Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: sNMz1W/HijG7ir/kZQy0tCtoO0sAJ0H04aRLdd/lAoc=
Subject key identifier: 1B:35:28:87:E3:0F:D1:A7:7F:67:8E:17:67:DC:42:95:0C:F8:CF:B3
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019D25BA5621F4F1BEE9ABFB26F75ABD7BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0D3D
Signing time: Wed 25 Mar 2026 16:01:01 +0000
Manifest this update: Wed 25 Mar 2026 16:01:01 +0000
Manifest next update: Thu 26 Mar 2026 16:01:01 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: Uazzc9lyuQuLfw/R/ibJ0wlPhmjrgPttd2IE1xpKa+A=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:56:21:f4:f1:be:e9:ab:fb:26:f7:5a:bd:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Mar 25 16:01:01 2026 GMT
Not After : Mar 26 16:01:01 2026 GMT
Subject: CN=1b352887e30fd1a77f678e1767dc42950cf8cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:b6:39:bd:3b:a4:3b:bb:8d:51:67:89:57:
e9:5b:eb:e0:7a:41:5e:9d:4a:2d:ee:c3:b5:68:0e:
ab:3a:04:48:6a:c3:c8:46:73:67:46:58:14:b2:41:
3a:b3:78:12:06:05:bd:47:e5:32:25:b8:d1:bd:65:
55:57:a1:25:eb:d2:53:9c:41:d2:8d:d0:1c:b7:a9:
57:df:7f:24:e8:9c:34:6a:41:70:9a:53:8e:2e:a1:
16:61:b1:f0:d0:95:eb:45:19:2b:46:99:e1:84:c9:
b5:d0:7c:69:df:a7:f9:9d:4c:85:70:36:52:a2:2d:
2a:27:91:c2:9d:99:d6:0b:cb:5a:f0:79:ca:d9:df:
f7:dc:0b:3d:a5:b9:59:14:4d:c5:85:1b:24:7f:9c:
80:34:4d:35:3d:0a:93:75:34:2c:ff:d7:ff:a1:41:
82:80:40:a8:39:db:46:8f:bf:4f:e4:c0:d7:d7:d9:
27:da:bf:be:3a:65:73:01:a3:c5:8e:29:3c:60:21:
ea:ca:9f:c9:ce:d3:6e:2b:77:6e:a9:d8:5d:24:dc:
b0:da:6e:ce:71:f7:dc:21:d9:e5:6c:79:91:c1:db:
34:b1:2d:a6:6b:7f:3f:38:fd:8d:54:71:1a:15:0b:
37:29:98:72:82:66:63:6d:3f:61:25:4a:1b:17:7f:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:28:87:E3:0F:D1:A7:7F:67:8E:17:67:DC:42:95:0C:F8:CF:B3
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d6:30:5c:7c:2d:30:16:c4:0d:dd:4f:87:1b:00:c3:e6:9b:
1f:87:4a:f8:fe:5e:27:59:21:d0:9b:ba:a3:73:ca:2c:0e:b2:
a4:e0:a8:d8:bc:1e:90:c1:77:69:ad:6a:93:67:95:7f:c9:c0:
11:d4:27:96:16:3b:86:ec:a3:f1:95:c5:8a:f4:e6:c3:41:35:
bf:18:83:0a:ac:31:e9:e8:e6:ab:18:da:60:e2:e2:29:e7:89:
b4:28:3a:7f:93:f1:a9:3a:13:70:fa:dc:c2:f2:a5:53:ea:1c:
f7:ce:42:27:cf:48:c9:41:ef:ac:79:4c:a0:c1:c8:75:63:5b:
32:41:92:d5:1d:38:68:c9:f0:c2:b2:a5:c8:11:71:da:a7:b1:
10:d3:db:57:2e:eb:19:82:1b:29:ba:67:52:2d:1d:46:7d:93:
6d:b0:6b:12:8d:e3:c7:6f:b5:21:15:ee:f6:b1:82:9d:ca:53:
86:ba:27:3f:0c:70:35:a2:0a:58:f4:1f:f4:f2:97:6d:7f:28:
5e:42:e7:74:c3:e5:59:30:e4:fc:fa:ac:27:9b:a3:c9:bc:ea:
8d:55:57:02:b2:eb:8f:ab:e2:8a:e0:73:cc:35:7b:52:2b:77:
da:73:a5:63:00:07:41:fe:c6:a0:51:44:21:18:6d:70:cb:e1:
dc:6e:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client