Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: qQA9H9jHBgYq/r0nB9/DJIcX9XexWdoxIbmRbVETYSY=
Subject key identifier: A6:2B:01:14:32:7D:EA:44:E8:6C:A4:9A:F4:2F:A2:4C:5C:3C:19:82
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 019F38977A944D513E11C6F91664CDEDFF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 1950
Signing time: Mon 06 Jul 2026 18:01:19 +0000
Manifest this update: Mon 06 Jul 2026 18:01:19 +0000
Manifest next update: Tue 07 Jul 2026 18:01:19 +0000
Files and hashes: 1: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: vxf5aQQeQ5wb+jKPtkOusfNz7QSxlzeGacABiSHCy5M=)
2: k_G1ZFjYUPyK2QRfmzTUpmsw2pI.roa (hash: uVOKy0IsUQzC+AmA38qUj8H8RAvlkN0eTQJ2zY0TLiQ=)
3: mUrmdVAmGjiB7zwfPp3bUNP6nc0.roa (hash: CKlXjn15KiqQ6c64HVpnruwpKB/QDTcGzdHGePWVYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:97:7a:94:4d:51:3e:11:c6:f9:16:64:cd:ed:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Jul 6 18:01:19 2026 GMT
Not After : Jul 7 18:01:19 2026 GMT
Subject: CN=a62b0114327dea44e86ca49af42fa24c5c3c1982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:4d:51:84:17:1a:bd:d1:0e:15:ac:ae:2c:
a0:e0:de:5c:00:06:10:a5:c4:8b:45:11:f9:8e:2d:
35:6a:81:0e:7f:25:48:c9:df:60:be:f7:7b:4d:29:
34:08:b8:c5:71:ba:9b:83:8d:c2:a9:54:96:cc:08:
c2:9f:d9:8c:c0:74:66:80:52:f3:bb:98:c2:b3:2c:
27:8c:bc:50:b0:65:41:e5:75:82:be:bb:59:48:00:
ed:7a:92:85:21:b5:b0:04:4a:26:a1:b8:db:f6:fb:
a0:5a:1e:49:b2:eb:12:e1:44:62:9f:33:58:c0:2a:
fd:ec:6d:9c:6b:1b:4a:11:7a:41:e7:84:17:84:15:
8c:d3:22:82:63:8d:a1:ad:03:a2:c6:35:9a:e9:9d:
f4:16:0c:73:43:51:73:61:bb:cf:18:52:7e:d1:44:
d4:a2:61:e6:dc:2b:4e:a2:1e:33:49:31:6d:ab:f6:
a0:f9:96:bc:3c:16:46:b6:79:ff:48:da:9e:9e:fc:
37:de:40:81:6e:c5:52:21:8e:1c:48:f1:bf:03:a9:
79:2a:89:be:50:1f:cc:a8:76:89:b3:9a:29:23:7a:
25:73:e8:3a:a5:98:c5:23:ca:08:75:81:df:4e:26:
70:b9:c7:24:1e:c5:3c:92:df:b3:ad:bd:ff:45:18:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:01:14:32:7D:EA:44:E8:6C:A4:9A:F4:2F:A2:4C:5C:3C:19:82
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:84:4e:1c:e3:4a:62:0e:d8:40:09:7b:d7:4c:aa:3f:8f:54:
8b:fc:f7:e0:33:44:d9:7d:f1:de:86:df:67:33:c8:04:20:a2:
3d:5a:81:4e:0f:0d:c0:23:52:27:ed:7f:f0:ae:84:3b:9b:cb:
62:13:17:c1:0e:75:9b:da:1f:0a:78:28:ce:04:b3:85:35:db:
12:13:94:82:55:03:46:71:b7:c9:4f:f5:ae:56:fc:e9:47:c0:
ad:3b:dd:84:b9:cf:c6:a5:5c:e2:b1:86:86:9f:b5:a8:53:c5:
ea:04:43:9b:4d:06:79:a0:7a:65:ff:fe:d3:63:e1:9f:be:78:
47:24:24:64:03:44:ea:0c:5f:a4:c3:03:57:2e:ca:34:16:c8:
9b:f3:36:fe:3f:93:ec:c6:91:94:b5:b3:eb:af:4a:15:49:7b:
b9:6e:5e:b9:cd:42:d7:b2:e6:f7:b5:51:16:22:56:7e:95:10:
ac:4c:f2:ae:0c:27:8c:50:b3:94:26:0f:14:90:3c:f9:cb:40:
3a:30:38:92:cc:27:a5:6f:e3:1d:79:f9:3d:60:6c:db:db:28:
dd:2c:df:bc:12:45:5e:b4:a4:58:2b:99:e3:67:e7:74:01:88:
c7:50:e2:29:26:34:e6:ee:22:6d:17:3b:65:c7:2c:b3:92:0b:
24:2c:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:17 2026 by rpki-client