Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: TgJJSF3JeorRTPEC+4hH/kAOkaQXQ+K1Aw0yb68wHfc=
Subject key identifier: DA:50:88:B1:7C:E3:7E:E4:BD:D8:A5:AB:A8:86:83:18:04:BD:79:40
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 019D26CD18174885DEEC5AAEE880D5FF894D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: Der6FTM0zFNBcUHHMY71MrqTmEc.roa (hash: 15RROQNtC1R+TRcA+13wCXLiC5eJf1QCPFeKw8n24YU=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: dXqfJmP4nUoEPFTndLrER2TqqGt+tjhJmzgsLExsCB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:18:17:48:85:de:ec:5a:ae:e8:80:d5:ff:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=da5088b17ce37ee4bdd8a5aba886831804bd7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:d2:79:7e:6c:bc:9a:07:52:0a:cb:49:24:
eb:b0:2a:34:28:0c:76:61:21:60:7a:c1:43:b3:3b:
eb:a4:1d:82:7b:27:8e:f6:ec:d6:d0:e3:0e:cd:6a:
2a:0e:1f:75:8a:d0:eb:6c:0d:6f:83:8c:27:94:c2:
9e:f8:75:6c:18:07:49:d8:fd:2c:43:fc:91:a6:01:
cb:6c:29:02:e3:0d:61:7a:c7:90:6b:dd:6f:e9:1c:
51:28:32:58:65:47:65:55:ac:3e:1c:76:d1:8d:76:
e0:18:d7:95:15:f8:60:d5:4b:21:8a:fb:b2:3d:65:
7d:76:56:f4:3a:3a:4a:2d:0c:93:e0:4c:bb:fe:5f:
62:b8:75:79:dc:bd:8b:d8:d7:2a:0b:9d:a9:8e:77:
13:61:d8:77:78:0b:ff:8f:cc:16:bb:43:05:78:ab:
f5:b1:ed:b8:57:07:64:ce:5a:dc:a4:19:df:e8:32:
cb:f3:f1:7f:e4:55:be:37:72:2a:a5:ad:27:72:e4:
43:71:83:55:e9:c1:6d:cb:26:3c:8c:0a:e7:27:15:
60:31:3a:bd:89:88:aa:ee:7b:e8:e0:9d:e9:79:f1:
b8:81:8c:d8:bf:e9:9f:eb:0a:64:73:0d:70:d6:b0:
c2:f8:1f:26:00:16:c2:f4:c2:9a:91:d6:ea:81:97:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:50:88:B1:7C:E3:7E:E4:BD:D8:A5:AB:A8:86:83:18:04:BD:79:40
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d8:7a:20:10:91:5c:cc:46:93:39:23:15:12:fe:c2:14:ec:
60:d0:88:87:79:13:62:0b:4d:f7:d5:b2:8a:60:05:59:cf:b0:
1d:bf:cc:51:8a:a3:fc:d8:df:52:75:2d:c3:fa:a7:43:13:ac:
45:d4:a5:e5:1f:f2:2a:a3:90:95:cb:51:fd:16:40:6e:e9:c5:
0d:a8:d7:cf:66:94:42:ad:4e:f4:bb:82:bf:9b:e4:61:00:72:
0b:ed:80:e0:49:79:e7:b2:15:e3:69:5a:9a:e3:2e:9b:d8:39:
74:16:62:f7:66:76:e1:de:a3:11:44:bb:79:9d:f9:82:0a:26:
72:1b:eb:35:34:8f:20:cb:a1:04:44:71:61:bd:d4:22:bf:ea:
7f:c1:b4:5c:68:9f:11:4b:7d:f9:fd:ff:17:11:c5:0a:84:bc:
71:76:2c:a4:fd:14:7a:58:73:93:5f:d2:41:57:30:a2:82:c1:
c8:a9:8a:44:1d:1c:fb:d2:ca:42:29:1e:33:14:d3:2b:29:4d:
9d:10:ca:da:41:f1:05:9e:81:a3:40:21:ea:68:ee:52:81:e5:
dd:ba:04:84:c5:98:f8:b4:40:a5:30:2e:f4:68:c1:27:37:a6:
b0:f3:2f:b9:7c:be:11:c5:f9:2f:2f:fa:2c:d5:1e:e4:ea:7e:
4a:ec:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:50 2026 by rpki-client