Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: Fj8uCNfnWJjmPWbm5hshD1AW6Vyu9E1A1YqltGw8Z5w=
Subject key identifier: 86:20:36:FF:02:3F:BD:E0:F9:1C:45:BC:25:9A:59:48:71:B8:3D:8E
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 019FA74FE08956122B5E73EF86CD4B5D703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: CF
Signing time: Tue 28 Jul 2026 06:00:57 +0000
Manifest this update: Tue 28 Jul 2026 06:00:57 +0000
Manifest next update: Wed 29 Jul 2026 06:00:57 +0000
Files and hashes: 1: 7xRY0_J3nLs2Zbb4HbRJUTAaX5E.asa (hash: uI1w3b4d5QuNJ3MgHfhxvrNeSonJzAut2AEIwecCKBU=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: bVs9kdrPQVS8fU7OxAmWM4zFrMrxy/wVn4mmfnVPlBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:e0:89:56:12:2b:5e:73:ef:86:cd:4b:5d:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Jul 28 06:00:57 2026 GMT
Not After : Jul 29 06:00:57 2026 GMT
Subject: CN=862036ff023fbde0f91c45bc259a594871b83d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:b3:3f:ad:81:46:3a:e1:3e:b4:01:bf:02:
6b:70:62:05:d2:4b:6a:03:d1:9b:4a:1d:0e:d0:00:
5e:5d:b7:bb:46:6c:ad:8e:9a:7d:87:a5:3e:c6:7f:
73:d0:0c:7b:69:0e:e2:ec:bb:cb:ce:36:ee:fe:fa:
02:61:80:09:6e:23:a7:50:73:31:0d:7a:3f:e0:9c:
63:26:64:2e:7b:a1:0b:c7:08:5d:4a:5b:ba:eb:ba:
d1:4e:b5:c8:6f:19:df:aa:cc:b5:4a:8d:06:90:26:
f4:74:1b:64:28:79:7b:4d:47:e3:3e:9c:94:04:28:
12:50:16:93:b8:05:5b:86:67:8e:76:d3:62:29:22:
54:58:ab:58:d8:c4:cf:ba:d1:0e:fc:08:37:70:7b:
94:3d:5d:8f:4b:36:f7:80:f6:5d:57:30:be:23:43:
92:1b:23:44:93:b0:99:58:88:ea:58:c5:84:93:19:
da:f0:1f:76:81:1c:87:9c:32:24:15:ba:5b:13:ee:
42:4f:7b:53:a6:a0:66:79:e2:1c:37:96:b2:42:20:
55:97:07:6a:55:6f:ed:c1:d8:df:2a:be:0c:28:37:
66:04:87:53:8e:65:01:7c:72:96:2a:23:e6:77:47:
03:78:7f:7f:0d:b5:df:37:a8:21:8d:a2:3a:64:9a:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:36:FF:02:3F:BD:E0:F9:1C:45:BC:25:9A:59:48:71:B8:3D:8E
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cc:d3:d9:a8:3b:d9:76:2b:69:bf:1f:3d:c2:d3:5c:35:76:
4c:4d:8d:8e:1e:df:53:db:e9:59:b9:44:9f:cf:90:f1:23:8a:
f1:d7:29:86:65:be:f0:af:23:e3:2a:4f:3d:8e:4c:07:83:c1:
02:3e:a4:33:a9:a5:dd:e3:31:9b:ed:5e:a8:bb:f2:cf:d7:f6:
ff:eb:43:0e:e6:fa:f8:13:52:ca:74:80:f7:23:ec:91:fc:96:
b5:ff:b1:73:eb:3b:c5:a3:fb:50:b4:0b:d1:b1:4b:ae:e0:95:
50:66:e6:ad:41:7f:ab:40:25:72:08:fb:7e:96:4b:42:7b:0c:
e8:0a:61:ed:9f:5a:d5:8e:c6:f1:a2:09:6f:af:21:90:09:52:
e4:b2:d2:23:3b:d6:0a:8b:91:f0:fb:86:e8:43:16:20:c7:9d:
5d:4f:dd:bd:3a:34:e4:8b:32:b5:b6:73:8a:ad:e1:97:b4:53:
5e:19:47:86:56:c3:b6:cc:53:99:36:1f:ea:07:e5:0a:e5:b6:
0c:d8:ae:49:a7:12:24:d4:98:1d:5a:eb:3e:37:71:af:fb:28:
c9:17:fd:1b:c8:c4:c9:15:67:6c:3d:2f:c8:28:2a:47:24:25:
a9:42:5c:79:f8:d5:66:05:b5:ec:6d:1f:30:78:33:01:72:97:
4c:3f:b7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nT+CJVhIrXnPvhs1LXXA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWMyMGFjZjI5MDIwNzFlNzJmNjdjYTA2YjA5Y2RhMzgy
NDdiMmIwHhcNMjYwNzI4MDYwMDU3WhcNMjYwNzI5MDYwMDU3WjAzMTEwLwYDVQQD
Eyg4NjIwMzZmZjAyM2ZiZGUwZjkxYzQ1YmMyNTlhNTk0ODcxYjgzZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vizP62BRjrhPrQBvwJrcGIF0ktq
A9GbSh0O0ABeXbe7Rmytjpp9h6U+xn9z0Ax7aQ7i7LvLzjbu/voCYYAJbiOnUHMx
DXo/4JxjJmQue6ELxwhdSlu667rRTrXIbxnfqsy1So0GkCb0dBtkKHl7TUfjPpyU
BCgSUBaTuAVbhmeOdtNiKSJUWKtY2MTPutEO/Ag3cHuUPV2PSzb3gPZdVzC+I0OS
GyNEk7CZWIjqWMWEkxna8B92gRyHnDIkFbpbE+5CT3tTpqBmeeIcN5ayQiBVlwdq
VW/twdjfKr4MKDdmBIdTjmUBfHKWKiPmd0cDeH9/DbXfN6ghjaI6ZJrB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYgNv8CP73g+RxFvCWaWUhxuD2OMB8GA1UdIwQY
MBaAFBSsIKzykCBx5y9nygawnNo4JHsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkt3Z3JQS1FJSEhuTDJmS0JyQ2MyamdrZXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85OWM2ZWItY2E2Mi00NjEzLWE1ZGIt
NjQ5MTQ4NGU3OWRhLzEvRkt3Z3JQS1FJSEhuTDJmS0JyQ2MyamdrZXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85OWM2ZWItY2E2Mi00NjEzLWE1ZGItNjQ5MTQ4NGU3OWRh
LzEvRkt3Z3JQS1FJSEhuTDJmS0JyQ2MyamdrZXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMzT2ag7
2XYrab8fPcLTXDV2TE2Njh7fU9vpWblEn8+Q8SOK8dcphmW+8K8j4ypPPY5MB4PB
Aj6kM6ml3eMxm+1eqLvyz9f2/+tDDub6+BNSynSA9yPskfyWtf+xc+s7xaP7ULQL
0bFLruCVUGbmrUF/q0Alcgj7fpZLQnsM6Aph7Z9a1Y7G8aIJb68hkAlS5LLSIzvW
CouR8PuG6EMWIMedXU/dvTo05IsytbZziq3hl7RTXhlHhlbDtsxTmTYf6gflCuW2
DNiuSacSJNSYHVrrPjdxr/soyRf9G8jEyRVnbD0vyCgqRyQlqUJcefjVZgW17G0f
MHgzAXKXTD+3fQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:26 2026 by rpki-client