Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: MKTHhmqYorRa1DJF2tDFQyOq0wf6VOKKupTMj/CYAmo=
Subject key identifier: A1:27:E7:7C:42:BE:F4:C3:DF:C1:90:0E:7A:FA:CA:83:57:0F:78:1A
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019D265FB9394B77BB09D5A8ECB15E12079B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 162A
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: dHbjsTzUX924ESyUOEmgm1nEqqZCTOABkW/B0Mfv6N8=)
2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b9:39:4b:77:bb:09:d5:a8:ec:b1:5e:12:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=a127e77c42bef4c3dfc1900e7afaca83570f781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:18:e9:27:51:e8:f0:f0:87:fc:37:18:2e:
3c:4b:5b:64:45:f3:4c:24:0a:de:d2:f6:5f:c2:c4:
79:b2:a1:b5:44:35:f2:24:eb:d0:e6:10:5a:cb:2b:
32:fa:48:05:e9:81:b4:a7:39:c7:9c:95:fc:67:01:
2b:63:6a:7d:e8:f1:f7:a6:be:07:59:d7:57:d7:c5:
a1:d0:4c:78:c2:8d:05:95:37:a4:76:e6:1e:d3:72:
dc:06:b4:4d:af:cd:5c:2b:de:01:36:c2:f4:61:16:
c6:47:87:ad:8e:73:59:84:8d:04:04:4f:c0:f4:7e:
0a:31:7d:cd:a0:c5:58:82:0e:5e:44:8a:1e:3f:9d:
a9:7c:ce:3e:ff:44:8a:52:f5:c0:13:84:88:39:0c:
ae:f3:69:7e:b4:ac:e8:fe:99:9b:bd:af:21:f3:6a:
3e:26:0d:96:31:db:94:ac:5d:8d:45:d2:f7:3f:99:
fc:2e:d3:89:2e:82:ee:77:56:9a:4d:64:38:34:e0:
15:81:b3:97:ea:49:f0:ab:b7:03:af:23:08:e4:bd:
d7:7b:12:a3:45:3c:b5:d2:17:bc:ee:68:1a:02:76:
a7:4c:fa:5c:5f:b2:76:f9:73:32:c7:1c:47:19:fb:
be:20:52:1f:84:48:23:3b:36:d9:54:d5:8c:7a:a7:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:E7:7C:42:BE:F4:C3:DF:C1:90:0E:7A:FA:CA:83:57:0F:78:1A
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:e5:bf:6a:20:1f:23:db:0e:58:d3:f8:e8:62:26:1d:d2:
29:88:ac:31:d2:92:14:2b:c3:d1:4d:b1:62:25:70:dc:16:f5:
d7:05:35:e5:2c:f3:6c:3a:2d:5d:73:9f:4e:76:e8:89:b6:f2:
c8:c8:3d:cc:51:a3:b2:3e:5c:b5:d5:68:29:8d:f0:3e:72:34:
1e:2c:1c:c4:c3:29:9d:9d:7a:95:36:f6:4b:68:cb:74:f0:1b:
b8:dc:b7:ae:d2:4e:ee:4c:53:2c:37:19:cb:b0:c1:51:38:96:
65:14:57:f4:5c:e3:0c:c0:99:e8:3b:77:64:5a:01:4c:e4:da:
b2:55:60:5c:1f:e5:28:e4:13:18:06:70:fa:48:70:b4:84:ee:
2b:c5:07:5d:91:b3:6e:24:92:e6:87:82:9f:c4:de:57:53:63:
1d:40:cf:57:7c:d2:3c:f6:6f:ba:6a:b6:96:86:cb:3b:d7:59:
2b:9d:a5:7d:8d:50:6a:37:c6:19:a1:c9:c2:fa:f7:0a:93:69:
ad:8c:cc:ac:c9:d6:5c:d4:df:10:02:c4:88:58:e0:84:72:97:
5b:d1:c2:51:c3:6a:20:28:7a:22:14:1f:f2:ac:70:74:0a:b8:
17:e9:c8:85:e6:36:c3:98:6c:ea:ca:65:4a:2a:6b:8f:dc:ef:
28:d2:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:03 2026 by rpki-client