Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: jNmrOQLa8rOaJWyqlONSc6MvtoY1CHDsZcG/cTr/3fs=
Subject key identifier: E3:8F:01:AB:E2:E2:01:9C:1B:2B:EB:88:31:AF:5D:80:5E:DC:09:A6
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 01A115976CFD3E1D33E1FA308F5DA48F5754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 1A47
Signing time: Wed 07 Oct 2026 09:00:07 +0000
Manifest this update: Wed 07 Oct 2026 09:00:07 +0000
Manifest next update: Thu 08 Oct 2026 09:00:07 +0000
Files and hashes: 1: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: zUJ0Hb3yxqPM15WVjzQ1KpFaEOoOM7XqdDxRPtAJTug=)
2: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (hash: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ=)
3: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (hash: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:97:6c:fd:3e:1d:33:e1:fa:30:8f:5d:a4:8f:57:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Oct 7 09:00:07 2026 GMT
Not After : Oct 8 09:00:07 2026 GMT
Subject: CN=e38f01abe2e2019c1b2beb8831af5d805edc09a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:7c:de:98:42:a9:89:08:62:c8:de:2b:f6:
e9:12:4e:12:6c:a6:c9:2b:0f:3e:52:0b:2f:33:1e:
b4:2a:8b:06:fa:52:a4:b9:a9:95:8e:c9:ed:ce:6a:
13:15:8e:fc:69:0d:1e:e4:42:e1:f3:90:e5:94:25:
4d:8e:5a:d9:9f:d6:65:fd:0e:57:c6:f3:37:91:59:
f1:f8:57:7e:d7:44:1a:96:3b:cb:7f:f8:90:00:4d:
82:1b:0f:9c:48:5b:12:d1:53:c7:6e:28:85:fa:33:
03:e2:14:40:0a:63:3e:80:01:f9:8c:90:eb:23:8b:
7c:0a:41:f0:5a:2f:61:65:d7:49:da:80:4a:d3:83:
1f:24:24:f3:cf:7c:ca:0b:5f:86:75:8c:f6:b2:0a:
84:d7:6f:d9:cd:c4:73:68:0d:98:73:87:93:92:9c:
e6:ee:98:05:fe:33:cc:15:3b:dd:8a:3d:6c:da:0e:
e9:8d:5a:da:d5:dc:6a:e0:77:d6:d9:84:e5:8a:4a:
38:05:c5:49:df:99:c4:95:58:3a:9a:7a:d1:a0:ca:
b3:b3:7d:69:c6:02:72:97:8d:14:d2:06:44:52:43:
73:e8:5c:23:c6:de:e4:25:d3:aa:47:69:a4:d0:8b:
d9:33:87:c5:9e:46:a2:47:47:a9:0e:fb:44:10:be:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:01:AB:E2:E2:01:9C:1B:2B:EB:88:31:AF:5D:80:5E:DC:09:A6
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:43:bb:59:c5:8a:74:f7:c2:7f:f8:69:d9:a0:e3:61:9e:
a5:88:af:c5:c6:9a:bc:c7:a1:76:1f:2b:01:24:99:40:77:44:
67:f6:f5:c1:83:9d:f9:a3:d6:f8:bb:44:6e:e4:d0:25:38:74:
48:d8:12:bc:d9:99:c1:b6:d5:5a:75:94:70:c9:be:bd:5e:43:
fb:5f:98:91:b4:31:c8:a8:69:ba:e0:75:ae:bc:b1:24:16:2a:
aa:1e:7b:0e:7e:fe:6e:ab:4d:e3:fd:06:3a:76:ca:9d:2b:b2:
5c:06:b1:2b:3c:6e:34:c3:2b:cd:be:0e:41:fe:96:46:80:5c:
2e:24:fc:84:08:33:0e:2b:39:19:94:6e:8c:94:c7:d1:1d:01:
f2:ac:2f:d8:9a:31:60:ac:11:65:73:b7:1d:a4:44:1c:a4:80:
85:ae:38:bc:df:fc:b3:52:b8:97:68:44:00:06:bc:76:e4:e2:
48:67:5d:dd:e1:e7:ca:e5:17:e0:17:5a:14:a6:ed:1f:a9:4c:
81:1b:78:a1:ac:5d:49:f6:09:2c:69:ef:f1:b5:ac:af:ea:14:
8a:ca:be:ce:1d:ec:de:b2:cd:33:b5:f5:7f:d0:42:52:cf:b2:
3b:bb:ad:bf:4a:38:96:f6:f0:ef:48:d9:0f:75:cf:f2:55:a6:
e6:9c:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:04:30 2026 by rpki-client