Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: PfqqT3ht412DuB2ytvh+lsCju7B3Gi7SmJZfqF+UIPI=
Subject key identifier: 32:FC:4E:0F:00:41:71:45:B9:E3:F4:0C:F4:3B:EC:5A:0B:87:EC:E5
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019EC1119485B7CA889590DCFD11EB0E7986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0E12
Signing time: Sat 13 Jun 2026 13:00:15 +0000
Manifest this update: Sat 13 Jun 2026 13:00:15 +0000
Manifest next update: Sun 14 Jun 2026 13:00:15 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: Mofg+f8h32y5TA8LgqzBb+CRvBq2qBSe97utrR/eF/w=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:94:85:b7:ca:88:95:90:dc:fd:11:eb:0e:79:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Jun 13 13:00:15 2026 GMT
Not After : Jun 14 13:00:15 2026 GMT
Subject: CN=32fc4e0f00417145b9e3f40cf43bec5a0b87ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:8e:bd:8f:a4:99:fb:dd:bf:b7:e6:9d:3c:
a6:06:9a:ea:36:fe:2a:76:8f:fd:c6:f4:06:85:8b:
76:3c:de:b4:ac:0a:44:7d:f9:bb:7a:da:09:38:ec:
86:32:12:0d:ef:45:fc:ce:e6:1d:b5:b1:ba:88:c0:
b9:cc:aa:11:f9:7e:24:4d:cf:01:b3:fd:d3:ac:8f:
a0:83:3b:d8:00:1a:0b:f2:d9:b0:9c:5d:8c:12:a9:
6d:3e:a4:7e:25:50:4f:63:79:f1:e2:4e:8f:54:a0:
8c:a7:b4:c1:bb:6c:3a:25:ee:84:62:35:09:da:ff:
54:da:7f:77:c4:f8:f4:2d:3d:ae:8f:b2:bc:d5:bf:
b8:b2:7f:4e:49:28:ca:8d:c7:72:ac:dc:1d:a1:0e:
2b:af:42:a0:03:71:40:ee:1f:88:ca:62:e9:0b:07:
57:14:1c:89:a9:4d:f2:24:de:49:36:3c:5a:c6:5b:
d3:49:6c:d8:49:f5:d9:7e:26:bf:66:30:e8:60:26:
4b:0b:2a:cb:91:05:ef:a3:0f:d2:f6:3f:fd:7d:d3:
f4:bf:51:c6:60:c6:2d:48:d1:d9:0a:9e:35:49:b7:
fc:f3:0c:31:b4:ea:3e:72:3d:59:7b:0b:85:54:cb:
ff:e9:a9:86:b5:a2:05:4d:a1:24:bc:44:0a:8b:d8:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:4E:0F:00:41:71:45:B9:E3:F4:0C:F4:3B:EC:5A:0B:87:EC:E5
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:71:35:8d:5b:17:dd:61:be:f7:97:ab:cf:2c:67:c4:f4:
65:37:22:fe:02:22:74:38:9e:37:4d:cf:62:e8:56:c6:9e:a8:
4d:01:0d:e2:85:10:c0:ab:a0:37:a8:0f:53:4e:85:0b:4e:60:
8e:04:69:06:a2:2b:48:17:7b:ef:48:48:f1:51:2d:d7:5d:9f:
62:55:58:36:82:2f:ae:02:66:9d:28:22:7a:a8:70:08:df:e0:
0f:e7:bd:20:14:42:de:27:97:78:22:0b:31:c7:29:2e:7d:1f:
5c:65:3e:92:ba:41:75:4d:79:6c:b1:1b:8a:67:a4:e6:e6:dd:
cf:f2:cb:a9:7a:e4:4d:9a:79:b5:f5:a0:d8:55:35:00:44:39:
11:87:f6:f4:97:4f:c4:b1:93:e6:dd:9f:d3:ac:d5:0a:5a:26:
87:7a:ed:55:79:8c:9c:0a:f8:40:7e:19:9f:68:af:c2:8b:bc:
00:ea:19:6d:a3:c1:12:1e:37:7a:33:88:cd:f9:cd:a5:6e:09:
68:8d:e7:c7:48:cc:2e:3b:37:da:9d:92:11:80:a4:51:44:bc:
9d:ba:58:37:ed:02:e2:0a:71:9e:42:60:ff:60:2b:5b:35:ad:
3b:e4:84:b0:d8:49:de:25:1e:4c:93:8f:84:a9:0b:e8:65:62:
2e:f7:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:10 2026 by rpki-client