Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: iE+mjwObzFeTBpAIAqpmYaEEY0f9t2U4QWHZdVevLPE=
Subject key identifier: 05:82:E5:5A:C6:D4:85:7E:62:8C:AD:9F:3D:41:55:F6:53:6B:85:05
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 01A0C3320D836F2CD645F462ED6A6D624F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: 0162
Signing time: Mon 21 Sep 2026 09:00:32 +0000
Manifest this update: Mon 21 Sep 2026 09:00:32 +0000
Manifest next update: Tue 22 Sep 2026 09:00:32 +0000
Files and hashes: 1: 7xRY0_J3nLs2Zbb4HbRJUTAaX5E.asa (hash: uI1w3b4d5QuNJ3MgHfhxvrNeSonJzAut2AEIwecCKBU=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: jv3tgmigbna948xTx2Dqr4Pj4o8w7RygfacsSqOpCqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:0d:83:6f:2c:d6:45:f4:62:ed:6a:6d:62:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Sep 21 09:00:32 2026 GMT
Not After : Sep 22 09:00:32 2026 GMT
Subject: CN=0582e55ac6d4857e628cad9f3d4155f6536b8505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:3d:9c:f3:80:09:a5:34:b9:c5:ec:d1:15:
11:cb:e4:06:4a:1c:31:b9:9b:98:26:08:f6:01:87:
ae:1c:58:16:42:49:e4:6c:f9:e4:bd:25:3e:06:e3:
0f:6a:7d:5d:dc:61:64:f2:d4:26:4e:ac:3f:5d:bc:
e0:12:30:b1:84:b5:47:97:19:0d:e1:33:1d:7e:d0:
f5:fe:5a:66:b2:2f:43:33:00:12:38:89:ff:f8:e1:
7b:cf:68:59:82:5a:c8:fa:71:b8:a4:11:18:4e:9c:
9e:ef:84:59:4a:f0:60:44:bc:c4:e2:38:5d:0a:62:
12:17:46:34:08:8e:a0:5d:c7:cc:16:92:b3:82:c5:
08:7f:66:2e:b2:1f:90:99:54:fa:0a:ea:45:4c:0c:
8c:10:6a:9e:81:cc:d2:80:87:56:d5:d7:8f:43:e2:
18:f6:db:a2:84:a4:30:1e:fa:ea:77:95:ea:0c:05:
11:ab:7e:bf:fa:9a:91:2d:d7:88:d4:33:bb:20:5b:
81:ac:36:91:88:65:c7:ed:af:f9:19:f1:ae:01:c5:
ff:07:b3:db:81:3e:8c:b4:92:2a:77:89:46:7f:2d:
ac:16:89:1e:47:01:9d:92:d9:5f:d8:12:93:b1:28:
e8:91:eb:b8:34:b3:88:e4:8c:49:b8:9e:20:20:63:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:E5:5A:C6:D4:85:7E:62:8C:AD:9F:3D:41:55:F6:53:6B:85:05
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a7:c0:93:55:d0:f3:da:13:ca:a0:d2:30:ba:d0:e1:55:fd:
12:dc:73:3a:c4:f0:e5:f5:1a:79:20:00:f7:67:f4:af:5f:2a:
c0:e0:06:21:7a:e5:3f:54:c1:88:ad:61:50:f3:fe:86:7d:e7:
b7:ba:7b:9f:3a:d9:ec:8e:4d:a9:a9:2d:14:9c:0d:94:53:c6:
c8:26:9a:df:df:8e:29:84:53:ca:40:fe:c8:49:69:d7:d0:67:
bd:6e:16:b9:18:b1:71:a6:0a:a1:2f:a2:3e:76:f6:88:d8:db:
ec:ff:c0:8a:f1:25:26:f5:cf:6b:2a:02:5c:ef:1a:87:51:cd:
e2:cd:dd:68:f8:39:46:cb:7e:bd:be:d5:7b:20:ad:2f:e1:08:
0e:dd:26:35:d0:8e:28:17:d1:5c:6c:95:34:f1:5f:db:63:62:
c1:c4:75:81:86:06:6f:3f:8b:7f:6a:cf:bc:2e:71:5e:89:ce:
64:5d:53:a4:8e:10:f5:8f:8c:85:47:1a:17:c0:81:ef:2e:fd:
fc:3d:f8:f3:25:f5:4a:25:28:fc:8b:92:b2:fb:21:b6:31:ff:
9d:3b:e7:2a:24:7c:99:87:94:fc:e0:7b:5e:2d:61:61:61:5c:
21:99:02:58:76:64:54:2c:1f:38:b8:eb:7c:a4:2b:c4:d6:69:
a5:3e:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:43 2026 by rpki-client