Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: RNfkzFzoa4FJJsd6BowMILoacIEjPnc7/NjSY3x3RLs=
Subject key identifier: D9:45:42:C8:14:18:6E:3E:9D:19:0E:32:25:76:E6:A8:B0:44:B2:04
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019D39AF36C7A67CE7A3E72B7F6441B3C391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 1634
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: 7hQGxNEwXzFQHnO33q6Dg6EvewKlHTmN84QvAmnJiMg=)
2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:36:c7:a6:7c:e7:a3:e7:2b:7f:64:41:b3:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=d94542c814186e3e9d190e322576e6a8b044b204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:5e:d2:e0:05:ab:66:a5:51:18:3d:ea:ff:
2e:e7:b1:de:fc:e1:72:88:c3:de:ec:26:35:ea:1a:
8b:e9:bc:d4:47:23:f2:24:7d:e9:06:c6:19:8f:3f:
c2:b8:0e:b6:15:89:83:10:1c:b7:a2:5a:4e:48:3f:
cd:51:64:3e:2b:ec:e3:1e:1f:8e:ba:16:6a:e2:a2:
fe:2c:00:27:e8:f2:77:4b:b8:75:da:d0:e1:5a:33:
0d:2c:42:44:c3:f0:2e:81:fd:05:44:82:1c:e6:19:
a6:9f:07:c3:81:44:62:40:6d:e5:59:65:51:30:1f:
e7:cd:db:5f:91:05:b5:24:e1:1d:ea:56:13:39:1d:
b5:92:50:c1:4d:98:e2:8e:3c:b9:d7:6d:98:b8:f4:
65:91:49:20:11:50:43:fe:57:b1:11:45:62:d3:02:
83:51:0a:f9:74:4e:bf:dd:50:4e:0d:cc:77:f0:0b:
1f:b0:ab:ae:d2:82:d6:2e:9a:4d:9f:d3:83:47:97:
33:b6:d4:58:f8:44:1c:2d:b3:3f:cc:f0:45:14:ca:
e5:f9:f0:47:34:80:bb:53:8f:05:b6:c8:6e:f8:66:
5d:c6:52:c0:fa:79:60:9f:f7:3f:13:34:47:68:35:
ff:cd:8c:dc:a7:89:47:b3:38:43:41:94:b4:6d:63:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:42:C8:14:18:6E:3E:9D:19:0E:32:25:76:E6:A8:B0:44:B2:04
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:d5:2e:a2:51:46:39:af:f1:1e:bc:a7:c4:c2:07:94:72:
fd:ab:0b:b1:72:e9:11:af:cc:62:26:6c:41:13:6a:ad:65:19:
fe:6e:ec:15:ff:c3:b4:82:72:30:6c:f8:91:0a:1f:8b:2e:e2:
5f:35:1b:8e:a8:1a:17:3c:a3:3f:ad:49:1a:d9:c2:ba:0e:fa:
7a:7a:ff:e5:9e:57:85:e8:be:63:27:f1:30:7b:35:ba:a3:18:
7e:f4:d7:44:06:c6:24:46:fe:c6:b7:b2:b1:d7:6d:32:0f:0f:
be:79:5c:e7:7a:e4:31:3c:43:69:0e:e8:4c:e6:90:69:46:73:
46:08:22:b4:44:61:a1:ce:8d:d2:2b:cf:38:63:ce:2f:5b:4e:
4d:ac:04:e2:01:bb:1b:f4:95:3e:5e:f5:fa:bc:82:2e:e7:d7:
c8:cb:01:b5:cf:29:31:8b:eb:e3:57:6b:64:be:93:79:83:ff:
e3:00:25:0a:bc:e4:a6:92:44:30:4b:ae:31:11:94:38:46:aa:
c1:4b:44:6e:d4:6a:2a:dc:77:11:b4:b2:bf:71:f3:83:0b:53:
11:11:09:2d:6a:66:1b:fa:49:4d:fe:fc:52:43:58:86:cb:b4:
e8:7e:55:5c:0d:97:2f:84:4d:15:dd:9b:a0:da:43:39:0c:50:
47:b1:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:47 2026 by rpki-client