Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: 3ZN53T40yMD288Y9ZcmuBhyjTy4gS8uAYn5RVl/oztI=
Subject key identifier: 70:4A:31:EC:27:13:A2:AB:4A:00:CA:AB:49:56:96:37:83:74:5B:E7
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 019CAA2154FBEB8265657766F7619D9602CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: /ImqoX0Nu48N/PEqWRzsZAst0mx/Q1E9H5UU5125sC4=)
2: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (hash: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:54:fb:eb:82:65:65:77:66:f7:61:9d:96:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=704a31ec2713a2ab4a00caab4956963783745be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:b3:ae:db:52:66:18:5a:2d:63:06:c0:3a:
40:a6:c0:f0:6c:f0:f1:54:10:5b:11:8e:d4:51:f3:
cd:f8:a6:1e:f1:49:b4:1b:50:d8:0c:ef:5c:78:9d:
1a:4d:9a:33:c1:4d:25:d4:28:e9:eb:29:99:6f:d3:
d7:80:51:83:d7:0b:eb:34:0e:6e:fb:f1:fa:de:1c:
3f:99:aa:71:a0:11:44:b1:25:f0:69:3f:91:f0:28:
14:52:ae:8c:00:a3:46:b1:0d:da:43:05:9f:eb:f8:
38:9d:c3:33:ff:42:8b:90:ab:fe:fc:89:d3:26:22:
cc:ca:02:c8:67:b2:bc:0c:fc:0d:0d:59:7e:8b:94:
27:5b:e3:f4:35:54:0a:53:6f:d4:9d:38:dc:9f:ea:
17:5b:8c:d3:a5:73:d6:2a:6f:25:99:b6:66:ae:23:
eb:04:14:cf:dd:83:c7:76:71:c8:a9:6a:0f:32:f6:
b1:f2:85:83:ca:2a:3b:3c:0a:c5:80:03:e4:44:b3:
f5:a5:60:be:fc:95:0a:37:3f:7a:ad:53:ac:b3:99:
1c:4a:3f:96:a4:22:4b:e5:f2:55:97:45:29:e0:f7:
a0:7e:c6:66:50:e9:2b:c4:fa:06:2c:d4:61:13:e8:
84:3c:67:ba:cd:d6:ad:cc:2a:73:d9:a5:e3:d7:d3:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:31:EC:27:13:A2:AB:4A:00:CA:AB:49:56:96:37:83:74:5B:E7
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:24:66:c6:55:89:80:74:db:6e:f8:01:9a:9e:3b:15:c6:
69:70:b4:dc:be:44:9b:da:a8:35:e2:c2:b4:5c:a1:e8:69:c4:
53:99:1e:61:49:90:6b:59:6e:40:23:5a:6a:d0:bc:81:5a:1e:
52:1b:2c:c6:96:9e:2e:96:df:c3:a7:ec:75:07:a9:a0:cf:9b:
1f:f8:6e:ea:61:cb:0b:76:23:40:24:a9:98:b1:51:81:46:20:
c3:f5:58:4f:3f:65:ae:84:10:43:1f:2f:40:c4:cc:37:37:11:
20:dd:8f:1a:a7:b6:bc:84:56:a9:96:82:16:8c:f4:14:a9:5b:
b6:86:b7:ae:3c:fb:52:a7:95:76:6c:59:40:5b:91:a0:6d:f0:
d4:7e:c8:ef:45:0b:7b:30:1e:dd:c4:16:01:b6:60:ce:fc:f9:
34:f0:4a:88:ba:24:a8:07:49:9b:3c:4b:7d:22:b4:5f:da:25:
3c:20:93:61:64:3c:55:bc:f0:63:42:51:58:d2:a5:05:d6:db:
76:72:66:e7:27:5a:1a:37:c0:a0:be:a6:33:d7:17:ad:e0:3d:
b6:43:6b:9f:ff:2c:d3:c6:75:ef:86:6c:5d:7d:3d:d9:b4:41:
cd:ce:d8:14:61:81:60:21:ed:3d:72:b7:65:d7:44:3f:cb:27:
aa:7c:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:30 2026 by rpki-client