Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier: irnJhlsiUxEon/MKk57Y47JXZ3ar2yhJ96/ENyKvezs=
Subject key identifier: 69:47:8C:B4:0B:72:97:D6:B8:80:4E:7B:88:78:B7:65:67:A1:A5:03
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 019D2695E8AAF3212CC085BB26031D23E7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number: 1602
Signing time: Wed 25 Mar 2026 20:00:51 +0000
Manifest this update: Wed 25 Mar 2026 20:00:51 +0000
Manifest next update: Thu 26 Mar 2026 20:00:51 +0000
Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: khOGOaM2X/92czLYVvyBXcYrF3plprh31NumhyzsqWQ=)
2: Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa (hash: SCSIsdEZbyMjuC8DKEAv4wcXnrW/bCbmZfUciq6h+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e8:aa:f3:21:2c:c0:85:bb:26:03:1d:23:e7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Mar 25 20:00:51 2026 GMT
Not After : Mar 26 20:00:51 2026 GMT
Subject: CN=69478cb40b7297d6b8804e7b8878b76567a1a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:13:df:3c:c0:92:58:11:cf:6f:d3:61:99:
e2:8d:ad:1b:aa:b6:7d:a2:e6:29:15:87:c6:10:a3:
03:2a:1c:95:a2:33:47:e1:f2:4d:66:c8:35:4f:93:
3d:0f:45:62:5b:47:ad:50:09:61:8d:8c:46:fe:98:
a8:c4:42:c0:51:cf:4f:79:90:4e:8f:39:47:69:bf:
99:56:88:8c:91:0d:0e:84:29:d9:0d:ab:7b:1b:0e:
a2:a9:1f:0b:0a:04:5a:bc:e7:aa:ac:de:a2:80:a2:
c9:1b:d6:e1:92:13:e9:0e:7a:e4:03:a5:44:aa:0e:
83:ac:92:3d:60:99:80:d9:05:22:59:df:8f:ce:80:
45:f0:dd:ea:91:eb:a0:76:3a:36:35:ed:d8:52:e3:
fd:91:4e:30:b1:b0:12:47:8a:96:c3:97:ab:db:90:
a0:66:75:9d:e3:b3:f7:05:eb:bf:a9:d3:73:15:53:
31:4e:e4:47:f8:36:62:b7:e5:a4:80:65:73:8b:04:
96:de:54:43:4f:29:11:dc:4a:c1:93:99:c1:9c:2b:
b6:7d:bf:f4:a4:a2:f0:33:2b:9e:34:e1:d8:32:0e:
87:0f:a5:e0:76:29:54:07:93:56:a7:d6:c4:ea:89:
a4:fd:0a:02:61:0d:13:f7:52:ac:d2:80:9a:a7:b6:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:8C:B4:0B:72:97:D6:B8:80:4E:7B:88:78:B7:65:67:A1:A5:03
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e7:bc:1c:6a:ff:87:31:cc:76:e9:8f:6b:21:28:61:89:1d:
b6:9c:be:50:e4:0a:1f:c5:e9:80:12:d3:28:89:f8:83:38:a6:
c4:95:86:43:6d:5a:50:aa:c7:c8:1e:dd:9a:61:3a:91:f2:b4:
95:07:a6:30:93:6e:a9:8b:00:09:08:aa:47:c5:3e:8e:64:19:
12:48:1d:d2:13:6e:e4:f6:9f:8a:c8:8f:a6:8d:8b:24:16:c6:
03:3d:ad:db:68:4b:f7:5c:10:64:6a:52:da:28:ce:65:b9:07:
33:cc:e3:c0:b3:11:f3:ec:ee:13:53:e2:72:1c:2b:0b:36:97:
37:e1:6c:94:4c:3f:04:28:c1:02:af:41:c3:2d:f4:05:e9:33:
d4:1e:4f:ef:0e:92:10:3f:ed:cd:29:9f:ef:75:59:88:60:eb:
f7:21:14:1c:e2:07:77:e2:26:34:67:f5:04:08:3b:83:47:c5:
76:97:30:a9:be:3e:a1:54:b9:7e:a7:1d:f7:dd:ba:62:30:0c:
93:bc:8e:74:8c:aa:9a:7e:98:79:c2:9b:94:09:4c:3d:76:51:
35:63:5b:25:e0:3a:09:59:92:24:01:a2:d3:e0:ba:ad:e7:76:
07:92:74:76:e9:6e:19:8e:19:aa:b9:a6:68:f6:16:d3:85:80:
31:64:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:42 2026 by rpki-client