Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File: FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier: t7f1zfXhcIhtZ/q7DMd7NiKxae+L+ROmc0uQh55/gO4=
Subject key identifier: 2F:9B:A7:36:AB:17:99:45:AC:F8:E1:11:74:0C:42:08:4A:41:27:59
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer: /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial: 019CAC7E03B3696E64EAC112158EFE3D4167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number: 0730
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: vYm/acehEFX75rIqt2X5yy+04So/EHVxlkr4KnXqQ7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:03:b3:69:6e:64:ea:c1:12:15:8e:fe:3d:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=2f9ba736ab179945acf8e111740c42084a412759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:60:44:ff:1d:ce:e8:1f:20:dd:44:c8:8c:
36:8e:83:e2:c8:d4:07:e7:c9:ec:a4:50:0c:97:e0:
73:0e:7f:1e:3f:f8:4c:0f:2b:f3:2f:f8:eb:22:ab:
7e:90:5d:b3:90:6b:ed:3e:d3:69:c3:86:3d:0e:9f:
45:90:2b:df:99:3b:71:29:88:6d:79:57:e3:38:a1:
d5:02:d7:29:62:a5:04:70:b9:2f:13:5a:1d:51:eb:
af:d8:b2:bc:a1:52:62:de:ec:61:3d:48:67:2d:04:
e7:85:bf:d9:fe:a5:45:6a:29:4e:46:8c:6e:79:c0:
e1:3a:39:f4:cd:99:67:b9:26:69:a1:be:3b:75:cb:
6a:a2:e4:a6:a2:72:16:f6:58:98:d0:41:73:bd:b9:
4a:3b:5f:78:f7:83:88:0e:fe:11:57:b4:b7:30:df:
71:e0:fb:d1:0a:3a:30:07:5b:12:03:02:b8:10:e6:
33:b2:48:2b:5b:16:d4:54:fa:79:fd:ff:ec:37:53:
cc:96:6f:d3:e8:91:6e:82:12:a0:8e:38:04:46:f5:
cf:8e:05:cc:ef:83:d5:7b:10:6d:c5:24:12:e6:58:
66:10:21:b2:90:73:12:52:39:dd:ff:af:fb:8c:3b:
a1:09:bf:f4:15:5f:80:70:94:3b:d9:ad:81:8b:84:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:A7:36:AB:17:99:45:AC:F8:E1:11:74:0C:42:08:4A:41:27:59
X509v3 Authority Key Identifier:
keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3c:5c:cf:72:82:15:3d:02:68:71:a8:ee:ac:e2:19:88:49:
32:93:27:5a:07:47:1f:8f:fa:57:ae:06:9d:3e:87:b2:9c:57:
ee:0d:4d:4b:27:1d:3f:91:7b:93:db:9b:15:0b:8e:4c:ed:34:
7b:fd:f0:21:a0:fa:cd:a5:09:e8:d6:85:20:5e:f3:a0:aa:66:
1c:f7:df:9b:46:e9:e2:20:1a:e2:36:03:05:24:04:eb:80:37:
86:3f:0d:88:a0:51:bc:0d:6a:28:47:29:8c:ab:a4:c8:b7:93:
42:81:4a:66:1a:85:73:7e:42:39:97:75:4a:d1:69:ce:c6:58:
1a:3f:3a:8a:c3:45:45:84:f0:cd:48:d1:c5:55:96:5c:28:cf:
42:e3:c8:3a:b4:5b:0e:f0:aa:e1:f9:00:34:c9:19:b2:d2:ee:
cf:e7:74:0b:77:c1:d2:d9:fe:ae:51:bf:82:42:24:61:5e:da:
76:9f:e3:0c:49:72:c7:70:4a:15:7a:e3:39:5a:1f:30:ef:35:
06:bc:e7:61:49:ad:e2:f1:31:91:1f:5e:38:0c:89:7b:b5:49:
1c:36:b6:70:5a:5b:cb:5f:ea:1a:d0:5f:cc:f8:39:47:a2:3f:
64:2a:a3:e0:a4:d2:0b:4e:83:45:6c:fe:55:18:77:36:72:29:
54:a6:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:11 2026 by rpki-client