Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: fmvB7PHPmGQ8ROn/bFIDdzV3ZbTOCs8GKq0Y63Gk500=
Subject key identifier: 98:3D:D0:AC:51:58:8B:93:92:BE:8C:13:F0:29:FC:90:12:4F:93:B3
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 01A0C4B2E3F4653F100C50204A6105502DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0F1D
Signing time: Mon 21 Sep 2026 16:00:53 +0000
Manifest this update: Mon 21 Sep 2026 16:00:53 +0000
Manifest next update: Tue 22 Sep 2026 16:00:53 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: g/blIcHzPMDDQuio3w2HhHCsOY7E1AD4mjpN7quRoK8=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:e3:f4:65:3f:10:0c:50:20:4a:61:05:50:2d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Sep 21 16:00:53 2026 GMT
Not After : Sep 22 16:00:53 2026 GMT
Subject: CN=983dd0ac51588b9392be8c13f029fc90124f93b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:0a:a5:cd:fa:db:11:3c:18:48:e0:a0:3c:
cf:3d:57:45:00:92:1f:4c:7c:19:9f:37:5e:48:40:
e2:a4:fe:6f:83:73:0d:d3:3d:70:97:be:50:c8:e2:
4f:bc:40:e0:59:9f:bd:6f:39:b1:2b:78:76:90:bd:
83:fe:f4:7e:62:fa:eb:2d:70:21:94:09:2d:e1:9c:
f5:42:ac:b1:ba:f9:54:dd:fd:52:2c:9a:63:f0:1b:
71:bb:0d:0e:0d:f6:9e:f9:bc:80:91:13:41:87:00:
ca:ad:d1:f6:31:63:9a:f4:84:13:61:bb:0f:94:b1:
08:06:1c:d8:a3:64:93:ea:af:1c:01:0e:ee:cd:24:
40:53:6b:e0:18:60:0e:52:47:cf:f8:d7:0d:14:08:
fd:4a:64:39:e9:04:18:9b:01:59:ef:89:b2:4e:74:
b8:d6:cb:ca:5b:38:15:05:c8:ae:ed:82:8d:97:83:
93:6f:c6:f4:84:08:c0:77:0a:89:87:20:3f:10:9c:
50:68:56:99:68:cc:1e:18:2b:10:09:69:bc:ac:54:
49:0e:7c:23:ee:fc:56:2d:41:6c:d9:d7:53:bf:73:
db:62:a4:44:26:bd:05:f0:12:93:66:ee:f5:38:ec:
12:87:ec:ea:3f:eb:5c:b7:a2:cf:40:48:17:9e:fe:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:D0:AC:51:58:8B:93:92:BE:8C:13:F0:29:FC:90:12:4F:93:B3
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:6e:6e:74:9d:16:4e:97:e7:c5:d3:64:c8:82:46:fe:a6:
9a:8d:94:ad:98:f6:22:13:2e:d7:99:70:c5:ad:1f:aa:c2:d6:
fe:a8:8c:27:bc:dd:45:d1:eb:9d:f5:cb:e5:90:99:f4:37:7a:
59:3e:e4:2f:84:0b:5c:ff:4c:42:14:f9:6e:11:2a:81:b8:dc:
c9:36:25:31:75:cd:09:ce:e9:5f:65:69:a9:2e:7f:6a:53:28:
22:df:3a:23:d8:ff:95:3c:98:da:31:f2:69:c2:2d:3a:ef:f8:
ab:88:f7:17:89:59:70:74:18:93:00:0d:88:94:48:dd:63:19:
e6:a6:37:40:ad:40:df:f4:58:6d:de:b6:a5:98:2f:ca:8e:b8:
99:0b:5c:60:93:f7:f3:0f:fa:1e:c3:07:67:72:d6:6f:c7:d0:
9c:55:6d:61:40:c8:ca:76:68:ed:08:2b:83:bc:c8:bd:c6:66:
70:8f:f0:82:bd:eb:e4:5a:d6:ad:ab:13:f2:36:ee:ca:f2:3e:
2e:03:d7:1b:be:cd:09:e6:35:63:ac:83:ce:c1:26:73:bc:b5:
76:c5:4e:a0:79:7a:e9:97:cb:c6:31:10:7d:bb:cc:67:d4:f8:
96:4d:7c:75:21:eb:55:50:89:90:b1:85:0c:4b:d3:3e:bd:29:
73:65:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:36:00 2026 by rpki-client