
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
File: FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft (raw, json)
Hash identifier: im87Wlh2dIv1l0EH06pGoMJmuqFD4Z7V9UZZtFNlC3A=
Subject key identifier: FA:0D:3C:D3:C5:0F:49:FE:C9:85:0D:58:23:28:3C:65:CD:07:2A:17
Authority key identifier: 17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
Certificate issuer: /CN=1703244c9df2252ead4436d91df6b84404145a60
Certificate serial: 01A13C37C2A01044AB00CA95043383C1DCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
Manifest number: 011D
Signing time: Wed 14 Oct 2026 21:00:49 +0000
Manifest this update: Wed 14 Oct 2026 21:00:49 +0000
Manifest next update: Thu 15 Oct 2026 21:00:49 +0000
Files and hashes: 1: FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl (hash: XmczcPLavJQPmTpIe8MLQsg07GC9KD0TkoAn7Szi19I=)
2: xU7UoNQMWPE1i86W4dVgdFTRphY.roa (hash: q2xkz4MQhyERngQ8lq1SS1tWjkdb+8VOT+aKd0BdBYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:c2:a0:10:44:ab:00:ca:95:04:33:83:c1:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1703244c9df2252ead4436d91df6b84404145a60
Validity
Not Before: Oct 14 21:00:49 2026 GMT
Not After : Oct 15 21:00:49 2026 GMT
Subject: CN=fa0d3cd3c50f49fec9850d5823283c65cd072a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:ed:ea:cd:71:89:0e:7b:a2:b7:c7:d9:ff:
c5:a7:a7:7d:da:18:da:98:2e:9c:90:37:5a:fb:19:
5b:38:8d:42:f2:9b:03:3e:f5:bc:cc:23:12:78:89:
73:9b:69:1a:4b:47:80:26:54:12:d2:ef:8a:9a:b7:
25:09:22:e5:9a:e0:1d:87:a9:a8:07:bb:89:69:fe:
5f:d1:40:52:6f:b1:ed:08:03:cc:4a:11:41:34:e7:
6e:f0:8a:7d:60:2c:a4:41:3e:55:a7:a5:5a:82:65:
db:76:65:a1:a0:fa:e4:d9:57:bc:ed:6c:bb:b3:19:
69:7c:55:8f:1b:56:35:08:7c:3f:73:e0:7b:64:bf:
d8:90:9f:8a:f6:c3:f3:f9:6d:05:49:c1:54:20:fc:
82:35:f3:cb:81:20:89:29:95:9f:c5:88:36:18:08:
a2:c3:8e:dd:43:09:40:f4:10:e5:bb:81:07:73:8c:
29:80:0b:fd:41:d4:78:cd:35:b5:32:77:f9:2d:42:
04:77:fa:cd:b4:dc:03:5f:b3:00:a3:5c:4b:a6:1e:
c4:65:df:e4:de:6c:ed:f7:89:9b:74:3f:2d:6a:71:
2a:62:98:cc:8a:0e:2a:d6:de:16:f8:9d:37:50:0e:
c7:4f:ba:20:c8:dd:48:96:f6:fe:0b:0b:ee:27:0c:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:3C:D3:C5:0F:49:FE:C9:85:0D:58:23:28:3C:65:CD:07:2A:17
X509v3 Authority Key Identifier:
keyid:17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:3d:1f:f4:dc:fc:ac:6e:e3:b3:3e:a5:6c:1f:1c:e5:3a:
b2:cb:0e:68:34:1f:8c:a0:40:85:a7:19:4c:e7:20:d1:a4:8f:
ac:f5:b6:33:65:fe:cd:7f:87:f0:2f:aa:ed:d6:b5:83:13:c2:
45:f1:49:68:59:06:cc:36:4c:9b:8b:08:ce:51:50:47:f7:5c:
64:3c:ed:8d:0a:10:6e:32:6c:6c:75:9a:6e:96:5f:32:fa:84:
89:76:43:5e:44:48:c1:d9:f8:df:68:ce:98:63:a9:7a:1d:1b:
ca:06:af:a7:b9:99:0e:8b:d0:40:6a:64:55:ac:b0:82:38:ea:
5b:63:3a:e7:72:b5:80:0b:2e:17:55:60:24:8d:ae:75:3f:f5:
9c:c2:68:60:09:d1:74:33:30:74:56:96:77:e3:f6:05:89:3a:
ab:e3:a8:23:7d:9e:2a:91:52:bb:fc:3b:dd:4f:76:05:8b:88:
fd:ea:b5:b3:de:0e:ec:7b:ed:3b:90:3c:2e:7f:d3:d8:f5:55:
b8:84:91:51:72:34:70:0b:7d:92:d4:c0:37:83:86:94:f5:67:
57:b0:bf:1e:d5:5e:78:ea:f9:8a:d9:85:76:bb:b8:7c:a3:50:
1d:b1:10:75:23:95:f9:a7:1a:00:c1:be:44:23:1b:b2:ad:e5:
73:3d:b7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8N8KgEESrAMqVBDODwdzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDMyNDRjOWRmMjI1MmVhZDQ0MzZkOTFkZjZiODQ0MDQx
NDVhNjAwHhcNMjYxMDE0MjEwMDQ5WhcNMjYxMDE1MjEwMDQ5WjAzMTEwLwYDVQQD
EyhmYTBkM2NkM2M1MGY0OWZlYzk4NTBkNTgyMzI4M2M2NWNkMDcyYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06jt6s1xiQ57orfH2f/Fp6d92hja
mC6ckDda+xlbOI1C8psDPvW8zCMSeIlzm2kaS0eAJlQS0u+KmrclCSLlmuAdh6mo
B7uJaf5f0UBSb7HtCAPMShFBNOdu8Ip9YCykQT5Vp6VagmXbdmWhoPrk2Ve87Wy7
sxlpfFWPG1Y1CHw/c+B7ZL/YkJ+K9sPz+W0FScFUIPyCNfPLgSCJKZWfxYg2GAii
w47dQwlA9BDlu4EHc4wpgAv9QdR4zTW1Mnf5LUIEd/rNtNwDX7MAo1xLph7EZd/k
3mzt94mbdD8tanEqYpjMig4q1t4W+J03UA7HT7ogyN1Ilvb+CwvuJwxpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoNPNPFD0n+yYUNWCMoPGXNByoXMB8GA1UdIwQY
MBaAFBcDJEyd8iUurUQ22R32uEQEFFpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdU9H/Tc
/Kxu47M+pWwfHOU6sssOaDQfjKBAhacZTOcg0aSPrPW2M2X+zX+H8C+q7da1gxPC
RfFJaFkGzDZMm4sIzlFQR/dcZDztjQoQbjJsbHWabpZfMvqEiXZDXkRIwdn432jO
mGOpeh0bygavp7mZDovQQGpkVaywgjjqW2M653K1gAsuF1VgJI2udT/1nMJoYAnR
dDMwdFaWd+P2BYk6q+OoI32eKpFSu/w73U92BYuI/eq1s94O7HvtO5A8Ln/T2PVV
uISRUXI0cAt9ktTAN4OGlPVnV7C/HtVeeOr5itmFdru4fKNQHbEQdSOV+acaAMG+
RCMbsq3lcz23Sg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:17:11 2026 by rpki-client