Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: 448EG0RJirPg05KX3iCu1EXKpbAGQshwryT/Mh//11E=
Subject key identifier: F2:42:CB:B5:14:CF:6A:27:FE:8C:20:61:0D:76:A0:40:C9:DB:AA:DB
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 019E1CDCDD40088F27D8C71B571B8D63FA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: 02
Signing time: Tue 12 May 2026 15:44:57 +0000
Manifest this update: Tue 12 May 2026 15:44:57 +0000
Manifest next update: Wed 13 May 2026 15:44:57 +0000
Files and hashes: 1: 987UGQBHlhAIBmJTT98LsfM70nU.asa (hash: /Hx349Kl9/8y8esH0xOTWfAlCzS+ip2tVIt9KgmRjp8=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: mroqabw2n45o/JYA5lqQCfS2tdCotPcqSarYXvoLSEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:dc:dd:40:08:8f:27:d8:c7:1b:57:1b:8d:63:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: May 12 15:44:57 2026 GMT
Not After : May 13 15:44:57 2026 GMT
Subject: CN=f242cbb514cf6a27fe8c20610d76a040c9dbaadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:17:01:df:d1:38:3d:91:15:a7:e9:f2:bd:
06:54:c0:b8:56:da:36:cd:a3:ff:ab:37:d3:70:43:
d3:90:7a:7f:e7:ba:c1:4a:ca:8e:55:c8:81:92:76:
e9:c9:d1:5a:50:22:ea:57:0d:74:8c:8e:3c:f4:73:
05:82:8a:d3:a4:33:b9:93:b6:58:90:15:d6:cd:f9:
00:98:19:84:f8:6c:07:02:51:90:8f:10:41:26:d2:
69:98:88:59:76:c5:0f:18:59:1a:e9:d2:40:7a:1d:
96:a1:c1:d6:31:53:d7:fe:d7:9e:4d:cc:6f:92:02:
f5:c2:07:b6:dc:e6:20:0d:d3:27:fa:29:ba:0e:a6:
2d:b3:f7:ea:99:fe:ec:b8:3b:03:20:de:ae:3f:5f:
62:99:96:84:d5:ad:b9:b8:73:6b:16:e2:ad:4f:cc:
19:0f:11:a0:27:1c:14:d2:d5:4a:28:44:82:68:1f:
e2:9a:76:08:67:f5:73:ea:b0:11:88:88:83:e9:c0:
2c:e7:d6:82:ce:42:76:44:d3:06:30:87:57:b4:09:
5e:15:f9:23:d4:87:26:bf:0d:76:51:51:19:2d:16:
4f:32:a7:86:8e:b7:4d:c0:41:0b:13:64:34:8b:5c:
29:85:15:00:d5:c9:e5:7c:28:01:83:ec:f5:01:94:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:CB:B5:14:CF:6A:27:FE:8C:20:61:0D:76:A0:40:C9:DB:AA:DB
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fa:52:e0:e2:a3:03:9b:87:80:b0:9a:26:9c:50:0f:fd:4a:
61:af:d1:95:88:88:15:70:dd:d7:11:b7:d5:70:54:4b:15:b0:
e9:13:0b:0b:ee:13:10:cf:82:df:8d:5a:b3:14:08:b8:20:28:
ae:51:8e:b6:fe:e1:48:e7:df:30:c2:4a:14:fd:e9:69:e6:b7:
9e:3e:20:4d:d1:df:52:82:bc:68:6c:b1:4b:1b:1e:6b:cf:33:
1a:d2:88:12:f0:a9:8e:94:10:82:36:82:b5:59:71:34:66:f3:
1f:66:d4:b4:fb:b2:b1:73:37:58:f2:0d:7e:c1:f4:84:88:25:
27:a1:45:9e:92:03:8d:29:de:72:ad:dc:3d:0f:9e:35:0b:00:
5b:5d:3f:0f:b7:a5:9e:41:75:e6:2a:d0:7f:b2:7e:86:ea:76:
1f:a3:1b:f0:cf:3b:10:f8:6a:8e:31:e2:fa:85:8c:b9:c2:06:
07:7a:ae:78:12:63:d7:80:31:7f:e6:f3:d8:25:20:36:8a:b5:
42:99:15:0b:fa:d1:60:3b:ea:4d:4e:f3:d2:7f:51:7c:21:b5:
20:77:b9:f0:87:24:e4:a6:fd:96:d1:72:22:5d:9d:ba:6e:7e:
b8:5a:b4:0f:cb:db:9b:3b:12:7d:ad:90:fd:17:d3:6d:7d:96:
e2:2a:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:28 2026 by rpki-client