Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: fpLlQwblSMy/lvtWW+6QqsxayNXvgzkF437rG024U44=
Subject key identifier: 7A:27:83:83:EA:7E:EB:17:E7:8C:23:CD:6E:C4:75:15:27:7B:65:D0
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019CAC0FC347C18050AB1F5B3C389B9F9FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0CFE
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 7UmIO+mud1XfMzTIcCX70Mhxku0cf65QreiR26wT4hw=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c3:47:c1:80:50:ab:1f:5b:3c:38:9b:9f:9f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=7a278383ea7eeb17e78c23cd6ec47515277b65d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:7f:83:6b:25:b6:a9:5b:34:38:3e:d8:ba:
0f:37:f7:f3:af:ad:2c:5f:9c:a7:95:b9:ea:64:8d:
f1:c3:9f:14:ca:ed:b4:5d:2c:f2:0e:77:7b:98:2a:
61:71:a9:f4:bb:c9:29:8d:7d:52:4c:02:77:37:58:
7b:fd:cf:d5:75:47:09:3d:fd:db:3c:99:2b:71:ba:
34:e0:22:ff:14:32:1c:65:eb:8e:66:24:4c:d6:39:
ce:2a:0e:17:85:d4:99:44:89:74:a3:f4:33:34:b1:
f3:8e:e0:8b:65:3e:8c:77:c6:4a:32:e3:90:e8:d2:
8b:0f:32:c2:83:26:0d:e6:a2:17:f7:6c:0f:fb:62:
b9:be:95:0c:30:d6:42:6f:ac:ea:db:31:01:4c:1b:
5e:4b:82:fc:4a:ed:be:ca:fe:e3:2e:5a:2e:00:eb:
ba:2c:5f:8d:d5:80:e9:d1:40:6a:b0:7a:0f:0e:33:
52:78:0e:9b:72:c4:df:a1:34:96:f9:eb:e9:c5:8d:
39:49:46:8d:37:ee:77:65:79:ba:6a:16:8b:1d:0c:
a0:1f:67:a9:23:f1:0b:7c:fc:a9:1b:49:6e:ec:e7:
17:c3:58:6b:d9:69:ee:4c:ee:d0:ca:c5:06:f8:03:
a0:ee:8c:95:79:63:b7:7c:51:5d:a6:d0:ee:52:5f:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:83:83:EA:7E:EB:17:E7:8C:23:CD:6E:C4:75:15:27:7B:65:D0
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:5b:97:f9:93:e6:ba:62:ed:74:1f:f5:37:f5:1c:85:5d:
a4:96:7d:41:dc:2e:55:17:78:cc:da:3c:98:c7:ab:00:00:06:
b0:9c:68:41:31:89:06:96:59:e6:54:13:0b:71:8a:d5:d2:e6:
7a:84:67:22:e6:57:ff:51:a5:d7:90:72:41:64:9a:dd:df:30:
3f:26:09:22:92:2c:16:0a:cf:78:06:fc:61:b9:82:78:d8:bf:
4c:bc:4b:9f:a5:b9:1c:32:a3:8a:e7:88:ad:04:6c:df:ec:5d:
e6:ad:2c:1e:8c:f7:c0:9d:2c:aa:79:0d:1e:99:dd:9d:80:ad:
7a:b3:dd:15:14:4f:41:53:c8:d8:4d:2a:c0:22:00:c6:4a:ba:
d4:de:e5:a1:0c:ea:44:52:55:1a:02:98:f8:c3:b8:df:d6:5e:
15:d9:6b:7e:9c:9d:fa:0e:36:13:22:87:8e:39:85:a8:a4:46:
bf:41:b2:4d:f1:7c:39:c5:d2:6a:66:b3:d1:75:f5:47:23:d5:
99:68:29:da:5a:5d:fb:1d:a5:fc:39:66:05:84:59:40:24:e0:
97:d0:d3:37:80:55:07:b9:22:ec:28:25:67:e2:75:7f:ae:02:
12:50:0d:7c:10:7c:b9:04:30:c8:47:52:f6:ef:12:7f:08:83:
a0:d3:a4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:28 2026 by rpki-client