Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: 9qeYK2pXUyIa0ETaDh2xWUZUHvq7H5AfKwFWIO/htm0=
Subject key identifier: A8:E7:A2:7A:CA:F2:16:41:43:13:55:7C:28:73:A9:91:0C:29:7F:9F
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019D37BFF942213B27362106A21810A503F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 145E
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: L6BWLjJb/nA3/tR8nujuHi8xVNKFA0OaZkwC2jYwjG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f9:42:21:3b:27:36:21:06:a2:18:10:a5:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=a8e7a27acaf216414313557c2873a9910c297f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:a9:da:f4:25:75:cc:8e:cf:43:2c:e4:d7:
6d:09:1d:1e:b0:d5:56:f3:4f:5f:a1:8e:1c:78:2b:
6c:9a:d5:61:ba:0e:9d:97:79:e8:40:1f:9d:a0:bf:
24:04:a8:1f:3d:84:9d:cb:26:e7:89:5f:14:35:f0:
28:b2:b2:f8:1c:3a:23:73:02:74:b9:e0:27:23:37:
0f:25:da:d2:61:b9:d6:59:ed:16:4c:0c:3a:0d:00:
8e:e3:9f:88:a5:c9:ab:a0:72:82:e7:54:00:a8:32:
ae:9b:43:cb:eb:e0:17:60:88:a9:a6:62:97:54:36:
ad:f2:0d:24:34:49:1a:f1:78:50:dc:14:67:8b:a6:
e9:65:22:39:0f:09:c5:1b:69:6b:ac:21:41:93:7e:
8a:46:51:bd:e6:4d:92:7c:1f:c9:34:1c:05:76:5d:
b7:3a:e5:5f:02:88:77:d5:20:c5:da:d6:fa:98:98:
dc:df:c4:1d:30:3c:13:7e:f3:b5:82:43:f7:d0:5f:
cc:03:77:75:0b:13:b7:a0:03:44:de:0d:cf:f6:d6:
6a:58:cd:8c:8b:6b:ec:f4:d0:85:bd:d6:0f:64:09:
1f:03:20:b0:2d:0b:4e:6e:1f:d1:22:73:9a:90:5f:
98:fe:42:74:2a:3e:91:41:00:ef:fa:0e:b5:7c:94:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:A2:7A:CA:F2:16:41:43:13:55:7C:28:73:A9:91:0C:29:7F:9F
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:00:0f:91:8a:e1:f7:1f:2b:b9:92:db:6a:5a:d4:7e:ae:20:
e2:0e:de:ee:dc:35:78:c2:f4:bc:ea:7e:e3:c5:d8:22:e2:c6:
d8:c4:7e:71:6c:5f:88:7d:a1:c7:1c:5d:d3:56:8f:e0:d5:2d:
4e:5b:8b:6e:79:89:af:61:23:08:6e:16:ee:52:d4:61:f3:ff:
ed:50:a4:38:7c:f3:63:c1:30:47:ce:44:03:d9:85:43:31:08:
b2:dc:17:9e:02:52:c6:7f:92:23:20:56:06:66:b2:7f:cb:aa:
15:0e:91:9e:6d:b3:83:db:d2:32:25:f6:1d:1a:f6:35:2e:73:
9f:22:a3:89:94:a7:6f:f5:c2:4d:c2:be:ff:9e:52:3f:c3:fe:
9c:96:26:56:0f:f5:12:be:34:aa:d2:ae:28:43:d0:95:ae:2a:
87:f6:91:10:3f:8f:9e:7d:47:28:7a:8c:b0:71:95:30:8f:23:
ed:44:ea:e2:1e:03:18:ac:b2:0d:e6:85:e7:31:18:8e:ef:8b:
9d:6a:7a:65:65:c9:2e:fe:7a:02:81:32:11:11:fc:4a:3e:3e:
c8:c7:7a:98:6e:80:8a:8a:8a:8b:44:d9:22:6f:dc:25:80:c0:
ca:07:bc:56:db:8e:a5:ef:6d:73:2a:f3:b5:98:41:a9:ab:53:
ac:67:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:13 2026 by rpki-client