Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: rbRe+gHaJwNOfgg9W5cgwU8iJiZQdf9AemFY/u53X/Q=
Subject key identifier: 67:64:A0:0B:E3:07:2D:D9:31:1A:43:FF:67:91:C0:AB:60:2C:A0:0D
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 019D25BAB49C110258B37414EF2D752785E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: RwW8G9BT3DdYqmwmDEcAlPVD+CpNOpV8uqbO+tQDISU=)
2: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (hash: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b4:9c:11:02:58:b3:74:14:ef:2d:75:27:85:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=6764a00be3072dd9311a43ff6791c0ab602ca00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:da:66:af:39:b7:28:13:16:1f:bf:87:06:
ec:63:f8:d0:d0:e3:f8:2d:f6:e1:8d:71:ac:ec:42:
9f:04:16:fc:56:68:0d:9c:be:8d:74:aa:3c:6b:9a:
7c:a4:5d:4d:11:7b:40:9b:eb:99:19:4e:c1:e8:32:
1a:2f:6c:cf:fb:2f:e5:19:81:d1:34:36:57:c0:13:
47:d0:67:c9:05:28:b7:84:64:35:91:d7:88:15:de:
ef:82:e2:43:4b:4f:bf:37:aa:c6:17:03:2e:6a:6c:
29:23:95:ba:5c:7c:1d:0b:7e:6c:47:90:61:7a:25:
3e:f7:c1:fb:f9:4d:57:98:f5:34:a4:ec:85:25:cc:
39:9c:1e:63:d1:5d:e0:af:b0:82:6c:f3:bd:64:bb:
c3:54:69:f4:47:a8:8e:4c:10:f1:7d:ab:aa:08:cf:
2d:b8:5d:87:ac:75:76:45:37:b7:ae:5b:49:49:32:
5d:2f:8c:b8:8b:e0:cc:fd:3f:7a:e2:a6:de:aa:ad:
5c:82:f0:63:e9:28:2b:78:3f:13:e3:aa:96:3d:9f:
d7:b9:b5:45:a2:5a:eb:84:b2:2b:97:82:b8:65:e4:
48:33:d0:e6:5f:8c:0d:b9:f4:6b:ed:fb:1b:ba:27:
ef:a2:55:8f:d1:74:94:a6:99:4e:43:44:c1:35:57:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:A0:0B:E3:07:2D:D9:31:1A:43:FF:67:91:C0:AB:60:2C:A0:0D
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:9a:16:c4:d2:96:cd:70:50:09:f4:84:f1:e9:75:87:11:
a8:69:f5:82:75:f0:70:92:82:57:d6:bf:e6:f7:ef:30:8a:0d:
ee:90:34:e5:eb:cf:34:16:c3:85:9f:a0:ef:26:08:11:e8:76:
56:74:e0:fc:ee:51:49:a6:07:91:4e:90:91:77:cf:f3:59:16:
05:67:1c:dd:4f:09:e8:ee:33:8e:d3:d4:f4:71:c0:9a:54:db:
a5:cf:b0:ba:5a:fe:b6:b1:56:c4:ed:56:ed:71:82:58:a1:78:
f2:63:8f:72:bb:b4:25:a3:bd:89:2d:98:51:70:0b:d6:f2:b2:
a0:28:79:c6:88:d5:a2:56:96:13:0c:6c:de:cd:60:3b:a7:aa:
9e:7f:52:4e:79:59:16:b6:2a:af:5f:da:9a:db:2a:c1:89:d4:
41:f7:c8:14:e8:71:47:c6:92:96:63:c6:e5:33:66:a6:5c:14:
e4:96:8c:4c:89:29:53:7a:57:70:db:93:e6:23:0f:92:23:da:
11:25:01:ad:b3:bc:a1:8a:44:ea:57:73:da:d1:ff:d1:24:31:
f3:72:7e:8b:e6:de:f4:9d:ef:f5:b9:e2:e4:76:81:17:be:12:
ea:f1:86:c1:09:ba:9c:37:ed:a4:4a:12:d4:07:b7:cc:9c:7c:
46:bd:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:30 2026 by rpki-client