
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File: Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier: C9D8opxhTDAO1tdcGYzkuWxZRjD3rjgmFtaSHsU7Ysw=
Subject key identifier: F6:BE:AC:2E:2F:9B:3C:BC:D3:D0:CE:C2:28:92:F0:47:07:93:B9:01
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer: /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial: 019CA97D0197789F0D9E173C8BD548A766DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number: 1840
Signing time: Sun 01 Mar 2026 13:01:07 +0000
Manifest this update: Sun 01 Mar 2026 13:01:07 +0000
Manifest next update: Mon 02 Mar 2026 13:01:07 +0000
Files and hashes: 1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: nAKWVLs03REKingY2HklZTsJfJ+STMCib9LnYVYu1z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:01:97:78:9f:0d:9e:17:3c:8b:d5:48:a7:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Validity
Not Before: Mar 1 13:01:07 2026 GMT
Not After : Mar 2 13:01:07 2026 GMT
Subject: CN=f6beac2e2f9b3cbcd3d0cec22892f0470793b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:35:62:bc:95:1f:9d:89:d0:ed:92:cd:9d:
a7:24:79:db:60:94:1e:b9:33:9d:fa:02:5e:31:31:
22:8a:5d:d8:6e:95:c0:42:df:16:2d:56:b2:20:f5:
7f:1c:66:44:91:26:a2:2e:0d:fc:6d:f2:df:7d:4e:
97:55:8b:a9:66:73:a0:20:33:31:40:dc:58:1b:87:
7c:44:9b:b8:8a:99:f6:5a:af:c5:7f:d2:82:73:b0:
38:e0:46:67:3d:2c:ce:3f:d5:d2:9f:2b:30:73:dd:
1d:03:23:79:74:ac:22:8b:4f:e3:d4:d5:35:8d:50:
0c:57:a7:1e:38:9a:ba:7e:2d:31:e3:d8:96:15:15:
44:bd:63:fa:7a:a4:02:fa:a1:7c:39:0b:fd:0b:d9:
ed:9e:be:d9:4d:78:0e:6a:69:c2:54:18:dd:fb:10:
99:70:97:d3:a1:d8:37:ef:ad:86:7a:88:8f:61:16:
f2:20:7c:c1:08:ab:3f:5b:16:43:d9:87:83:db:12:
81:c3:8b:14:89:49:fd:7c:4d:70:78:8b:45:1a:db:
66:0b:9a:32:8a:03:ca:54:03:49:a5:e1:cb:e6:84:
e2:49:07:26:0b:64:bb:58:fc:94:09:55:31:3a:0b:
cf:4e:14:47:89:57:e9:05:e0:d3:ac:52:79:c1:47:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:AC:2E:2F:9B:3C:BC:D3:D0:CE:C2:28:92:F0:47:07:93:B9:01
X509v3 Authority Key Identifier:
keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:28:07:70:15:89:1b:a2:1b:18:92:c2:7e:e5:ee:a5:29:
f5:bc:e0:72:50:19:93:dd:18:5f:57:d6:df:9a:ce:ed:b1:3a:
39:8f:5f:93:e0:5c:67:1b:96:a8:a5:15:d7:88:72:7b:46:e4:
df:0d:54:18:c4:b1:b0:ed:99:88:28:e4:79:73:6e:4e:13:c6:
80:ac:8f:42:83:85:d6:c3:68:6b:50:e3:96:7e:16:12:db:69:
db:a2:1d:8e:f4:5a:1b:9a:f3:ae:50:cf:c6:16:af:39:f6:92:
a3:9d:11:0f:12:72:ac:72:f4:67:11:f4:8d:95:83:ea:96:00:
6c:7e:24:9f:7a:af:30:6c:78:62:34:b9:2c:10:0d:64:58:ed:
ee:e8:32:67:e4:28:b3:1f:42:50:90:00:b6:27:28:3f:cc:e0:
a0:f1:90:1e:77:a6:b7:a8:33:36:25:c4:56:8a:2b:1d:13:66:
3a:c0:40:5c:59:5f:54:4e:f6:50:31:82:08:f2:b3:21:f7:7b:
cc:4a:6f:7e:49:6c:ce:7f:44:12:c1:88:d7:a0:e5:ab:1c:45:
be:ac:3d:b3:8f:3f:2a:cd:6f:3f:e6:de:ff:cb:83:4f:70:ff:
d9:0b:6a:a5:e6:88:bf:fb:49:99:42:51:86:95:17:48:74:81:
65:3c:e2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfQGXeJ8Nnhc8i9VIp2beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MGE1YzZhMWQ4YzIwNjUxZDU2M2UzZjEwYmJhM2E4M2Rm
OGUwYmQwHhcNMjYwMzAxMTMwMTA3WhcNMjYwMzAyMTMwMTA3WjAzMTEwLwYDVQQD
EyhmNmJlYWMyZTJmOWIzY2JjZDNkMGNlYzIyODkyZjA0NzA3OTNiOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn81YryVH52J0O2SzZ2nJHnbYJQe
uTOd+gJeMTEiil3YbpXAQt8WLVayIPV/HGZEkSaiLg38bfLffU6XVYupZnOgIDMx
QNxYG4d8RJu4ipn2Wq/Ff9KCc7A44EZnPSzOP9XSnyswc90dAyN5dKwii0/j1NU1
jVAMV6ceOJq6fi0x49iWFRVEvWP6eqQC+qF8OQv9C9ntnr7ZTXgOamnCVBjd+xCZ
cJfTodg3762GeoiPYRbyIHzBCKs/WxZD2YeD2xKBw4sUiUn9fE1weItFGttmC5oy
igPKVANJpeHL5oTiSQcmC2S7WPyUCVUxOgvPThRHiVfpBeDTrFJ5wUc2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa+rC4vmzy809DOwiiS8EcHk7kBMB8GA1UdIwQY
MBaAFBcKXGodjCBlHVY+PxC7o6g9+OC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEt
MDk2ZjZjZTllZDZjLzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEtMDk2ZjZjZTllZDZj
LzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeikoB3AV
iRuiGxiSwn7l7qUp9bzgclAZk90YX1fW35rO7bE6OY9fk+BcZxuWqKUV14hye0bk
3w1UGMSxsO2ZiCjkeXNuThPGgKyPQoOF1sNoa1Djln4WEttp26IdjvRaG5rzrlDP
xhavOfaSo50RDxJyrHL0ZxH0jZWD6pYAbH4kn3qvMGx4YjS5LBANZFjt7ugyZ+Qo
sx9CUJAAticoP8zgoPGQHnemt6gzNiXEVoorHRNmOsBAXFlfVE72UDGCCPKzIfd7
zEpvfklszn9EEsGI16DlqxxFvqw9s48/Ks1vP+be/8uDT3D/2QtqpeaIv/tJmUJR
hpUXSHSBZTziSA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client