Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: dtCEyg02FsypkrYCFJYRA9DV6tXpdL5DABPqHu9H3Z8=
Subject key identifier: 56:49:05:13:91:59:C2:C2:10:F3:DB:8F:13:0A:59:EE:77:F8:C1:F7
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 019F8E34A62B2603EC1BC5F996D83F6ED537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: C2
Signing time: Thu 23 Jul 2026 09:00:42 +0000
Manifest this update: Thu 23 Jul 2026 09:00:42 +0000
Manifest next update: Fri 24 Jul 2026 09:00:42 +0000
Files and hashes: 1: 7xRY0_J3nLs2Zbb4HbRJUTAaX5E.asa (hash: uI1w3b4d5QuNJ3MgHfhxvrNeSonJzAut2AEIwecCKBU=)
2: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: WDvGD2Kk/r6smiBX5iRvApxu8vyd3lTzpLf33KSeJ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:a6:2b:26:03:ec:1b:c5:f9:96:d8:3f:6e:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Jul 23 09:00:42 2026 GMT
Not After : Jul 24 09:00:42 2026 GMT
Subject: CN=564905139159c2c210f3db8f130a59ee77f8c1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:1d:96:9e:7a:4e:e2:9e:97:0f:e3:a8:f5:
c5:e5:c9:cc:d6:59:7b:a7:ad:90:ae:20:02:59:97:
4f:8a:9a:06:76:b7:13:48:b5:07:c4:04:16:9e:de:
55:03:c5:fa:cc:0e:c1:ef:de:ac:13:e7:db:28:73:
f2:db:63:6d:60:4d:13:7a:e2:a4:27:70:70:cb:c4:
ff:2a:da:8d:ac:29:d3:7f:80:08:80:5d:7e:5f:e6:
4d:0c:0a:35:0d:41:e1:86:54:98:23:74:4a:db:89:
e5:be:ef:90:54:86:fc:d9:9e:b4:49:24:b6:0e:83:
7d:ca:22:31:be:84:21:bd:dc:c7:90:b9:1f:1f:34:
4d:a5:d2:7e:17:bf:a1:b3:dc:b5:ff:d7:f3:d5:1d:
6b:de:3d:24:18:ab:ba:97:cf:a0:6a:0a:08:86:f2:
e7:38:32:81:a6:6e:e8:16:95:44:59:47:3c:3d:9b:
c5:65:3a:83:f2:89:c5:11:b5:83:ea:8b:00:c9:64:
37:d8:c8:67:8e:48:fb:d2:12:cd:c6:c6:24:27:7a:
54:5f:4d:ff:8b:ab:89:20:61:e8:5a:d2:f1:db:84:
05:71:f4:4e:bb:9b:62:cb:d8:c2:66:dd:0a:98:8f:
90:54:07:7c:ac:a3:87:ee:2f:b9:cc:8e:ed:86:7d:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:05:13:91:59:C2:C2:10:F3:DB:8F:13:0A:59:EE:77:F8:C1:F7
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ee:8b:3c:25:21:1c:30:30:b0:c0:8e:71:28:e3:34:00:c4:
86:f0:34:64:cf:a5:a0:95:93:56:9f:33:87:68:0a:da:89:f7:
a5:e7:0c:0c:56:d7:90:4e:a3:43:7a:c0:b1:34:a1:6b:52:b7:
36:80:83:d5:fd:5c:8e:03:ef:3d:56:c1:e5:e2:3f:73:4a:32:
cd:63:87:6c:c1:e1:e7:02:cd:7e:77:98:c0:b2:7c:ea:e8:78:
a6:18:02:82:b0:74:09:c7:e9:c1:a8:42:57:4e:e4:f6:94:f9:
b2:b0:e8:c6:e1:32:98:43:18:fb:c0:09:1b:4c:da:77:5e:43:
1c:f9:5a:8e:c6:c8:9a:85:ef:ec:02:5c:66:13:99:99:69:4e:
f8:2b:f8:ca:59:b4:d9:84:07:68:6d:82:0d:37:f2:07:dc:6f:
35:52:72:0c:c1:5c:5f:de:12:10:1d:f2:a8:2f:78:e9:68:61:
10:8c:a7:82:4d:11:9b:24:5a:91:0a:02:74:fb:a9:d2:af:c8:
c1:1a:f4:29:df:b3:af:f0:62:fb:63:04:dd:e4:80:1e:e9:20:
e7:b5:c3:5e:3b:34:78:bb:4d:17:60:8c:28:94:c9:3a:98:47:
2e:0d:b8:13:ad:0f:3d:fa:01:fb:12:b5:b5:26:42:ab:8b:49:
5c:78:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:34 2026 by rpki-client