
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: xLeiUKo8cliAXc1M/G+n1Uhatt3LUT48ytrOFQK78/g=
Subject key identifier: B3:7F:B1:B8:C3:C8:AB:C0:4E:0E:33:D6:C0:DB:C5:05:0A:CF:42:84
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 01A17995F629C9B62672666CB694AD2929FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 1666
Signing time: Mon 26 Oct 2026 19:00:33 +0000
Manifest this update: Mon 26 Oct 2026 19:00:33 +0000
Manifest next update: Tue 27 Oct 2026 19:00:33 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: Q5Ysl3n9ajN9d+hJH+kFM/XEkjY52Vzhp+dCm5fHWRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:f6:29:c9:b6:26:72:66:6c:b6:94:ad:29:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Oct 26 19:00:33 2026 GMT
Not After : Oct 27 19:00:33 2026 GMT
Subject: CN=b37fb1b8c3c8abc04e0e33d6c0dbc5050acf4284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:70:83:2c:7c:8a:04:0c:2f:40:45:10:33:
38:73:4f:a6:03:8d:dc:ed:6e:2e:7c:e6:c7:92:db:
0f:7c:8b:23:b2:c7:b7:f8:2c:c6:7d:40:2e:20:95:
91:68:87:ff:fe:42:a5:4b:33:13:81:00:ee:93:3a:
90:3f:63:d4:27:d7:d1:df:d2:06:c2:52:b4:d5:7e:
a7:d8:d8:b9:4e:ae:fc:bb:31:e9:62:76:8e:87:00:
f0:5c:00:d1:09:80:62:93:d0:e7:73:36:bb:3f:1b:
7f:1f:d0:34:6c:05:40:3f:1b:4b:ec:20:88:18:1f:
88:da:7a:13:f5:51:8d:d3:1c:47:a9:0f:ac:12:68:
da:82:fd:f3:23:35:57:42:f9:5f:fb:b9:09:f3:e0:
fc:c6:39:84:ed:44:72:27:d8:3b:24:90:1f:52:ff:
e2:9d:15:47:85:96:ab:88:bd:e1:31:41:e0:60:ad:
21:57:7c:77:dc:64:02:95:46:f1:7a:6d:a3:20:9a:
4e:0d:04:9f:ce:4f:41:6b:9f:65:4f:97:1b:c7:60:
95:c2:26:ed:6d:55:33:a7:3b:eb:94:fe:a3:0e:88:
1a:ce:6a:d7:17:e7:39:ca:2f:74:25:65:79:a1:46:
5e:5c:01:03:45:90:b4:02:1e:17:7e:80:5d:b6:0b:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7F:B1:B8:C3:C8:AB:C0:4E:0E:33:D6:C0:DB:C5:05:0A:CF:42:84
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bd:dc:fc:44:fa:f3:ed:b4:ab:d5:f4:90:50:12:6b:86:5a:
62:56:57:08:87:75:16:3a:a7:4d:03:2a:b3:48:25:8e:02:68:
26:1a:ef:f8:f7:e3:b0:d8:a0:8c:b9:4d:a6:d0:74:f8:0a:86:
ba:38:87:d0:d0:d4:01:1b:5d:93:a4:84:1f:ac:d3:10:d5:e2:
e5:f0:e3:35:2d:6e:d9:f6:83:3b:8c:2b:83:6d:2b:49:03:09:
bd:3e:8f:48:77:3b:24:7d:f6:9f:04:f0:67:1b:65:50:6a:34:
d3:28:f0:a5:86:62:46:d1:aa:db:72:6b:fd:09:23:5f:90:63:
a6:6b:29:5f:9a:61:10:55:ae:2b:70:c1:3e:7f:2a:1c:1a:8f:
bc:e4:5f:c5:06:23:91:30:c1:39:e9:d7:cb:12:27:d9:38:78:
64:af:80:31:c4:fb:3d:cd:0a:92:3e:88:be:0f:08:b9:b9:c7:
f6:ea:95:69:90:b8:f4:0e:09:d4:71:5f:6f:cb:0f:57:48:81:
a9:28:98:74:81:62:51:9c:cd:b7:91:01:d5:b6:cf:e4:a1:cf:
54:cc:e2:bd:d2:30:ec:1e:88:44:bd:4f:43:aa:d0:30:ba:27:
c9:16:bc:d1:33:f0:da:1b:a3:15:e0:a9:a1:f5:78:16:17:62:
b5:c8:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:07:36 2026 by rpki-client