Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: oqtkpI0hV2YTbRqLIlLzsul3bccWr2V3Et2F9XEl0Iw=
Subject key identifier: 77:E9:98:2F:78:48:15:5D:31:55:37:73:79:AF:99:A4:8D:11:37:17
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 01A0DBE056EEAC4BDDDC9E703B0DFF839B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 04:01:47 +0000
Manifest this update: Sat 26 Sep 2026 04:01:47 +0000
Manifest next update: Sun 27 Sep 2026 04:01:47 +0000
Files and hashes: 1: 6MT8gBwfYHWN7Sq2KVrJZlNQ-Ps.roa (hash: DvaijMExSYKtFCkDw2S7VYWVS8RZwCohsUuXaIZZ+u0=)
2: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: NUQYTWH9D+MEc8wiRzhefkD086/qNEAPPcykNOS5vlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:56:ee:ac:4b:dd:dc:9e:70:3b:0d:ff:83:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Sep 26 04:01:47 2026 GMT
Not After : Sep 27 04:01:47 2026 GMT
Subject: CN=77e9982f7848155d3155377379af99a48d113717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:09:36:ca:70:59:fc:2f:b9:a2:89:7a:26:
52:46:96:f6:01:74:98:a8:d7:b3:10:89:05:95:dd:
36:3a:f8:12:15:9b:96:ab:7b:32:f4:db:c4:09:b0:
eb:ba:df:be:3b:c1:52:b8:5b:34:2e:1f:13:18:6e:
8b:f8:a3:90:ea:6e:af:b6:13:88:04:b4:0f:3e:9e:
66:54:da:59:d8:01:a9:06:fa:59:10:06:51:39:eb:
78:a2:a9:9b:f0:77:f0:75:21:a6:58:e0:e8:29:92:
ff:4e:6b:d5:34:1c:93:00:fa:ef:59:a6:8f:cd:f2:
ca:c1:55:61:27:62:60:6c:74:47:05:9b:81:2e:e8:
42:be:e0:6a:b3:94:de:d3:b7:f3:4c:25:32:f3:38:
24:e9:e2:e2:27:0c:aa:eb:bb:52:ce:c8:fd:63:c6:
44:4d:97:ae:21:7e:58:2c:96:96:58:43:c2:e0:12:
a1:19:56:91:99:48:2e:9e:8d:2b:ea:e0:b7:31:31:
14:89:d4:f1:5e:2d:74:0b:bf:2b:e8:05:c6:ca:a0:
3e:63:8e:e0:be:e4:c6:03:24:60:8d:ba:c3:4f:ea:
d8:84:1f:84:bf:85:94:c9:1f:df:69:9a:60:3d:aa:
9b:77:2d:43:84:90:8f:29:be:12:17:17:59:d6:6e:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E9:98:2F:78:48:15:5D:31:55:37:73:79:AF:99:A4:8D:11:37:17
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bb:9e:ed:79:d1:3f:5b:36:a1:e9:e7:65:08:5f:c0:64:1b:
0a:2d:26:99:04:66:6f:55:4c:cf:d8:fa:3f:88:ee:b7:dc:1b:
7a:c1:29:b7:14:39:18:d1:be:49:94:69:63:8e:66:30:b4:6f:
c5:fb:b5:4c:7d:c9:d8:fc:56:45:c4:30:de:52:8f:79:4c:70:
d1:73:3d:15:a0:1f:cd:7f:69:da:2d:0e:89:97:92:b7:46:bf:
d3:ca:aa:f0:99:de:20:0e:89:4e:6f:e1:1b:c9:d3:bb:23:01:
0a:6e:88:37:8e:a8:d5:c2:53:c1:0e:9e:6f:26:b8:b8:3e:29:
1c:c4:48:dd:ed:82:1a:ec:80:8a:f4:a3:65:e6:70:cf:bf:26:
c4:95:9f:10:e4:b1:3d:77:60:f9:a8:7f:65:31:5a:ee:7e:7b:
77:61:ec:21:1c:16:bd:e8:2c:e4:21:c7:0e:90:22:cc:90:93:
ce:c5:29:c6:45:bd:7e:6b:86:6c:65:2c:69:f8:2a:ee:be:ab:
81:19:4c:8d:bd:c7:1d:81:cf:c7:b5:b5:d3:56:1b:53:5d:28:
bc:f4:0c:53:73:fa:b3:b4:6d:fb:05:1a:70:22:31:10:c2:77:
ae:aa:4b:68:26:ba:40:fa:7a:ef:3c:06:86:28:40:15:c7:3c:
0f:c3:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:56:16 2026 by rpki-client