Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: c6MQ5S3+kRMBxb1TlTEvxbK7wZ69zkB7LFyzLLVRpKQ=
Subject key identifier: C8:70:BC:61:4A:1F:60:A3:7E:79:3D:FB:62:17:17:60:42:A1:A8:D9
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 019D9C6315AE372AF2CCCBAE983EB355CD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 17:00:32 +0000
Manifest this update: Fri 17 Apr 2026 17:00:32 +0000
Manifest next update: Sat 18 Apr 2026 17:00:32 +0000
Files and hashes: 1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: JU31zVEPzdYgm8iqcPkjoxFjJ72JXEHWwu7/Kwi4/nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:15:ae:37:2a:f2:cc:cb:ae:98:3e:b3:55:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Apr 17 17:00:32 2026 GMT
Not After : Apr 18 17:00:32 2026 GMT
Subject: CN=c870bc614a1f60a37e793dfb6217176042a1a8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:89:51:33:64:3d:34:aa:43:da:2c:6d:cf:
fe:ae:16:8a:96:02:98:ae:9d:3d:82:0e:8c:cc:2b:
8f:ae:08:1f:2a:a0:bc:3c:2d:b5:ed:54:fd:2f:85:
3d:d4:ac:a3:4b:ec:5c:c0:95:ef:3b:62:2f:77:93:
23:f0:4d:87:63:28:f5:80:fc:d8:67:43:5b:08:41:
30:3f:02:5e:35:c2:9c:8e:e4:b6:f8:12:6a:73:7f:
a2:10:7b:62:bf:4d:6e:c7:9e:0c:3f:18:58:a5:65:
c7:1c:34:6b:77:d7:62:b5:11:8a:44:35:67:fe:22:
94:a0:76:50:1b:0f:32:f8:ad:c7:26:a0:7f:cf:58:
da:a0:94:09:d0:ac:e9:22:ca:8b:5c:b3:00:14:8f:
cc:4c:d3:9e:bc:f1:95:94:27:48:90:97:49:36:37:
97:33:7a:82:cf:a7:eb:6a:1b:a3:89:61:02:89:6f:
3c:16:fa:fe:fc:2f:45:34:3a:a4:1f:62:cb:fe:e7:
a7:73:ae:d4:bc:ae:2a:45:b6:b0:1a:08:68:eb:22:
01:d8:26:70:ef:31:45:11:fb:64:e7:72:30:da:f6:
7b:f0:46:f5:3f:e9:86:d4:4c:75:27:37:09:83:89:
c6:2e:9c:98:25:3d:b2:45:24:e9:a9:94:bc:39:6b:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:BC:61:4A:1F:60:A3:7E:79:3D:FB:62:17:17:60:42:A1:A8:D9
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7a:6d:32:b8:44:36:70:1a:ae:30:b9:6d:e6:23:7e:f6:93:
90:fc:6c:d5:d0:f6:9f:b3:c8:e6:4b:15:98:89:4e:ac:b4:4e:
a8:4e:c8:3a:c5:b8:20:86:c9:34:44:eb:ef:72:b3:61:1b:2f:
51:fa:53:82:0b:7a:42:05:d3:12:5a:20:0c:04:37:46:12:f9:
d6:53:f9:f3:4d:bf:28:03:33:44:a0:86:ef:69:65:bc:6c:a9:
c8:bc:49:30:49:5f:70:8d:db:a3:99:b4:a4:b0:ae:e5:8d:b3:
47:ea:b8:ab:35:07:06:03:7e:03:c7:9a:7a:a5:74:ed:2a:11:
5a:e2:1f:84:ef:69:5b:a1:9b:02:fb:57:9c:4d:5c:90:12:6f:
be:4d:eb:5d:49:6a:91:9f:7d:fb:92:1b:2d:b2:f0:65:28:ae:
ed:62:f1:6f:5c:3c:8a:32:32:9c:15:58:8b:5d:be:c7:89:29:
42:d5:78:42:b4:0e:6e:fc:7c:24:ba:47:b0:49:d5:0a:4a:b1:
e1:3f:15:b6:69:43:0b:eb:d2:54:a3:73:f1:dd:ae:ef:35:a6:
a5:d4:1a:bf:2c:d0:b7:0f:3c:23:3b:1c:a1:73:08:1c:93:e0:
b3:08:0f:0a:93:c4:15:5f:0b:aa:98:ae:e2:37:5b:1b:2f:72:
3f:ea:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:09 2026 by rpki-client