Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: bAKLeoIlAchEsDCxs4IVyJlM6QyQBJkIK5uZNzqpq1E=
Subject key identifier: BA:D0:87:9A:A5:25:A9:F3:05:96:FC:78:8C:40:EC:F6:87:6F:0F:A1
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 019D382E4DBEE6DF4950C27A1ECCEADA3184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: Der6FTM0zFNBcUHHMY71MrqTmEc.roa (hash: 15RROQNtC1R+TRcA+13wCXLiC5eJf1QCPFeKw8n24YU=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: lvCg5WehYsy4xNgKvNQ6pswZQek+/GgjhWWU7/2WVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4d:be:e6:df:49:50:c2:7a:1e:cc:ea:da:31:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=bad0879aa525a9f30596fc788c40ecf6876f0fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:da:26:03:c8:a2:56:2e:18:a4:a8:b0:e3:
41:bb:3a:50:b6:97:72:4f:4d:1d:14:c3:c7:9b:80:
64:28:95:89:e5:9b:d3:c0:f2:b3:c4:de:ef:ff:a7:
95:11:2b:5e:bd:76:4c:9c:c6:47:36:fe:e9:5c:83:
fe:c1:c1:8a:25:42:52:18:16:f5:00:ec:1c:63:04:
2f:ed:54:8a:21:18:b7:73:1a:d4:47:46:eb:09:8d:
b2:60:e8:1a:ca:29:69:4f:9f:ce:34:bd:b0:5e:0d:
28:0e:b1:b1:b2:bc:88:85:a7:55:d2:f8:b7:95:3a:
e0:f9:ed:e0:26:a0:bf:30:77:8d:a9:47:b8:ff:33:
d5:51:0d:a0:80:25:f1:2f:79:84:e2:54:96:40:f9:
2d:95:18:fe:ca:12:ad:9f:2d:d9:ba:b7:84:f2:87:
a1:c8:13:60:cc:19:3c:bb:d1:ba:fc:7c:e4:4f:cc:
f1:57:21:67:95:1d:bc:d0:2c:64:f7:f4:c3:b3:89:
cc:b8:e2:46:02:ee:31:1f:a9:51:a4:83:34:bb:e5:
0a:95:27:46:3d:c9:2f:15:92:91:d1:90:d9:9f:16:
22:ac:f3:dd:51:d3:2d:8e:47:3e:b6:e5:74:2b:c7:
32:99:06:01:53:27:45:34:e5:9a:38:3b:99:1f:bc:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:87:9A:A5:25:A9:F3:05:96:FC:78:8C:40:EC:F6:87:6F:0F:A1
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:3b:b0:87:2c:73:21:0e:ef:cd:cd:54:5d:1b:9e:fc:8e:
e5:31:83:3e:04:f1:ee:ce:e0:33:95:ca:81:f0:4b:77:54:28:
18:9a:c7:92:25:02:ed:7d:86:68:31:ef:10:c2:49:c9:62:e7:
5b:a5:9b:d0:35:08:95:59:ad:3f:24:05:42:ec:39:a6:19:d5:
79:f5:46:0f:17:63:5f:c4:dd:4a:a4:74:41:fe:9b:50:5c:10:
e1:65:76:6d:0c:90:7f:d6:8f:c8:83:07:4e:23:13:fd:8c:79:
8a:6a:8c:b2:6c:e0:0d:0b:d6:9d:fb:72:dd:58:8a:bb:05:21:
5f:15:ba:4e:b2:e7:34:b4:90:59:f6:09:b7:a8:12:cb:a9:a8:
bc:be:77:f1:e1:41:1a:6d:42:53:7e:3a:43:e7:5d:b2:2d:01:
98:e2:19:6b:9d:d0:40:a0:72:76:f4:cd:97:61:80:f4:e3:10:
0c:93:fe:77:ba:92:99:67:8f:e2:8d:47:6a:e9:03:25:14:c5:
f6:24:5e:e6:03:e8:f3:61:89:0e:21:d3:be:60:6e:a9:ce:58:
9c:fa:af:0f:42:2a:18:d5:c8:3e:65:9e:d7:65:06:a2:70:37:
e6:fa:01:f9:87:13:3a:c9:9c:81:2b:c4:ce:c7:86:9e:45:42:
52:5c:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:55 2026 by rpki-client