Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: 2X7MzG8FeFlz7naPVus1UFB9tEilniWqTnz20KmVb/I=
Subject key identifier: E3:8D:B5:B2:8C:A4:47:FC:61:B0:8A:73:4C:52:CE:E8:04:D0:93:12
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 019D38D3955C869D4F8E7EAB750176008B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 1847
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: NLQhLApFgdpmksvM9c8xhhFiMWXyfnbpZTliGj8VwE4=)
2: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (hash: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ=)
3: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (hash: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:95:5c:86:9d:4f:8e:7e:ab:75:01:76:00:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=e38db5b28ca447fc61b08a734c52cee804d09312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:96:95:e4:bc:c1:09:4f:79:b7:9f:ab:1c:
60:95:1a:a3:7b:5a:1c:a5:61:55:27:3a:2d:a5:ff:
64:0c:c2:e9:2c:1d:f0:e6:9e:e9:2b:ca:3e:07:13:
fc:42:3e:02:eb:79:2e:28:c1:cd:8d:d6:7c:8b:ef:
79:ca:ef:ee:2f:d8:17:62:50:a5:f9:f4:87:b4:d2:
68:ae:84:95:53:27:2d:34:4f:9e:25:43:bf:01:47:
86:c2:b5:91:17:00:4c:e2:ef:de:90:94:47:fa:c2:
a5:bb:33:99:8a:6d:3b:f4:c4:b5:58:42:43:e5:18:
4e:e2:62:ae:98:95:d6:9b:8c:0e:5e:31:06:1e:25:
4f:96:54:1b:10:be:9f:80:89:b4:a8:0a:bf:37:ba:
a3:bf:db:8e:98:59:92:0b:2e:5e:93:92:5e:ae:fe:
f8:fd:15:16:08:05:ae:92:93:49:50:2a:65:94:8a:
39:ae:64:89:af:da:c8:49:e7:19:40:30:8a:a1:c3:
33:57:90:67:db:77:cf:63:55:35:89:30:c4:45:48:
7a:0b:2a:f3:58:78:38:f0:0c:b8:be:2e:31:96:0d:
0a:f5:77:91:7a:78:6c:33:3e:50:99:35:ea:2e:05:
ed:c3:69:44:d3:4c:39:02:7c:96:2d:5d:d6:cf:7e:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:B5:B2:8C:A4:47:FC:61:B0:8A:73:4C:52:CE:E8:04:D0:93:12
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:26:f1:74:14:f9:41:6f:8b:2b:b8:e1:ae:25:a0:2a:90:3d:
54:1f:ff:b9:f6:6b:94:61:ed:4f:c1:2b:d7:4c:70:a1:1c:91:
43:cd:01:ed:08:cf:71:23:ac:6e:a9:85:91:f8:90:72:20:c3:
eb:3e:00:04:34:ea:48:53:da:45:e3:ba:71:8f:00:1d:20:75:
08:60:eb:2d:a8:3d:4c:b6:f5:02:30:bf:f7:91:a5:7e:c3:69:
60:c3:33:96:86:9b:f4:2b:30:3b:e4:ea:da:72:29:dc:31:93:
41:38:67:82:b9:eb:bc:65:84:85:ec:cc:1e:d2:1b:8d:54:48:
ff:fc:8d:7d:65:fa:cd:22:b8:6c:06:db:e2:7d:e7:0c:81:f4:
76:08:3c:e8:87:44:ad:ab:62:13:91:f5:0e:a0:bf:6f:d3:71:
64:87:f8:08:c0:4f:e2:d8:94:5b:6c:f6:1e:4d:30:75:f7:f7:
89:1f:59:32:09:4b:b9:6e:d4:ec:3c:43:be:b8:43:ee:e6:bf:
1c:e3:77:69:c5:76:59:87:04:7a:1c:ea:c3:a3:0c:d6:e5:db:
21:ba:b5:9f:8f:58:a1:bb:56:c0:40:fc:81:82:15:3a:86:9c:
bd:05:0d:f9:a6:b6:d1:04:a6:26:0c:4b:c2:0f:97:07:03:13:
7e:26:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:46 2026 by rpki-client