Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: eTIofOMpWk6EKPjfWMq9NDxFGtEBSseGWJfRchG75yY=
Subject key identifier: 69:0F:CB:66:B1:B1:EB:5C:74:E3:F3:49:CA:48:23:66:32:25:95:80
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 01A0D4949EEF99A93EC2BE38A81FA27AFD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: 016B
Signing time: Thu 24 Sep 2026 18:01:44 +0000
Manifest this update: Thu 24 Sep 2026 18:01:44 +0000
Manifest next update: Fri 25 Sep 2026 18:01:44 +0000
Files and hashes: 1: 7xRY0_J3nLs2Zbb4HbRJUTAaX5E.asa (hash: uI1w3b4d5QuNJ3MgHfhxvrNeSonJzAut2AEIwecCKBU=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: RF91e4egOSVDMzho+CXBO7kLNWQiLUEcFbaHp5quTu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:9e:ef:99:a9:3e:c2:be:38:a8:1f:a2:7a:fd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Sep 24 18:01:44 2026 GMT
Not After : Sep 25 18:01:44 2026 GMT
Subject: CN=690fcb66b1b1eb5c74e3f349ca48236632259580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:aa:bd:75:f7:f3:9e:33:27:9a:86:5f:bd:
e6:43:46:2d:48:d3:b1:cc:ad:d5:27:cd:25:58:5d:
0c:f6:a2:c3:04:10:a9:2f:e3:8f:31:be:70:1f:05:
05:9e:e8:6f:86:10:40:62:38:3b:cd:90:21:53:5e:
c4:45:5d:4f:a6:6c:02:fe:f5:56:54:d2:f5:a9:20:
22:32:9d:0f:80:db:e8:41:51:f6:88:d9:7e:dc:2d:
40:04:ca:17:65:78:a4:b4:96:b5:e6:46:49:b8:b0:
06:3a:55:96:10:f1:27:5b:d5:58:e0:f0:86:4a:fa:
fb:a6:3c:10:24:d8:ac:da:a4:54:c7:73:b8:cb:c7:
14:ef:54:5a:13:ed:15:5d:bc:93:04:f4:0b:8a:f0:
18:c6:18:68:c5:c6:b4:20:8d:91:64:f4:d2:e3:b6:
e2:06:7f:e9:cc:ea:f4:e0:24:b0:c1:88:c1:80:e3:
82:2b:81:21:c2:35:87:60:ab:82:48:c7:9b:01:ea:
5b:c1:33:30:75:a5:af:32:89:70:fb:b2:ee:48:cc:
ec:d5:a4:42:5e:65:b0:c2:bf:61:83:34:d4:c2:f8:
a0:9b:22:46:c5:4e:6b:87:9e:06:86:68:6c:1d:71:
da:e0:c2:d1:0d:e5:ed:0e:89:ed:0a:b9:21:aa:20:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:CB:66:B1:B1:EB:5C:74:E3:F3:49:CA:48:23:66:32:25:95:80
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:64:d9:fe:1e:a6:08:68:32:b6:f5:cc:34:db:02:74:97:
a7:94:ff:3c:94:db:83:cd:e0:d2:25:75:34:a9:c2:5d:64:dc:
ca:24:87:06:a6:53:26:77:e1:5c:33:82:1f:9c:e5:32:49:77:
f0:7b:d4:34:5e:b8:23:bd:66:9a:1a:3d:30:ef:92:de:e3:50:
03:8e:df:91:cf:7b:05:95:b4:d8:90:02:01:98:f0:55:97:f4:
3f:66:a0:d9:12:68:8d:fd:a6:75:4b:2b:aa:bc:63:b8:0d:a4:
27:57:df:4e:63:15:ae:c3:c3:3a:b9:f8:5b:86:82:eb:78:8f:
8b:56:21:b7:18:e0:20:dd:bd:8b:60:ee:06:d3:3c:d0:06:53:
7e:b9:e3:a5:80:cc:c7:96:bd:e8:43:6c:84:dd:28:ae:45:0d:
53:3e:bc:15:a3:e9:3b:35:2c:d2:64:8a:b3:a3:22:12:6c:60:
d4:10:98:1b:43:26:6c:2b:cb:01:d5:c3:b9:35:28:90:dd:4e:
75:09:47:21:00:f3:46:9d:cf:3c:17:c0:ae:e5:1a:02:5c:a8:
d7:65:2a:14:61:e5:7e:41:c8:a0:21:24:84:51:32:5f:87:93:
60:8e:2a:a6:a5:82:1b:a0:9f:51:f9:64:57:4b:1e:21:89:9d:
77:e9:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:43:17 2026 by rpki-client