Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: 9I/i1zW/SGf1Hr8ZyQC9QalEbGG8B75KJe3njruKVQE=
Subject key identifier: 0C:5A:53:6A:46:85:12:6A:A2:38:4A:E7:93:69:EA:2D:B3:76:62:2D
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 019EBF9176080314E2B4B8F292E0784FB087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: 57
Signing time: Sat 13 Jun 2026 06:00:41 +0000
Manifest this update: Sat 13 Jun 2026 06:00:41 +0000
Manifest next update: Sun 14 Jun 2026 06:00:41 +0000
Files and hashes: 1: 7xRY0_J3nLs2Zbb4HbRJUTAaX5E.asa (hash: uI1w3b4d5QuNJ3MgHfhxvrNeSonJzAut2AEIwecCKBU=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: KkT9MZMaZdAJcmHbZDwGE6Aaaow/OnkpRjNwe+LlbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:76:08:03:14:e2:b4:b8:f2:92:e0:78:4f:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Jun 13 06:00:41 2026 GMT
Not After : Jun 14 06:00:41 2026 GMT
Subject: CN=0c5a536a4685126aa2384ae79369ea2db376622d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:7d:ac:b8:83:e3:6a:57:b9:e0:56:4e:9e:
41:33:3f:d3:d0:6e:44:3f:ef:71:3a:e8:3e:9d:16:
a3:ae:06:05:38:c9:a4:b2:d8:bb:a1:f8:06:4c:a2:
c4:16:cd:01:f3:21:86:b1:40:7d:e4:f6:5f:5a:71:
ad:f7:1f:5e:c8:19:ad:de:29:73:41:f9:ac:7b:39:
f4:b9:c2:64:dd:49:f0:36:3b:d8:a9:be:6b:a3:3d:
76:1b:d8:37:2a:56:39:df:9f:00:8c:39:8c:af:e9:
8b:e5:1c:b5:45:df:2b:d2:47:af:f6:4a:b1:8d:19:
95:52:95:e4:80:a2:82:fa:e8:92:71:0c:dd:60:5b:
bf:f3:2a:4d:5a:2b:eb:6b:ac:64:af:98:d6:fd:2a:
c1:08:ca:13:1b:5a:55:0e:32:4b:16:6e:9f:91:81:
5d:cd:a1:9d:2f:e8:f6:29:32:77:ab:37:2a:3a:92:
64:20:22:44:2d:2e:da:83:43:3f:ba:d5:b1:d4:e4:
20:c4:43:32:84:aa:f0:16:4b:99:d0:be:3f:21:14:
00:62:b0:1d:15:65:8d:4a:93:cd:97:a0:93:3b:be:
41:3a:34:bc:62:24:a2:a4:b6:06:07:1a:e3:31:fd:
5f:18:24:90:3c:03:75:f3:53:30:23:7c:a7:38:a2:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:53:6A:46:85:12:6A:A2:38:4A:E7:93:69:EA:2D:B3:76:62:2D
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:e8:98:25:7e:75:2a:79:5e:ee:7f:c5:ea:c6:ea:7f:b1:
f5:92:54:f5:db:ee:46:0d:ba:ed:59:57:37:f3:34:d9:f7:95:
9d:49:2b:62:da:23:66:97:aa:96:36:03:ff:fe:b7:b4:91:0d:
1a:1c:e2:b3:ee:c8:e5:83:87:23:6f:1f:97:d5:eb:86:c9:38:
11:64:73:ae:83:17:2d:95:8d:6c:b1:ba:dc:27:91:c7:30:c0:
72:3c:1e:4b:3e:bb:fd:a5:7c:76:04:fe:c9:f5:33:cc:a2:f1:
0a:a1:31:01:6f:11:59:60:3d:bd:b7:a2:c7:1a:02:3c:4f:c9:
58:2c:af:a9:09:f5:be:37:bf:d3:c6:2e:30:42:0d:2c:ed:59:
d6:1f:c5:b3:7c:62:6d:c8:91:c4:93:46:e9:b4:58:96:32:1c:
8e:06:f3:4d:b1:a4:ef:78:02:55:7f:02:45:70:77:0e:80:de:
2c:00:40:9c:9a:e6:2b:2d:0c:56:4c:5a:a8:fc:44:8a:9d:93:
f2:1b:6a:8f:fa:2c:6c:aa:a8:1c:b1:ee:58:32:04:26:67:24:
ef:d7:f9:40:4c:cf:64:5f:8d:71:ac:14:e8:d1:6a:eb:01:e3:
71:4f:45:ee:bc:74:bf:27:1c:a7:36:e5:76:ab:aa:09:6a:9f:
66:70:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:54 2026 by rpki-client