Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: NKMu+fHLT1IluP1OseVzw8mD73f7VumM05v46cpDCrc=
Subject key identifier: 24:F9:10:65:93:F2:8B:BA:05:C7:50:D3:E5:21:FF:95:50:51:6F:E9
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 019D2C6133A10CCB836B575C8BED9D0BD25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 23:01:00 +0000
Manifest this update: Thu 26 Mar 2026 23:01:00 +0000
Manifest next update: Fri 27 Mar 2026 23:01:00 +0000
Files and hashes: 1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: vSvTrUC8pqrAJCOy2GFq3kO80cv6F1BUtAWIzmrIFBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:33:a1:0c:cb:83:6b:57:5c:8b:ed:9d:0b:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Mar 26 23:01:00 2026 GMT
Not After : Mar 27 23:01:00 2026 GMT
Subject: CN=24f9106593f28bba05c750d3e521ff9550516fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:35:6d:63:67:c6:60:27:32:33:79:4d:8f:
a1:ee:04:3f:08:e7:3d:48:45:f6:60:42:a6:ed:f6:
54:c2:f1:04:87:43:fa:69:2a:80:59:f4:cf:0d:94:
69:e9:26:2d:b8:c1:e1:11:b4:2f:4e:37:db:06:c5:
fa:00:6a:70:49:a0:16:bf:9f:04:8e:15:b9:31:35:
28:25:80:bd:e6:1e:92:68:fc:95:c2:38:29:94:c1:
94:0c:47:4b:b1:86:d5:74:15:a5:a5:f6:3a:32:a4:
73:ee:e2:2b:f5:ba:54:03:dd:35:f8:53:ef:9f:76:
66:1d:0f:dd:af:28:a3:96:43:63:3a:18:33:57:5a:
d4:61:cb:f0:4a:30:b0:28:8d:6d:c7:f6:16:9e:0a:
48:1e:63:68:d9:e9:4c:02:f3:8f:e7:8a:eb:88:68:
8c:bd:5f:a7:e8:cc:9a:c2:55:6a:f7:44:02:31:85:
ac:b7:b3:ce:f7:84:1f:3b:c8:d5:8e:8f:85:cc:a7:
99:53:64:ee:f5:1c:bc:4a:9c:c1:58:eb:81:3d:f1:
4b:f0:71:53:6c:3b:fa:60:9a:4b:8c:69:f2:b0:0f:
11:cd:e4:e9:d5:49:8c:f4:93:e6:66:97:0e:17:94:
e0:e8:aa:ab:70:36:a9:98:49:d7:14:39:df:b8:5c:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:10:65:93:F2:8B:BA:05:C7:50:D3:E5:21:FF:95:50:51:6F:E9
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:df:f4:fe:14:74:5c:96:ed:39:1e:d5:6b:9f:36:75:42:2b:
75:9c:36:c3:25:56:e1:0f:fe:3a:b1:58:92:03:15:81:cb:cb:
7f:09:2f:0d:39:30:ca:d3:f9:9f:5c:af:2c:0d:6e:9a:3a:8a:
86:09:5f:e5:4c:e1:7b:c9:85:b6:7a:74:14:66:b7:5c:ef:e3:
00:16:fd:4f:64:75:2c:6f:b0:71:30:01:c6:74:16:1c:97:e4:
7c:d3:9e:df:bf:08:f8:19:a8:3e:60:5f:76:fa:6a:88:2f:7c:
f2:2a:bf:b4:e6:af:e8:45:90:17:ff:41:cc:a0:8f:fa:91:56:
91:72:f5:fa:8b:6d:b4:9c:4f:9a:3f:a6:dd:29:35:32:4b:35:
de:5b:45:17:11:3b:10:04:b3:68:61:0d:f3:03:5e:36:01:60:
f0:f1:2f:92:a5:16:02:49:fb:8d:c3:3a:78:1a:cb:8e:02:85:
f5:c7:c7:3f:ce:ae:f2:fb:d5:4d:24:e5:79:3d:33:aa:2e:86:
e1:95:25:bf:f9:9c:54:6e:b9:be:06:8c:4f:1b:f9:b8:d3:1d:
50:1f:8b:23:03:7d:24:1e:ba:99:d2:ef:25:80:a5:fc:75:27:
04:37:9c:c6:df:bc:12:99:28:8b:5d:76:b6:66:a0:e4:57:a3:
64:a9:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:13:42 2026 by rpki-client