Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: 3QfV261Hw35hb5eInecojYZM5LuKSAuFnjgJSeYcizE=
Subject key identifier: 18:61:1C:3A:2B:A6:BB:17:F4:FB:BC:02:DD:93:32:6A:CA:D7:CC:8F
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 01A0D9F1E2D6989271806231AFC22B3A2C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0F28
Signing time: Fri 25 Sep 2026 19:01:43 +0000
Manifest this update: Fri 25 Sep 2026 19:01:43 +0000
Manifest next update: Sat 26 Sep 2026 19:01:43 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 4ZErNRfaIW4JnAxte29JjaXxy93RCxTaG6wCvH48lQA=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:e2:d6:98:92:71:80:62:31:af:c2:2b:3a:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Sep 25 19:01:43 2026 GMT
Not After : Sep 26 19:01:43 2026 GMT
Subject: CN=18611c3a2ba6bb17f4fbbc02dd93326acad7cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:e6:61:86:31:7d:43:73:b8:54:0e:bf:b3:
19:98:c9:89:83:a3:e9:5b:7e:c4:04:89:71:28:e5:
40:3f:f6:59:68:74:0c:56:49:c3:34:a7:3b:98:8d:
2f:1d:1b:60:f7:fd:20:60:bb:59:82:0b:27:43:b2:
78:6b:42:1d:f2:f3:e1:a9:44:69:f3:8b:5e:98:cc:
15:d8:61:cc:4d:b3:9d:8c:5c:52:d6:15:94:84:f6:
f9:9f:32:22:e0:39:86:af:b3:07:f2:23:a5:b3:98:
8b:60:29:01:4b:c4:ef:62:a9:80:67:85:87:3d:d1:
6c:30:17:10:97:fe:8d:35:61:68:11:48:48:05:47:
ce:7b:e6:1c:93:56:25:db:a5:26:3b:be:16:cc:b0:
3b:2e:50:36:2b:6f:b0:53:07:d6:86:44:e1:0d:47:
c7:15:c1:bf:b1:07:ab:2a:c7:58:11:1b:95:2a:34:
c6:7c:dc:e7:d6:4a:e7:0e:d9:9b:6d:88:45:b3:60:
ab:4a:21:a2:ec:85:b0:73:1b:08:23:c0:26:3c:22:
13:e3:83:5e:ef:c0:30:a1:08:91:cd:dc:73:91:fc:
d7:bf:5f:3b:01:07:fc:dc:52:65:f8:d8:76:7e:ba:
31:68:cf:31:6d:a2:0f:b3:0c:65:ce:64:75:d3:47:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:1C:3A:2B:A6:BB:17:F4:FB:BC:02:DD:93:32:6A:CA:D7:CC:8F
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:8c:9d:55:0c:2f:eb:c3:f3:5d:52:47:08:23:24:94:52:
ee:04:9f:6f:45:52:f1:97:d4:f9:62:35:ea:39:05:5f:d0:bd:
aa:84:08:28:bc:4b:ae:b8:80:97:af:8a:82:91:35:ea:72:71:
6c:26:b4:c8:8f:4c:2b:27:a1:20:64:98:65:c5:83:26:ca:d9:
a8:ab:40:c8:12:26:28:2e:cc:6a:80:9a:f6:f6:2d:f9:72:1a:
38:89:60:64:0c:cb:32:ce:88:5b:b1:cb:62:09:28:8a:ce:f8:
84:3e:4a:43:de:ab:e6:d8:4c:9d:0d:ac:02:06:6d:07:f9:72:
ad:33:93:30:78:6c:ee:18:69:b2:8c:a9:cb:19:f8:60:34:f3:
85:92:b8:86:61:9f:dc:e4:38:c3:67:cd:b6:86:a3:58:fa:9c:
da:d2:4d:7d:4b:64:6d:2a:14:f6:c7:86:9c:6a:de:86:ac:e3:
9f:5d:5f:7c:f7:02:09:db:e5:68:88:62:45:43:9b:69:c2:c8:
3f:79:56:be:df:c6:be:70:06:1b:c7:59:94:b7:36:5e:d4:7c:
92:65:48:4e:43:7d:65:f1:b5:e5:66:76:79:f8:5e:78:2b:c2:
fc:09:f3:44:19:0c:01:29:a4:d4:2a:ed:53:90:a6:e3:4f:54:
de:0d:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:22 2026 by rpki-client