Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: BMsXhgcwyHHQN2jENG+ZcC4YG3yI5JP3xqonjGXXfeg=
Subject key identifier: C3:F9:3A:65:8B:EF:DA:33:48:50:48:4D:8F:1D:2F:DA:38:14:F4:42
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019F8FB545808154E48BA31C389DF5CB0D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0E7D
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: ImIZJyXhB4tNO88Eh2qsnD4mDh3xRkQmN91oUUsVoOU=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:45:80:81:54:e4:8b:a3:1c:38:9d:f5:cb:0d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=c3f93a658befda334850484d8f1d2fda3814f442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:25:93:53:8a:91:4e:b6:df:95:f1:55:a0:
e8:a5:2a:71:d1:8a:c0:c6:47:e2:46:b6:6b:11:20:
a0:b4:3d:ea:53:fc:4b:a3:e7:ef:5f:8b:47:4c:d2:
36:4d:88:17:f3:a7:cb:cd:64:17:94:d4:79:78:51:
ae:f6:53:e0:9b:f5:c4:5a:26:50:a9:ae:dd:1d:52:
67:6c:c1:86:db:53:13:f3:f2:52:62:ad:e2:cb:32:
89:8a:bd:e3:56:35:a5:6b:73:d5:3f:bd:e5:8e:55:
38:a2:3c:cc:cb:a9:f2:8f:93:77:2d:d5:8c:05:3b:
6f:93:73:6d:73:22:cc:f7:78:9e:e6:49:81:c7:3a:
39:27:21:85:f4:ee:04:20:b7:cf:26:a4:c7:83:84:
3d:37:58:53:5b:1f:f0:a8:a1:08:5e:1a:67:f0:bc:
36:18:1c:26:83:6b:bd:ef:07:cf:67:a4:b0:4d:a6:
f0:9f:29:0c:62:50:ce:bb:9a:d2:6a:c9:b0:a3:81:
3d:4b:cb:cb:88:b9:d4:ba:15:0d:65:ad:42:5b:48:
64:00:b4:c6:dc:e9:47:80:12:44:ea:68:fe:54:6e:
7c:76:df:8c:b2:22:0e:80:3f:db:6b:e3:a6:57:f5:
98:1b:3e:7d:a4:45:3c:c3:b3:42:6b:52:50:5b:c0:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:3A:65:8B:EF:DA:33:48:50:48:4D:8F:1D:2F:DA:38:14:F4:42
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:1f:80:48:b5:2d:ad:a7:27:e1:bb:e3:b5:75:74:80:e0:
b9:55:20:5d:08:de:3e:8c:45:0d:b4:ff:b2:34:50:9d:a9:e3:
28:bb:da:90:21:bd:dd:78:bf:2e:ea:11:23:fa:5f:94:3d:91:
10:1a:fc:ad:33:42:b0:86:d3:85:65:9d:6d:71:50:c7:0c:79:
c0:9c:9d:c3:ea:0f:e0:11:d0:60:2d:d3:a0:58:11:43:9b:be:
90:32:ee:ce:fc:ac:8b:9a:64:fe:71:a5:3c:44:10:c5:27:c9:
e1:c4:eb:50:af:49:c8:12:c1:57:fd:59:2c:ba:20:b2:cb:ec:
b0:1b:b5:36:60:b2:b3:44:98:83:23:bc:83:ed:e1:d0:1b:4a:
a6:8a:12:26:15:c7:56:44:c9:ac:ae:c4:bb:c5:0c:d9:31:e9:
5f:06:e1:98:ec:0c:75:a2:92:54:b2:ab:34:02:ff:1c:2d:fe:
10:c2:bf:b3:22:11:90:ce:25:7c:f6:40:7f:15:e6:4d:2d:02:
43:62:60:3f:51:3c:81:f1:ae:01:53:ae:2f:80:0a:1c:e3:e7:
b4:ca:7a:cd:aa:3d:ce:08:a6:f4:59:85:95:19:eb:23:f1:04:
55:80:1f:cf:9e:52:2a:7e:86:0f:2c:4a:9c:45:e3:8f:5c:b7:
72:d7:a6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtUWAgVTki6McOJ31yw1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjYwNzIzMTYwMDQ5WhcNMjYwNzI0MTYwMDQ5WjAzMTEwLwYDVQQD
EyhjM2Y5M2E2NThiZWZkYTMzNDg1MDQ4NGQ4ZjFkMmZkYTM4MTRmNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPwlk1OKkU6235XxVaDopSpx0YrA
xkfiRrZrESCgtD3qU/xLo+fvX4tHTNI2TYgX86fLzWQXlNR5eFGu9lPgm/XEWiZQ
qa7dHVJnbMGG21MT8/JSYq3iyzKJir3jVjWla3PVP73ljlU4ojzMy6nyj5N3LdWM
BTtvk3NtcyLM93ie5kmBxzo5JyGF9O4EILfPJqTHg4Q9N1hTWx/wqKEIXhpn8Lw2
GBwmg2u97wfPZ6SwTabwnykMYlDOu5rSasmwo4E9S8vLiLnUuhUNZa1CW0hkALTG
3OlHgBJE6mj+VG58dt+MsiIOgD/ba+OmV/WYGz59pEU8w7NCa1JQW8CYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP5OmWL79ozSFBITY8dL9o4FPRCMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8AfgEi1
La2nJ+G747V1dIDguVUgXQjePoxFDbT/sjRQnanjKLvakCG93Xi/LuoRI/pflD2R
EBr8rTNCsIbThWWdbXFQxwx5wJydw+oP4BHQYC3ToFgRQ5u+kDLuzvysi5pk/nGl
PEQQxSfJ4cTrUK9JyBLBV/1ZLLogssvssBu1NmCys0SYgyO8g+3h0BtKpooSJhXH
VkTJrK7Eu8UM2THpXwbhmOwMdaKSVLKrNAL/HC3+EMK/syIRkM4lfPZAfxXmTS0C
Q2JgP1E8gfGuAVOuL4AKHOPntMp6zao9zgim9FmFlRnrI/EEVYAfz55SKn6GDyxK
nEXjj1y3ctemBw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:44 2026 by rpki-client