Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier: 8rmuQpF6WKTF3GJMXzp2KTELOOU/YUaEbLr8FUo8Xi0=
Subject key identifier: 19:05:A6:8C:07:8D:37:F6:85:0C:DE:73:4E:38:EE:7C:62:44:48:C4
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 019D39E5A32D7C33ABB0ED90EFD569ECBEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number: 160C
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: XkDke9PcR2SQgQDAfo8jrp1yReGf5eZubExr4Cm3gAA=)
2: Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa (hash: SCSIsdEZbyMjuC8DKEAv4wcXnrW/bCbmZfUciq6h+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a3:2d:7c:33:ab:b0:ed:90:ef:d5:69:ec:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=1905a68c078d37f6850cde734e38ee7c624448c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:9f:b0:4c:33:0b:1b:99:8f:0c:fb:7f:66:
92:ec:7e:3d:35:12:df:e2:47:73:4e:1a:8d:a6:a4:
5a:40:e4:42:db:da:2f:71:0e:6d:48:58:d0:f5:3b:
e7:4d:96:f7:6f:93:8a:eb:65:69:7a:03:1e:01:a2:
42:d5:0d:2b:26:a2:83:79:77:79:78:ea:e7:b0:73:
bb:da:56:4d:d7:bf:3c:5b:25:28:43:c9:b4:a8:e7:
9d:da:62:4b:57:4f:73:c7:fe:1d:3f:28:d4:32:ad:
a8:b7:32:c6:93:58:49:10:73:08:25:d1:4c:c6:ee:
f2:9f:19:58:c6:fa:bf:a9:f0:49:a4:f7:70:da:27:
9d:a5:9e:ff:73:16:44:e2:99:95:8c:94:4a:64:80:
a8:4b:04:52:4f:a1:1e:46:df:77:b9:28:e0:bf:d5:
e6:64:a6:e7:f7:f5:e9:7b:3b:fa:2a:ed:44:e4:8e:
21:5e:83:0f:13:1f:db:c4:07:62:ca:33:45:23:80:
59:3e:d5:bc:90:05:9f:c1:ba:b7:54:d1:f1:58:00:
18:44:c4:f2:09:46:f0:92:b1:d1:f0:cb:b9:d0:14:
b0:56:5b:f0:28:74:1a:5c:13:be:af:92:1b:84:2e:
f5:1a:89:82:5f:26:0d:2d:db:ce:3c:d6:3d:c1:82:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:A6:8C:07:8D:37:F6:85:0C:DE:73:4E:38:EE:7C:62:44:48:C4
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:d6:10:b7:f9:7c:fc:3f:c9:27:24:66:98:16:5d:b5:bd:
28:b7:9d:45:3e:c2:19:30:fe:5e:1e:61:f5:84:56:86:16:98:
ed:1d:81:7f:42:3c:08:b0:49:af:71:24:bd:03:79:e4:6f:7a:
03:e5:cc:db:13:ec:3b:64:e2:c5:33:8c:46:d2:56:a1:43:f6:
e8:67:48:03:4a:b0:59:a7:ce:97:c9:1d:48:84:06:75:59:d3:
7c:6a:ac:f3:5b:34:36:6e:26:7c:dc:f0:5f:b6:7a:96:d5:07:
01:4f:15:12:8e:80:d5:26:f0:62:ce:d5:df:cf:0a:17:29:4e:
14:05:c2:5d:0a:15:06:6a:49:da:05:2d:d9:cc:ee:8d:86:78:
fc:8d:2f:cd:6b:63:86:2b:a7:95:45:51:b2:fc:8f:96:f6:79:
ca:f8:27:9b:02:cf:fe:70:dd:a0:26:98:d1:38:76:31:ab:f8:
bd:de:f5:78:8c:f6:7a:a5:79:c1:c0:ba:99:97:2e:38:5a:1a:
bc:32:85:ed:01:77:d2:17:48:6e:74:2f:38:dc:77:10:21:5c:
79:90:9e:43:61:82:4c:8b:c0:7f:74:38:d8:0d:61:de:aa:f8:
20:f0:55:41:d4:07:ab:38:78:b3:c6:4a:73:08:d4:c2:3c:67:
b5:ac:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:48 2026 by rpki-client