba:71:f6:e6:12:0a:
5b:c9:94:7d:f6:ad:5e:1c:54:b8:9e:14:54:6e:45:
ab:71:f8:3a:ec:e2:5f:64:0b:01:20:5b:53:73:10:
36:53:b9:2a:2c:90:ed:c6:f6:ca:0d:d2:0d:97:62:
d3:84:53:69:8d:bc:38:2f:3f:82:d2:93:a2:cd:d5:
d7:74:be:3e:3b:ed:e4:5c:17:4d:93:68:21:43:05:
95:54:25:5f:c2:b7:7a:d0:65:dd:50:52:1b:fd:92:
11:b8:60:f9:da:0c:06:1d:11:b0:7e:db:1f:3a:12:
06:09:51:46:e0:53:09:91:d7:3b:28:7e:c4:a1:75:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:0A:30:CC:76:3E:06:85:FE:C6:AB:A5:23:E3:83:2F:FA:9F:11
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0a:19:9c:64:a6:3f:af:b1:98:79:0f:a7:1f:3d:d0:9d:f8:
9e:ac:fd:4e:95:f7:d2:82:05:43:71:70:67:b3:4e:19:24:58:
bb:e2:c3:05:c7:ad:30:f9:10:d3:a5:37:c1:52:58:d5:48:11:
5b:c6:d9:ea:0d:58:7c:e9:a4:0d:9c:63:8b:69:df:6c:b0:bd:
7b:26:3d:1f:f1:11:ea:b5:bd:62:99:1e:68:a9:fc:6a:31:35:
60:26:df:b0:9f:7e:81:bf:67:24:8c:ea:3a:b6:d1:06:08:ba:
9c:b5:c7:42:4f:2a:75:26:69:2e:73:04:74:36:a1:2f:85:af:
db:8e:09:3f:c5:eb:f8:8d:b0:50:cc:9e:df:63:be:5b:e9:c6:
33:40:18:40:8a:50:88:03:d6:10:fb:91:68:0b:61:c2:11:c5:
9a:be:00:ae:25:b9:11:9d:8f:13:7a:3f:a4:66:27:d4:e1:68:
50:8f:4c:1e:ad:69:26:d1:41:dd:03:78:89:96:5b:4a:39:c8:
91:79:16:bb:8b:34:d9:b4:7d:7f:f8:45:cd:4a:6b:8b:65:32:
18:d6:6c:94:09:8b:ad:ef:ff:a4:38:f7:57:31:99:3a:0a:7b:
dc:02:a9:f3:83:74:15:0b:0f:d2:2c:82:0e:02:bd:35:74:7c:
77:ee:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:52 2026 by rpki-client