Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: NwoTpPR6/ybGOLtq8QLQBZkK4Y1pMnrfMkadtwsYpro=
Subject key identifier: C2:59:FA:90:61:2C:81:3B:05:A4:35:5E:29:9C:27:37:0E:EF:FB:3D
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019D2A3B76B29657930A492DDEEE85EDA451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 1457
Signing time: Thu 26 Mar 2026 13:00:33 +0000
Manifest this update: Thu 26 Mar 2026 13:00:33 +0000
Manifest next update: Fri 27 Mar 2026 13:00:33 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: R0eqC8f11QLXVfzJROfRBNFBhR6B58Sd+9Cgxd5uh+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:76:b2:96:57:93:0a:49:2d:de:ee:85:ed:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Mar 26 13:00:33 2026 GMT
Not After : Mar 27 13:00:33 2026 GMT
Subject: CN=c259fa90612c813b05a4355e299c27370eeffb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:67:fe:a1:f2:6d:2f:6c:b5:79:97:08:5b:
34:54:91:fb:a4:a1:1a:79:2b:8b:4f:88:8b:d7:4a:
5e:a4:26:5a:50:98:0f:da:0a:9e:d2:02:fc:59:b5:
c2:e7:d9:41:79:c6:19:8e:fe:70:8f:25:09:2d:d2:
c0:6f:e1:4a:f9:52:ce:40:85:a1:31:be:08:fa:48:
07:23:1a:a3:dd:cc:25:8b:35:10:9d:4d:b4:5d:cd:
bb:05:de:c2:79:26:47:25:38:af:87:af:2a:d5:6a:
ad:79:bb:88:74:aa:42:cb:7d:0e:08:73:7b:79:94:
80:64:bb:84:8a:0d:df:81:82:74:ed:f5:b4:d7:6a:
8e:82:ba:49:a6:b9:4e:6a:a6:83:5d:0f:71:22:8e:
9d:1e:4d:5b:d1:89:6d:2e:01:ca:63:54:9f:f2:47:
37:af:6d:58:0d:f9:fb:d7:3f:e0:ed:32:51:cf:c2:
7d:c3:14:30:f8:0a:63:88:0b:32:33:3c:7c:33:16:
66:55:87:72:9b:32:99:44:1c:12:9a:8c:8b:9b:96:
84:5b:d5:ce:f3:86:0e:a5:dc:d1:d8:11:85:b8:7f:
a2:cb:fc:bc:7e:d1:c3:e4:c4:06:c7:e8:4a:c8:e5:
6e:d0:e1:15:83:05:20:ec:d7:7b:4b:35:e1:2a:e7:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:FA:90:61:2C:81:3B:05:A4:35:5E:29:9C:27:37:0E:EF:FB:3D
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:b4:7a:0f:b4:87:d0:ad:43:44:5e:16:db:76:8a:b2:15:
bf:89:ae:87:32:47:23:47:b6:ea:ad:ee:dc:96:57:51:3f:0e:
94:6a:ff:c8:4f:d4:16:f0:73:c3:69:6f:52:4f:b3:24:26:25:
f8:0e:ee:dd:7a:28:db:f0:ba:39:45:54:21:5b:eb:f2:be:e7:
ad:2d:e5:6a:9f:9d:4e:b6:8e:2e:78:42:81:93:c5:e4:27:67:
bd:64:c9:9d:4f:71:04:de:a0:77:9b:1d:e3:4c:e0:2d:6d:05:
6f:88:5d:8c:d0:6a:d8:e3:9f:83:60:f8:15:6f:9c:6b:39:d6:
81:e8:26:b4:17:f3:94:54:02:8d:a0:a9:a4:83:fd:1b:46:ac:
24:1a:3f:c8:c2:fd:9f:f0:91:46:60:20:5d:62:41:fe:4a:7d:
e4:23:09:fa:af:41:07:46:a5:36:08:ad:5f:f4:c4:62:90:5d:
15:ef:05:07:2c:5e:e7:be:61:cb:4e:9e:ff:23:5e:41:ac:98:
a7:92:00:91:66:7a:cf:56:50:b6:6f:49:08:34:4b:c7:97:5a:
72:f6:c6:94:8d:2c:f0:e9:3b:6a:c6:88:29:a7:9c:a4:e4:77:
20:3a:31:e7:b4:f7:93:11:6a:96:a3:13:0f:e0:6d:cb:bd:b2:
2e:24:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:55 2026 by rpki-client