Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
File: FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft (raw, json)
Hash identifier: cd6nPlruEYjrTMbvr7eJs5hZ/OuA1hNEYRtguMv/Cos=
Subject key identifier: FD:B1:73:F4:D5:9C:01:42:89:82:9F:FB:D8:51:A8:44:7F:02:B0:C3
Authority key identifier: 17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
Certificate issuer: /CN=1703244c9df2252ead4436d91df6b84404145a60
Certificate serial: 019F5B5A980CD3F42E4DEF3D83A1C0956583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
Manifest number: 24
Signing time: Mon 13 Jul 2026 12:01:31 +0000
Manifest this update: Mon 13 Jul 2026 12:01:31 +0000
Manifest next update: Tue 14 Jul 2026 12:01:31 +0000
Files and hashes: 1: FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl (hash: 5SXBNjgL9s1mJ+LUOUvgDUUAc++y/8gRuL7X2hFUWxM=)
2: xU7UoNQMWPE1i86W4dVgdFTRphY.roa (hash: q2xkz4MQhyERngQ8lq1SS1tWjkdb+8VOT+aKd0BdBYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:5a:98:0c:d3:f4:2e:4d:ef:3d:83:a1:c0:95:65:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1703244c9df2252ead4436d91df6b84404145a60
Validity
Not Before: Jul 13 12:01:31 2026 GMT
Not After : Jul 14 12:01:31 2026 GMT
Subject: CN=fdb173f4d59c014289829ffbd851a8447f02b0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:d6:19:d3:db:e3:88:75:8e:dc:a2:70:56:
c5:33:63:15:f9:07:ed:c1:a1:79:dd:d9:48:d5:58:
a3:9a:07:8e:44:ae:f0:d5:a4:48:53:4a:e5:c8:ef:
79:1d:2c:c5:00:4d:67:89:a4:aa:73:8f:45:09:ce:
22:ea:a8:6c:cc:a6:4c:37:37:c9:6e:88:f7:09:d9:
ee:22:c0:06:3b:51:9d:2c:16:92:e6:41:2e:46:cc:
8e:60:45:04:2b:7a:ae:6c:64:6e:f5:9b:a2:43:27:
73:29:6d:f5:4f:03:6d:0b:cf:15:36:25:8e:67:cc:
7b:bc:c5:db:8d:17:c4:87:5d:a3:3c:3f:9e:aa:a9:
91:48:f0:30:3d:af:f3:df:fa:e2:78:62:bd:c1:8e:
63:1e:df:b5:32:fe:49:ff:67:59:c3:7a:40:a7:57:
29:31:0e:c8:54:7a:91:c2:f2:fd:a3:a4:f3:3c:78:
b0:ac:12:98:1e:10:3b:00:4e:34:df:9f:3c:57:b0:
3d:63:91:bd:d4:b7:fe:68:56:af:32:69:a3:c9:b8:
16:1e:5c:e5:87:2f:0a:46:e1:cc:0e:d5:80:58:8b:
c1:93:d4:5d:74:ac:b9:24:2b:78:54:e7:20:21:24:
b0:52:46:34:71:7e:4b:03:88:3e:a4:93:3c:1d:ad:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:73:F4:D5:9C:01:42:89:82:9F:FB:D8:51:A8:44:7F:02:B0:C3
X509v3 Authority Key Identifier:
keyid:17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9c:09:df:c9:da:ac:39:5e:24:c5:d9:34:fb:fb:fd:3c:3a:
a7:65:75:75:33:e3:65:1b:f4:5b:08:cf:77:c0:a7:83:57:80:
14:03:22:d6:dc:5d:21:10:ff:d6:4e:d7:cc:27:74:80:82:61:
84:f2:c0:71:d3:69:a5:6a:93:f5:9e:78:ce:9f:1e:05:03:d9:
f0:f3:39:6a:79:d6:d3:0d:f6:1d:0d:62:10:f8:b8:fa:e8:0e:
e5:b8:f1:ff:be:df:95:eb:9a:11:cb:e3:18:e6:64:58:5a:e3:
3f:05:e6:99:5b:9e:37:45:1e:02:c4:5f:94:a3:6b:26:8c:b9:
48:69:e1:2f:f2:b7:c8:8d:82:3a:a6:2a:e1:3e:f7:7d:e4:69:
72:f6:84:53:a5:22:7c:00:5b:6b:79:38:fa:49:ec:e3:fa:94:
87:2f:92:37:99:53:27:f9:cd:28:17:0a:b8:2f:b5:29:7d:a2:
f4:f2:f7:84:5b:e0:6d:49:12:93:8e:a5:e4:db:72:f2:c2:31:
c4:36:62:45:c2:54:34:d3:11:8c:7e:ce:55:ef:61:fe:84:46:
86:81:89:82:84:5c:14:62:9d:bc:b5:64:0c:25:36:5a:9b:69:
be:58:8f:b0:f4:09:04:86:74:d9:4f:e8:e2:5f:cb:2f:85:e5:
36:54:81:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9bWpgM0/QuTe89g6HAlWWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDMyNDRjOWRmMjI1MmVhZDQ0MzZkOTFkZjZiODQ0MDQx
NDVhNjAwHhcNMjYwNzEzMTIwMTMxWhcNMjYwNzE0MTIwMTMxWjAzMTEwLwYDVQQD
EyhmZGIxNzNmNGQ1OWMwMTQyODk4MjlmZmJkODUxYTg0NDdmMDJiMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjWGdPb44h1jtyicFbFM2MV+Qft
waF53dlI1VijmgeORK7w1aRIU0rlyO95HSzFAE1niaSqc49FCc4i6qhszKZMNzfJ
boj3CdnuIsAGO1GdLBaS5kEuRsyOYEUEK3qubGRu9ZuiQydzKW31TwNtC88VNiWO
Z8x7vMXbjRfEh12jPD+eqqmRSPAwPa/z3/rieGK9wY5jHt+1Mv5J/2dZw3pAp1cp
MQ7IVHqRwvL9o6TzPHiwrBKYHhA7AE403588V7A9Y5G91Lf+aFavMmmjybgWHlzl
hy8KRuHMDtWAWIvBk9RddKy5JCt4VOcgISSwUkY0cX5LA4g+pJM8Ha2srwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2xc/TVnAFCiYKf+9hRqER/ArDDMB8GA1UdIwQY
MBaAFBcDJEyd8iUurUQ22R32uEQEFFpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZwJ38na
rDleJMXZNPv7/Tw6p2V1dTPjZRv0WwjPd8Cng1eAFAMi1txdIRD/1k7XzCd0gIJh
hPLAcdNppWqT9Z54zp8eBQPZ8PM5annW0w32HQ1iEPi4+ugO5bjx/77fleuaEcvj
GOZkWFrjPwXmmVueN0UeAsRflKNrJoy5SGnhL/K3yI2COqYq4T73feRpcvaEU6Ui
fABba3k4+kns4/qUhy+SN5lTJ/nNKBcKuC+1KX2i9PL3hFvgbUkSk46l5Nty8sIx
xDZiRcJUNNMRjH7OVe9h/oRGhoGJgoRcFGKdvLVkDCU2WptpvliPsPQJBIZ02U/o
4l/LL4XlNlSBTg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 14:00:27 2026 by rpki-client