Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: 2Ezs1mkdoG8myjHMY4Jc58Ma8/JGFGbTh3/Jo/xHXWU=
Subject key identifier: 5A:A3:BA:54:59:21:23:CA:2D:D1:05:9E:49:7D:79:D9:DA:47:1E:AF
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 019D2583AE147711941782CFC4A4DB4F5325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 183D
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: XONavoos+9sw1+XcIgExxDeQgX/aEDW+w6T0pZqbT/4=)
2: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (hash: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ=)
3: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (hash: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ae:14:77:11:94:17:82:cf:c4:a4:db:4f:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=5aa3ba54592123ca2dd1059e497d79d9da471eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:b4:02:a2:25:f2:e8:d4:d0:e6:7e:89:f3:
ef:d4:d3:1d:c8:73:61:5c:d6:17:a7:64:c1:e8:b5:
66:ec:15:2d:55:1d:40:82:32:30:d3:37:86:ff:b8:
f6:0f:3b:dd:c5:f7:5c:ce:7e:80:d4:21:b5:b3:b9:
fb:37:37:f4:d8:25:60:8a:ee:fa:3b:ee:b6:0b:89:
d8:7a:41:99:c4:6a:19:dc:60:76:41:3b:45:ac:c5:
3c:e5:69:ac:73:11:c7:e3:59:bd:30:b4:bf:4f:a1:
fb:f2:77:ca:c6:bf:28:fe:34:90:f0:17:f1:68:32:
c3:29:5a:90:39:d7:19:09:15:4b:f9:a3:4d:d1:b9:
cf:f5:58:a0:86:9b:2a:a6:c8:a6:8d:0e:f8:07:ee:
d2:27:88:84:5e:2e:08:bb:3f:a2:f9:b4:6d:1d:02:
1a:ef:5f:7a:1a:2d:b3:c5:9b:dd:f0:dc:5a:b8:08:
c2:99:cd:91:6f:72:aa:7a:39:8c:a0:50:88:f6:c0:
72:3c:36:93:af:b8:b7:f1:b3:5b:14:42:40:72:aa:
22:e9:42:d4:c1:4a:60:ff:a7:b9:50:0e:d3:fd:be:
53:c0:90:25:3a:c6:16:11:c8:6d:f5:25:61:40:66:
6f:78:56:11:cb:4e:80:03:cb:a4:07:22:df:c7:31:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:BA:54:59:21:23:CA:2D:D1:05:9E:49:7D:79:D9:DA:47:1E:AF
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:f8:76:cb:b4:f0:c5:a7:e4:54:5a:0e:08:bc:10:b4:c3:
f3:d0:8a:48:4f:41:a1:92:b0:63:b3:55:c3:0e:24:38:6c:e1:
a4:fa:08:d5:ee:89:17:9b:9f:37:f7:c8:8b:ff:bd:2d:dc:85:
29:49:18:cd:ad:43:76:7c:64:0b:1e:c0:87:45:c2:6f:52:52:
30:22:fe:d0:aa:68:72:dc:29:96:ca:ab:f8:c6:1f:6b:5e:44:
d5:f8:ae:d2:ab:d3:10:ef:20:3b:d3:cd:84:8c:25:17:91:9a:
8f:90:75:02:e7:e5:ac:7a:72:b2:61:0f:ca:54:c6:1f:27:09:
ee:e2:6f:4c:a3:d7:b1:15:22:90:6d:4c:3d:70:be:cb:38:bc:
60:1c:35:86:e3:4d:e4:bd:87:b4:24:ca:ee:9b:7a:2c:ae:6c:
c2:ed:7d:40:88:b6:22:ef:46:1e:7c:c5:a7:95:54:44:98:95:
0a:a8:d9:dd:4f:30:56:1f:e4:e7:d7:ca:ac:c7:82:6a:68:03:
cc:54:d1:77:03:02:de:7d:cf:3f:8c:2a:c0:1e:23:36:8c:f1:
ca:37:df:ff:8d:1d:59:df:5a:39:b2:98:c3:e5:b3:b3:04:4c:
b8:be:8e:43:9e:52:5c:b9:7f:da:44:ef:af:03:af:b7:97:cb:
10:c7:26:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg64UdxGUF4LPxKTbT1MlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk
ZGY0YjAwHhcNMjYwMzI1MTUwMTE5WhcNMjYwMzI2MTUwMTE5WjAzMTEwLwYDVQQD
Eyg1YWEzYmE1NDU5MjEyM2NhMmRkMTA1OWU0OTdkNzlkOWRhNDcxZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHq0AqIl8ujU0OZ+ifPv1NMdyHNh
XNYXp2TB6LVm7BUtVR1AgjIw0zeG/7j2Dzvdxfdczn6A1CG1s7n7Nzf02CVgiu76
O+62C4nYekGZxGoZ3GB2QTtFrMU85WmscxHH41m9MLS/T6H78nfKxr8o/jSQ8Bfx
aDLDKVqQOdcZCRVL+aNN0bnP9VighpsqpsimjQ74B+7SJ4iEXi4Iuz+i+bRtHQIa
7196Gi2zxZvd8NxauAjCmc2Rb3KqejmMoFCI9sByPDaTr7i38bNbFEJAcqoi6ULU
wUpg/6e5UA7T/b5TwJAlOsYWEcht9SVhQGZveFYRy06AA8ukByLfxzF/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqjulRZISPKLdEFnkl9ednaRx6vMB8GA1UdIwQY
MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt
OWVlMDA2OTQyYjRiLzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi
LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPj4dsu0
8MWn5FRaDgi8ELTD89CKSE9BoZKwY7NVww4kOGzhpPoI1e6JF5ufN/fIi/+9LdyF
KUkYza1DdnxkCx7Ah0XCb1JSMCL+0Kpoctwplsqr+MYfa15E1fiu0qvTEO8gO9PN
hIwlF5Gaj5B1AuflrHpysmEPylTGHycJ7uJvTKPXsRUikG1MPXC+yzi8YBw1huNN
5L2HtCTK7pt6LK5swu19QIi2Iu9GHnzFp5VURJiVCqjZ3U8wVh/k59fKrMeCamgD
zFTRdwMC3n3PP4wqwB4jNozxyjff/40dWd9aObKYw+WzswRMuL6OQ55SXLl/2kTv
rwOvt5fLEMcmig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:11 2026 by rpki-client