Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: cnMOUVoy6cPGzmxoyhrq8BTWFDU+TE1/hL7JWGM4F7I=
Subject key identifier: 50:FB:CC:28:58:F5:67:CF:E8:80:2B:5F:71:DE:3D:C9:E9:97:8D:E7
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 01A12BE8E7F6AA65CE5E9A26BF60AD3CE167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 17:00:46 +0000
Manifest this update: Sun 11 Oct 2026 17:00:46 +0000
Manifest next update: Mon 12 Oct 2026 17:00:46 +0000
Files and hashes: 1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: r5Gmiuo/9Ln5AYK8ohq7hvI4DexyDb0xU5Nv+fHZe84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e8:e7:f6:aa:65:ce:5e:9a:26:bf:60:ad:3c:e1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Oct 11 17:00:46 2026 GMT
Not After : Oct 12 17:00:46 2026 GMT
Subject: CN=50fbcc2858f567cfe8802b5f71de3dc9e9978de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:39:ed:0b:d1:7c:15:72:3b:90:74:0d:e6:
5b:85:03:1d:b7:a9:44:1f:d0:f9:4b:d0:4c:6c:4a:
95:8f:42:6e:27:41:03:ae:6b:58:23:50:83:4a:48:
f4:f4:75:23:a3:71:b7:83:12:a0:26:4b:da:33:6f:
20:18:d6:c7:3a:a2:57:7b:d6:e3:c2:0f:34:7d:b8:
27:b0:46:b5:af:80:74:d4:45:33:97:6e:d5:06:28:
2f:68:34:f1:14:0d:15:83:33:de:f8:8d:c5:65:ed:
0a:06:1a:5f:d7:c7:25:88:d2:3b:54:be:b4:6b:80:
b1:b3:fa:0d:ac:f7:90:9b:b8:7f:87:cd:a8:58:44:
69:51:3a:0e:61:ca:dc:18:20:6b:86:0b:99:50:c4:
fc:d6:68:7c:5e:9f:f2:e0:4f:ae:73:e2:53:ab:c1:
4c:3d:df:a5:5d:b9:ca:16:e2:86:11:a6:71:04:2a:
c7:f5:57:18:23:76:8c:b3:a3:6a:c9:8c:30:b4:4f:
0f:55:0c:98:97:d0:38:20:75:06:2d:c5:59:ec:9e:
75:0c:c6:24:d2:a1:70:1a:ac:7f:85:47:d7:36:06:
36:77:8a:6d:17:c3:f3:cc:91:f7:09:77:40:26:09:
8d:38:31:eb:df:ae:51:d3:57:7f:7e:05:ac:2b:b2:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:CC:28:58:F5:67:CF:E8:80:2B:5F:71:DE:3D:C9:E9:97:8D:E7
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:62:62:49:93:72:39:85:ad:49:c1:ac:b4:3c:db:66:af:
b9:89:e0:af:8c:fa:86:09:b0:d8:45:78:80:b4:38:ed:d7:16:
22:6e:75:35:6d:5c:6b:85:bf:61:ad:a4:05:44:19:bf:24:68:
90:ff:52:76:4d:93:fe:42:f0:18:cb:01:c8:75:85:c0:eb:37:
51:d6:63:99:30:f9:13:2c:4e:27:89:3f:04:9b:79:e8:b5:e3:
55:27:3a:b0:45:d0:1b:6f:7e:b0:e6:63:f6:ea:79:17:72:84:
63:70:fe:0a:d5:d9:d1:fd:d3:c4:e5:c8:8d:39:fd:f7:6d:33:
ad:58:fb:ee:45:dd:18:6b:ea:45:c6:70:06:cf:03:5f:8c:46:
d8:37:7f:5a:e9:a4:64:2f:14:24:ff:51:24:d0:2e:63:ad:2b:
e2:2b:c3:a9:98:0f:46:e5:25:c5:d4:e2:94:6b:2e:dc:12:53:
04:11:93:d8:21:d3:97:8c:c7:4a:07:c1:47:e8:2a:ae:c0:ad:
b4:54:1b:c3:d2:48:7e:d6:ed:8f:ce:4f:44:37:d8:6c:3d:fd:
d7:7d:ce:86:90:0f:79:98:a2:c9:33:03:84:c2:af:7f:29:8d:
c8:ea:5c:c2:96:25:cb:c4:e2:bb:5e:2e:4c:3d:0e:b2:1d:d0:
67:be:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:24:57 2026 by rpki-client