Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: vNmJRQCsxsketZeVgBsV9hxsRPuFy5rOWFf2sw+QFPo=
Subject key identifier: 88:E8:4C:50:21:8A:1E:DD:BD:3B:EC:02:7C:46:47:44:30:53:1E:A7
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019D9B874412F544788A4C7AFDA87AA817B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0D7A
Signing time: Fri 17 Apr 2026 13:00:26 +0000
Manifest this update: Fri 17 Apr 2026 13:00:26 +0000
Manifest next update: Sat 18 Apr 2026 13:00:26 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: pgi7JrH8ISjUQ0ltjUiS0ycxX7FElutuTyW15SgRxmc=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:44:12:f5:44:78:8a:4c:7a:fd:a8:7a:a8:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Apr 17 13:00:26 2026 GMT
Not After : Apr 18 13:00:26 2026 GMT
Subject: CN=88e84c50218a1eddbd3bec027c46474430531ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:7d:6d:0d:45:ad:7d:0e:2c:62:d1:a5:92:
dd:dc:c8:30:91:81:b5:1c:ef:55:42:41:09:6f:88:
14:2e:b3:43:25:9a:4c:9e:dc:e6:8a:7d:a5:9e:14:
ef:9f:6d:57:dc:59:99:c2:73:66:46:96:14:ca:ec:
3e:36:b3:12:e2:0c:05:83:a7:9e:a8:89:03:c6:98:
88:4a:5f:22:12:cb:a4:d9:f8:18:ce:c6:d4:7d:6b:
4e:4b:82:22:46:dc:28:e5:6a:d7:22:af:c2:52:f3:
6f:89:6f:13:4d:7b:7a:8d:ce:15:15:31:b6:61:95:
02:fd:02:d1:57:1a:23:38:a7:d1:2f:02:eb:08:df:
fd:2b:d5:3c:43:9a:39:43:f7:a5:dc:d1:3a:cb:35:
0c:df:7f:9a:3f:17:8a:ae:6d:08:90:ec:c2:3d:61:
f4:86:92:bf:c6:99:ab:8d:99:f5:87:71:8a:eb:1c:
84:12:d8:3f:99:c1:60:98:78:7f:a7:1e:51:83:37:
6e:bf:ca:76:65:47:c0:dd:bb:27:f3:95:cd:9f:0f:
34:54:9c:e5:3e:9c:0b:a7:33:53:9e:93:c7:a2:a7:
79:95:6c:58:bb:15:b2:9f:f8:54:8f:db:1d:e9:1e:
a6:ff:70:b8:9f:2b:1e:bb:11:d2:78:58:ae:5c:b3:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:4C:50:21:8A:1E:DD:BD:3B:EC:02:7C:46:47:44:30:53:1E:A7
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:b7:ec:51:b5:59:ac:0e:6b:0c:04:67:a1:24:6e:cc:35:
88:52:ac:74:f3:90:24:92:8f:69:f4:17:67:65:b4:62:6c:a7:
1c:26:63:b1:5b:f6:b0:c0:c2:b9:21:32:d7:e2:35:88:44:81:
27:ec:9a:f5:af:7f:32:12:4a:21:f5:7d:6a:84:c4:77:c7:68:
75:3b:1d:71:6c:be:ce:cd:f8:3e:c8:8e:7b:bc:fe:ad:b2:5c:
c9:bc:dd:b0:e9:b3:ef:fc:73:92:13:cc:ba:fc:0a:b9:9d:e1:
d9:f3:7e:73:dd:42:00:b5:75:a6:1a:7b:b0:01:80:96:0a:60:
14:f1:5d:62:e0:cc:f6:1d:c3:4c:92:9f:3a:ee:6d:15:ba:78:
49:f8:e1:24:ab:36:0b:99:cc:ef:60:99:6b:a4:4f:8c:cf:f9:
86:96:50:01:53:59:30:a0:88:3f:01:21:5b:f4:2d:2f:89:9e:
4d:0d:82:42:c3:33:59:1b:c9:10:64:23:f7:1f:79:ac:45:f4:
7f:a5:86:14:da:c1:93:dd:37:0b:1a:33:c7:b3:9b:30:02:8d:
91:7f:0f:21:79:90:86:89:1a:60:36:7c:93:09:ff:17:c2:df:
20:8c:88:f1:e7:cc:66:10:48:32:c4:a7:4e:92:89:b9:37:23:
f7:c0:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:57 2026 by rpki-client